Blog

Three questions to ask about your MITRE ATT&CK coverage number

Before you trust a MITRE ATT&CK coverage number, run it through three questions. Here's what to ask, and why each one matters.

Blog

What Ten Companies Actually Do to Secure AI

Bias testing and AI code provenance are missing at nearly every company in our latest study. See the full activity-by-activity ranking.

Blog

AI Penetration Testing that Doesn't Cut Corners: Why the Human Stays in the Loop

AI penetration testing needs more than automation. See why a human-in-the-loop model is closing the coverage gap between shipping speed and test coverage.

Blog

What Our Latest Six Threat Advisories Mean For Next Quarter's Budget

Six TIDE advisories in six weeks point to the same gaps: unmanaged AI infrastructure, signature-based detection, and unreviewed vendors.

Blog

The NIST AI Risk Management Framework: The Foundation to Build Your AI Governance Program Upon

Three-quarters of companies have an AI policy. Few have a governance program. Here's why the NIST AI RMF is the framework to build one on.

Blog

Defending the Future: 6 AI Threat Case Studies Every Security Leader Needs to Know in 2026

Explore six critical case studies highlighting the operational risks of AI in cybersecurity, revealing how threat actors are evolving their tactics.

Blog

Inside UltraViolet Solstice: the architecture of human-led, AI-augmented application testing

Inside Solstice, UltraViolet Cyber's AI-augmented application penetration testing platform: how the two-lane engagement model works, what the engagement brain does, and why practitioner control is built into every step.

Blog

The Deployment Gap: Why AI Is Moving Faster Than the Governance Programs Built to Manage It

AI deployment is outpacing governance in every major survey. John Waller breaks down why inherited controls fail AI systems — and what closing the gap requires.

Blog

State-Sponsored Cyber Operations: 5 Motives Security Teams Need to Understand

UltraViolet breaks down the 5 objectives behind state-sponsored cyber operations, from IP theft to pre-positioning, and what each means for your security posture.

Blog

The AI SOC Hype Cycle

AI agents won't fix a broken SOC. UltraViolet CEO Ira Goldstein on why Detection-as-Code, unified telemetry, and adversary simulation are the AI SOC strategy.

Blog

The AppSec testing market split itself in two. Both halves are wrong.

Manual pentesting doesn't scale. Autonomous AI testing isn't ready for Tier 1 apps. UltraViolet Cyber's third option: senior practitioners augmented by Solstice AI.

Blog

90 Days to Compliance: Are You Ready for the Next Phase of the EU AI Act?

The EU AI Act's August 2, 2026 deadline is 90 days away. Here's what most organizations missed in their AI inventory, and how to close the gap in time.

Blog

CISOs Across Every Industry Are Modernizing Their SIEM — Here's Why

Legacy SIEM platforms are failing modern security teams. Learn why CISOs are modernizing now — and how to migrate deliberately before a vendor forces your hand.

Blog

Post-Quantum Cryptography Just Became a Federal Mandate: A Practical Framework for Quantum Readiness.

Post-quantum cryptography is now a federal priority. Learn the risks of delay, key policy drivers, and how security leaders can prepare with practical frameworks and adversarial validation.

Blog

OWASP Top 10 2025 and What It Means for Modern AppSec Programs

Explore what’s new in the OWASP Top 10:2025 RC and what it means for secure-by-design, supply chain defense, and modern AppSec programs.

Blog

Agentic AI Is Redefining the SOC: What It Means for Your Maturity Roadmap

Learn what it takes to build an AI-ready SOC. This guide explores the operational maturity required to support agentic AI in security operations, from high-fidelity telemetry to Detection-as-Code and machine-executable response logic.

Blog

Introducing the Industry’s First Credential for Trustworthy AI

Discover the TAISE certification: the first industry credential focused on AI governance, ethics, and risk. Learn how it prepares professionals to lead in the age of responsible AI.

Blog

Making Continuous Compliance Possible: From Vision to Reality

John Waller shares how security leaders can move beyond static audits to Continuous Compliance, bridging frameworks like NIST CSF 2.0 with real-time validation, automation, and accountability.

Blog

How to Approach a SIEM Migration: A Four-Phase Guide for Security and Engineering Teams

Learn how to plan and execute a successful SIEM migration using a proven four-phase framework. This guide covers key technical steps for maintaining visibility, reducing risk, and optimizing detection across teams.

Blog

Engineering Modern Detection: The Promise and Practice of Detection-as-Code

Explore how Detection-as-Code transforms security operations by applying software engineering principles to threat detection, improving efficiency, consistency, and resilience in modern SOCs.

Blog

Closing the Cybersecurity Skills Gap: Round-the-Clock Protection with UltraViolet Dedicated Defense Services

In today's rapidly evolving digital landscape, cybersecurity has become a top priority for organizations of all sizes. With cyber threats growing in sophistication and frequency, businesses are facing an increasingly...

Blog

A Primer on Vulnerability Management

Vulnerabilities are inescapable. Anyone who works in cybersecurity acknowledges that vulnerabilities are flaws in a system’s security that a malicious actor...

Blog

Cybersecurity Myths and Misconceptions: Debunking Common Beliefs

In the ever-evolving landscape of cybersecurity, myths and misconceptions can hinder our understanding and compromise our defenses...

Blog

From Blackmail to Blacklist: How Triple Extortion Turns You into a Ransomware Victim

The digital Wild West just got wilder. Ransomware, the scourge of modern business, has taken a sinister turn...

Blog

Understanding Ransomware: The Growing Threat and How to Respond

Imagine the scene: you open your morning email, a familiar sender in the subject line. Curiosity clicks in, but instead...

Blog

AI and Cybersecurity: Amplifying Human Expertise in the Digital Age

In the rapidly evolving domain of cybersecurity, Artificial Intelligence (AI) has become a beacon of hope, promising to revolutionize how we protect...

Blog

AWS Cloud Security Challenges: Key Insights for Enhanced Protection

Understanding and preventing AWS security risks.

Blog

Double Extortion Ransomware and the Heightened Surge of Conti Attacks

Government agencies, including CISA, FBI, and NSA, have issued a stern caution to US organizations regarding the escalating threat posed by Conti Ransomware.

Blog

LockBit 2.0 Emerges: The Next Generation Ransomware Unveiled

Similar to other ransomware-as-a-service (RaaS) operations, LockBit 2.0 has begun recruiting affiliates to carry out intrusions and exfiltration on targeted systems.

Blog

Microsoft IIS Web Server: The New Target for Malware Attacks

Discover the latest research by #ESETresearch exposing the IIStealer, a malicious extension for Microsoft's Internet Information Services (IIS) web server.

Blog

Unveiling the Exploitation: Zero-Day Weakness in MSHTML (CVE-2021-40444)

Microsoft shed light on a zero-day vulnerability (CVE-2021-40444) discovered in Microsoft MSHTML, which nefarious actors are actively exploiting through Microsoft Office documents.

Blog

Fortifying Kubernetes Security: Safeguarding Against Deployment Cyber Risks

Cyber actors are increasingly drawn to Kubernetes due to its underlying infrastructure, offering ample opportunities for resource theft and potential denial-of-service attacks

Blog

A Human-Driven Approach to Threat Hunting

UltraViolet Cyber's human-driven threat hunting methodology involves adopting unique methods, standards, and practices to detect and neutralize even the most sophisticated threats

READY TO GET STARTED?

We’re here to help. Get in touch for an initial conversation with one of our security experts and learn more about how UltraViolet Cyber can help you take cyber readiness and resilience to new levels.

Get Started

WHAT WE DO

*

HOW WE DO IT

Case Studies

Scaling Security Testing Without Starting Over

Explore

Resources

Three questions to ask about your MITRE ATT&CK coverage number

Reports

AISec Study: Closing the Gap in Enterprise AI Security

Events

Towerwall & MassBay 2026 Cybersecurity Summit

Webinars

More Coverage From the Security Stack You Already Have

The Coverage Gap: Is Your Pentest Program Built for How Fast You Ship?

All Ransom, No Ware

About ultraviolet

Latest News

Blog

Three questions to ask about your MITRE ATT&CK coverage number

What Ten Companies Actually Do to Secure AI

AI Penetration Testing that Doesn't Cut Corners: Why the Human Stays in the Loop

What Our Latest Six Threat Advisories Mean For Next Quarter's Budget

The NIST AI Risk Management Framework: The Foundation to Build Your AI Governance Program Upon

Defending the Future: 6 AI Threat Case Studies Every Security Leader Needs to Know in 2026

Inside UltraViolet Solstice: the architecture of human-led, AI-augmented application testing

The Deployment Gap: Why AI Is Moving Faster Than the Governance Programs Built to Manage It

State-Sponsored Cyber Operations: 5 Motives Security Teams Need to Understand

The AI SOC Hype Cycle

The AppSec testing market split itself in two. Both halves are wrong.

90 Days to Compliance: Are You Ready for the Next Phase of the EU AI Act?

CISOs Across Every Industry Are Modernizing Their SIEM — Here's Why

Post-Quantum Cryptography Just Became a Federal Mandate: A Practical Framework for Quantum Readiness.

OWASP Top 10 2025 and What It Means for Modern AppSec Programs

Agentic AI Is Redefining the SOC: What It Means for Your Maturity Roadmap

Introducing the Industry’s First Credential for Trustworthy AI

Making Continuous Compliance Possible: From Vision to Reality

How to Approach a SIEM Migration: A Four-Phase Guide for Security and Engineering Teams

Engineering Modern Detection: The Promise and Practice of Detection-as-Code

Closing the Cybersecurity Skills Gap: Round-the-Clock Protection with UltraViolet Dedicated Defense Services

A Primer on Vulnerability Management

Cybersecurity Myths and Misconceptions: Debunking Common Beliefs

From Blackmail to Blacklist: How Triple Extortion Turns You into a Ransomware Victim

Understanding Ransomware: The Growing Threat and How to Respond

AI and Cybersecurity: Amplifying Human Expertise in the Digital Age

AWS Cloud Security Challenges: Key Insights for Enhanced Protection

Double Extortion Ransomware and the Heightened Surge of Conti Attacks

LockBit 2.0 Emerges: The Next Generation Ransomware Unveiled

Microsoft IIS Web Server: The New Target for Malware Attacks

Unveiling the Exploitation: Zero-Day Weakness in MSHTML (CVE-2021-40444)

Fortifying Kubernetes Security: Safeguarding Against Deployment Cyber Risks

A Human-Driven Approach to Threat Hunting

READY TO GET STARTED?