Insights

Articles and papers on exposure management, EASM, supplier risk, AI asset discovery and digital sovereignty, from the Panop research team.

  • Article

    Digital Sovereignty for Security Teams

    Digital sovereignty is now a scored line in European security tenders. Residency, jurisdiction and exit are different controls, and exposure tools are in scope.

  • Article

    Exposure Management vs Vulnerability Management

    Vulnerability management ranks CVEs. Exposure management ranks what is reachable in your estate. CTEM is the loop that makes the second one continuous.

  • Article

    What is External Attack Surface Management (EASM)?

    EASM is the continuous discovery of internet-facing assets an attacker can find without credentials. It is an input to CTEM, not a substitute for it.

  • Paper

    Digital Sovereignty: Why, What, How

    Why sovereignty moved from politics into procurement, what the term covers once broken into measurable parts, and which controls actually change who can reach your data.

    PDF ↓
  • Article Results forthcoming

    How Panop is Benchmarked

    Panop's autonomous pentest is scored on three public suites: XBOW, Argus, and ExploitBench. This page is the protocol and the results: XBOW and Argus are complete, ExploitBench is in progress.

  • Paper

    Post-Quantum Cryptography: Swiss and EU Deadlines

    The EU expects national PQC roadmaps by end-2026 and high-risk systems migrated by 2030. FINMA expects a board-approved roadmap by mid-2027.

    PDF ↓
  • Paper

    Threat Actors 2026: Who Is Actually Attacking You

    The four actor categories, why their boundaries are dissolving, how fast they now move, and what the Swiss reporting data says about who turns up.

    PDF ↓
  • Paper

    Agents, MCP and the New Perimeter

    AI agents act on production systems under delegated credentials, and MCP standardises that access. The real risk, the controls that break, a 90-day plan.

    PDF ↓
  • Paper

    State of Security 2026

    A midpoint view of the 2026 threat landscape: where attacks now start, what AI changed on both sides, and which regulatory deadlines land before December.

    PDF ↓
  • Article

    Wavestone Swiss Cybersecurity Startup Radar 2026

    Wavestone's 2026 radar maps Switzerland's cyber startup landscape. Panop is listed among the Swiss Gems moving from attack surface management to CTEM.

    PDF ↗