Sector studyScan of 28 September 2026
How UK Family Offices Look to an External Scan
81 of 128 UK family offices cannot stop email being forged in their name. External scan of 132 websites, 28 September 2026.
Read moreLatest items
- UK family offices study - 81 of 128 UK family offices cannot stop email being forged in their name. External scan of 132 websites, 28 September 2026.
- UK wealth and investment managers study - 193 firm websites scanned from the outside. Staff passwords on criminal lists for 35 of 184; 53 cannot refuse forged email.
- UK banks and building societies study - 152 websites scanned from the outside. Staff passwords on criminal lists for 22 of 148; none on the known-exploited list.
- September 2026 newsletter - A weekly watch for Free, queued checks, a rebuilt client report and clearer evidence for GRC teams.
- August 2026 newsletter - The assistant reaches every plan, and several findings that overstated a problem are corrected.
- July 2026 newsletter - More dependable reporting, clearer allowances and stronger monitoring.
Reports
Sector studies built from external scans of real estates.
Sector studyScan of 26 September 2026
How UK Wealth and Investment Managers Look to an External Scan
193 firm websites across the UK's wealth managers and investment managers, scanned from the outside on one day. Staff passwords are on criminal lists for 35 of the 184 reported firms; 53 cannot refuse email forged in their name.
Read moreSector studyScan of 26 September 2026
How UK Banks and Building Societies Look to an External Scan
152 websites across the UK's banks and building societies, scanned from the outside on one day. Staff passwords are on criminal lists for 22 of the 148 reported organisations; none runs software on the known-exploited list.
Read moreSector studyScan of 27 September 2026
How UK councils look to an external security and privacy scan
379 council websites across England, Wales, Scotland and Northern Ireland, scanned from the outside on one day. Staff password records are circulating for 122 of them; not one showed a ransomware listing, breach record or browser-safety warning.
Read moreSector studyScan of 26 September 2026
How UK aviation looks to an external cyber security scan
43 UK airport-operator websites covering 54 airports, and 51 organisations those airports depend on, scanned from the outside on one day. Ten exposed staff credential records sit with the operators; 1,161 sit with the suppliers.
Read moreSector studyScan of 21 August 2026
How UK charities look to an external cyber security scan
Nearly half of best-known charities, and six in ten of the largest by income, have staff email addresses in infostealer credential collections across every period on record. None of the 380 organisations showed any sign of having been compromised.
Read moreNewsletters
Monthly product updates for signed-up users.
Newsletter30 September 2026
September 2026 product update
Free accounts gain a weekly watch that runs on schedule. Checks that depend on a limited outside source now queue and finish on later hours, the client report is rebuilt to lead with what to fix, and a new evidence section covers a GRC-ready export, coverage shown apart from risk and scores that say at least.
Open newsletter PDFNewsletter3 September 2026
August 2026 product update
The AI assistant reaches every plan, including Free, with common questions answered free of charge. Credential findings are counted and described properly, which improves the score of domains that were being held back, and a site we cannot read now returns no score rather than a low one.
Open newsletter PDFNewsletter30 July 2026
July 2026 product update
July focused on more dependable scheduled reporting, clearer daily allowances, resilient monitoring and account-session safeguards.
Open newsletter PDFNewsletter30 June 2026
June 2026 product update
June focused on email forensics, suspicious-message checks, API access, MSP reporting and reliability hardening.
Open newsletter PDFNewsletter29 May 2026
May 2026 product update
May focused on clearer reports, progress tracking, remediation workflow and stronger MSP client reporting.
Open newsletter PDF