All Resources. Research, Reports And News.
Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.
Blog Claude Agent SDK in Python: Build an Alert Triage Agent A Claude Agent SDK tutorial in Python: build an alert triage agent that calls an MCP server, blocks other tools with a hook and waits for…
Blog OpenCTI vs MISP Compared: Run Both Locally and Query Them With an AI Agent Compare OpenCTI and MISP side by side on data model, API, memory and license, then run both in Docker and query them with an AI agent…
Blog Turn a Threat Report Into ATT&CK Mappings and Sigma Rules With an AI Agent Let an AI agent map a CISA advisory to ATT&CK and draft Sigma rules, then check them with sigma-cli, pySigma and ATT&CK data. A real run,…
Blog SOC Triage With the Elastic MCP Server and a Brandefense MCP Stand-In Connect Claude Code to the Elastic MCP server and a Brandefense MCP stand-in, triage a VPN alert with real tool calls and get a sourced note.
Blog Build a Brand and Phishing Watch With dnstwist, crt.sh and an AI Agent Run dnstwist and crt.sh as read-only MCP tools. Of 7,503 name variations 8 resolve: 4 ours, 4 look-alikes. Claude Code drafts a takedown a person approves.
Blog MCP Scanner Test: Three Tools Against a Poisoned MCP Server Snyk Agent Scan, Cisco MCP Scanner and devlab on a clean and a poisoned MCP server: what each caught, what it sent out and which false…
Blog Red Team Your Threat Intel Agent With Garak, Promptfoo and PyRIT Run garak, promptfoo and PyRIT against a threat intel agent, map the findings to MITRE ATLAS and OWASP, fix them and re-run to see the before…
Whitepapers CISO Decision Guide: Don’t Wait for the Next Vulnerability to Get a Name Turn PHP2Shell and Node2Shell into a 90-day readiness program: three decisions, four response clocks, a regulatory map and eight editable tools for CISOs and their teams.
Security News Tailworm: Which Tailscale Features Are Exposed, and What to Do Now Tailworm lists 11 Tailscale and headscale findings by researcher Erica Windisch. Tailscale 1.104.4 fixes most; see who is still exposed and what to do. All 98 pages
Our Research, By Email.
Questions About All Resources.
Last updated June 17, 2026-
Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.
-
Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.
-
New items are added several times a month, newest first. Every item shows its date.
-
Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.
-
Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.
-
Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.
-
It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.