INSIGHTS
What we know,
shared openly.
Practical articles on open-source platforms, security data, integration, AI and teaching, from the team that builds and hands them over.
Stop paying your SIEM for logs nobody reads
Most SIEM bills are driven by volume, and much of that volume is never searched, alerted on or read. Classifying events before they reach the indexer cuts the bill without deleting anything.
Read the articleRules you can read: testing log classification with cases and near misses
A classification rule you can edit but cannot test is a risk, not a feature. Here is a seven-step process that makes every rule readable, provable and reversible.
Read the articleData moves member to member: a sovereign API exchange on the X-Road model
The X-Road model lets organisations exchange data directly and securely, without a central hub that sees or stores the payload. Here is how it works and what to get right.
Read the articleOpen source is free. Compliance is not: starting an open-source programme office
Every organisation that builds software already depends on open source. An open-source programme office turns that dependence into a managed, deliberate strategy.
Read the articleSBOMs explained: SPDX and CycloneDX in practice
A software bill of materials is a list of what is inside your software. Here is what the two main formats offer, how to produce them and how to make them useful rather than decorative.
Read the articleHandover is the product: designing platforms your team can own
A platform is not finished when it works. It is finished when the people who run it can operate, change and replace it without the people who built it.
Read the articlePrivate AI on your own servers: local models, MCP and governance
Useful AI does not have to mean sending your data to someone else's cloud. Local models, open protocols and plain governance make private AI practical today.
Read the articleAI is a friend of open source: code to innovate, not to re-create
AI coding tools make it tempting to generate everything from scratch. The better use is to build on proven open-source projects and spend the saved effort on what is genuinely new.
Read the articleTeaching open computing to 11 to 14 year olds: what works
Children of 11 to 14 can learn real open-source tools, including the Linux terminal, SSH and the firewall, when sessions are short, structured, playful and built on responsible use.
Read the articleGames that make children brave: gamification for learning and healthcare
Well-designed game mechanics can make learning stick and make unfamiliar experiences less daunting for children. Done badly, they distract. Here is the difference.
Read the articleApplication rationalisation in five steps
Most estates carry more applications than they need, with overlapping functions and costs nobody can explain. A disciplined five-step rationalisation reduces cost and risk without disrupting the business.
Read the articleSecrets out of scripts: why every estate needs a vault
Passwords and keys in scripts, configuration files and chat messages are one of the most common weaknesses in any estate. A secrets vault fixes the problem and makes handover safer.
Read the article