Insights from our experts.
Perspectives on infrastructure security, autonomous systems, and what it means to eliminate exposure instead of manage it.
Featured blog posts
)
Tailscale vs. Terniion: A zero trust access comparison
Tailscale made private networking painless. See where its device-trust model runs out of room, and how Terniion compares on real throughput and setup-time data.
)
Twingate vs. Terniion: Your Zero Trust Boundary Might Be Stopping Too Soon
Twingate made zero trust easier than a VPN. Terniion makes it go deeper, with process-level access, no standing sessions, and nothing extra to deploy behind your firewall.
)
Can’t patch PHP2Shell today? Remove the path to PHP
Patching is the only complete fix for PHP2Shell. Here’s how internal apps behind Terniion stay out of attackers’ reach while you test and deploy it.
All blog posts
Can’t patch PHP2Shell today? Remove the path to PHP
Patching is the only complete fix for PHP2Shell. Here’s how internal apps behind Terniion stay out of attackers’ reach while you test and deploy it.
Twingate vs. Terniion: Your Zero Trust Boundary Might Be Stopping Too Soon
Twingate made zero trust easier than a VPN. Terniion makes it go deeper, with process-level access, no standing sessions, and nothing extra to deploy behind your firewall.
)
The Security Blind Spot in Long Lifecycle Assets
There’s a whole category of IoT/OT/CPS assets with long lifecycles like EV chargers, wind turbines, aircraft, ships, industrial machinery, and medical devices whose systems last a long time and are vulnerable to dangers that change quickly.
Tailscale vs. Terniion: A zero trust access comparison
Tailscale made private networking painless. See where its device-trust model runs out of room, and how Terniion compares on real throughput and setup-time data.
)
CISA's Water Utility PLC Alert: What It Actually Takes
CISA just told water and wastewater utilities to get their PLCs off the internet after attackers hit more than 30 Minnesota water systems. This piece looks at why that guidance is harder to execute than it sounds for small municipal utilities, and what closes the gap without a bigger budget.
)
MCP servers in the enterprise: Bounded access, tamper-evident logs, and why both matter
MCP is in enterprise production. The question now is whether your implementation is actually bounded or just assumed to be.
)
How Xiid's MCP server satisfies SOC 2, ISO 27001, and NIST audit controls
AI agents are taking real infrastructure actions now. Most enterprise logging can't prove what happened. Xiid's MCP server can.
)
TCP Setup Time is the VPN Metric Nobody's Measuring
VPN setup time benchmark: SealedTunnel™ vs WireGuard, IPsec
)
Autonomous Attack Paths: The Security Problem AI Is Creating
As organizations deploy AI agents, autonomous workflows, copilots, and machine-driven orchestration platforms, the actions that matter are no longer primarily human-initiated.
Want to stay up-to-date with Xiid?
Get the latest insights right to your inbox from our monthly Black Box Brief newsletter.