ULTRA blog

Research, field stories, and sharp takes on all things CTEM, offensive security, and exposure validation.

August 20, 2026

Penetration Testing as a Service (PTaaS): What It Is and What It Isn't

August 20, 2026

What Is Continuous Penetration Testing?

August 20, 2026

Red Team vs. Penetration Test: What's the Difference and Which Do You Need?

August 19, 2026

How a Dead-End XXE Vulnerability Turned into AWS Credential Theft

Zero-Click, No Signature Required: Breaking Into a Rail Telematics Fleet

EASM vs. CTEM: Where Discovery Ends and Validation Begins

How to Choose an EASM Platform: The Evaluation Criteria That Matter

EASM vs. ASM: What's the Difference and Which Do You Need?

EASM for M&A Security: Map the Inherited Attack Surface Before Attackers Do

Curiosity built the hacker. Feed yours.

Real security research, technical write-ups, and the occasional uncomfortable truth, straight to your inbox.