---
title: "Insights on Exposure Management"
description: "Articles and papers on exposure management, EASM, supplier risk, AI asset discovery and digital sovereignty, from the Panop research team."
url: https://panop.io/blog/
---

# Insights

Articles and papers on exposure management, EASM, supplier risk, AI asset discovery and digital sovereignty, from the Panop research team.

- 28 Sep 2026 Article

    ## [Digital Sovereignty for Security Teams](https://panop.io/blog/digital-sovereignty-for-security-teams/)

    Digital sovereignty is now a scored line in European security tenders. Residency, jurisdiction and exit are different controls, and exposure tools are in scope.

- 26 Sep 2026 Article

    ## [Exposure Management vs Vulnerability Management](https://panop.io/blog/exposure-management-vs-vulnerability-management/)

    Vulnerability management ranks CVEs. Exposure management ranks what is reachable in your estate. CTEM is the loop that makes the second one continuous.

- 25 Sep 2026 Article

    ## [What is External Attack Surface Management (EASM)?](https://panop.io/blog/what-is-external-attack-surface-management/)

    EASM is the continuous discovery of internet-facing assets an attacker can find without credentials. It is an input to CTEM, not a substitute for it.

- 23 Sep 2026 Paper

    ## [Digital Sovereignty: Why, What, How](https://panop.io/blog/digital-sovereignty-why-what-how/)

    Why sovereignty moved from politics into procurement, what the term covers once broken into measurable parts, and which controls actually change who can reach your data.

    [PDF ↓](https://panop.io/media/documents/panop-digital-sovereignty.pdf)

- 15 Sep 2026 Article Results forthcoming

    ## [How Panop is Benchmarked](https://panop.io/blog/how-panop-is-benchmarked/)

    Panop's autonomous pentest is scored on three public suites: XBOW, Argus, and ExploitBench. This page is the protocol and the results: XBOW and Argus are complete, ExploitBench is in progress.

- 10 Sep 2026 Paper

    ## [Post-Quantum Cryptography: Swiss and EU Deadlines](https://panop.io/blog/post-quantum-cryptography-swiss-eu-deadlines/)

    The EU expects national PQC roadmaps by end-2026 and high-risk systems migrated by 2030. FINMA expects a board-approved roadmap by mid-2027.

    [PDF ↓](https://panop.io/media/documents/panop-post-quantum-swiss-eu-deadlines.pdf)

- 7 Sep 2026 Paper

    ## [Threat Actors 2026: Who Is Actually Attacking You](https://panop.io/blog/threat-actors-2026/)

    The four actor categories, why their boundaries are dissolving, how fast they now move, and what the Swiss reporting data says about who turns up.

    [PDF ↓](https://panop.io/media/documents/panop-threat-actors-2026.pdf)

- 2 Sep 2026 Paper

    ## [Agents, MCP and the New Perimeter](https://panop.io/blog/agents-mcp-and-the-new-perimeter/)

    AI agents act on production systems under delegated credentials, and MCP standardises that access. The real risk, the controls that break, a 90-day plan.

    [PDF ↓](https://panop.io/media/documents/panop-agents-mcp-new-perimeter.pdf)

- 11 Aug 2026 Paper

    ## [State of Security 2026](https://panop.io/blog/state-of-security-2026/)

    A midpoint view of the 2026 threat landscape: where attacks now start, what AI changed on both sides, and which regulatory deadlines land before December.

    [PDF ↓](https://panop.io/media/documents/panop-state-of-security-2026.pdf)

- 15 Jul 2026 Article

    ## [Wavestone Swiss Cybersecurity Startup Radar 2026](https://panop.io/blog/wavestone-swiss-cybersecurity-startup-radar-2026/)

    Wavestone's 2026 radar maps Switzerland's cyber startup landscape. Panop is listed among the Swiss Gems moving from attack surface management to CTEM.

    [PDF ↗](https://www.wavestone.com/wp-content/uploads/2026/07/swiss-cybersecurity-startup-radar-2026-2.pdf)