Field Notes on threat and exposure management, from the people building Unizo.

Live Security Context, and the shift from prioritization to proof.

The four-second keyhole

AI security agents improvise context in the seconds after you ask, then reason over a keyhole view. Why context has to exist before the prompt.

Closure theater: the performance of remediation running ahead of reality. Why closed doesn't mean gone.

Exposure management has to prove reduction, not just rank findings. Why ranking is not reducing.