Tools & Resources Editor
Reviews and evaluates cybersecurity tools, platforms, and resources for ProbablyPwned. David spent seven years as a security engineer building and deploying detection pipelines, SIEM configurations, and security orchestration workflows before moving into security journalism. He provides hands-on assessments grounded in real-world operational experience to help security teams make informed tooling decisions. David holds CySA+ and AWS Security Specialty certifications.
Zach Rice, creator of Gitleaks, releases Betterleaks with BPE tokenization achieving 98.6% recall vs entropy's 70.4%. Drop-in replacement now available.
Endpoint detection and response (EDR) monitors devices to catch threats antivirus misses. Learn how EDR works, key features, and how it compares to EPP and XDR.
Open-source Tirith tool hooks into bash, zsh, fish, and PowerShell to catch Unicode imposter commands, ANSI injection, and pipe-to-shell tricks in real time.
Analytics Context Engineering addresses three failure modes when LLMs process machine data, delivering dramatic token savings and accuracy gains.
SANS ISC highlights openclaw-detect and openclaw-telemetry tools as security teams scramble to monitor the viral AI assistant amid ongoing vulnerability disclosures.
The best threat intelligence APIs for enriching IOCs, detecting malware, and integrating threat data into your SIEM and security workflows.
Essential hardware security tools every pentester and security professional needs. From YubiKeys to WiFi adapters, these Amazon picks protect your digital life.