Technical notes for security decisions.
Blackpine Research publishes practical guides and engineering notes on identity, cloud access, incident response, recovery, and administrative control. Sources are linked at article level so the reasoning can be checked. Drafts stay unpublished until their evidence, scope, and limitations are strong enough for public use.
Start with the control path.
Selected notes cover three recurring places where security decisions become operational: privileged activity, account recovery, and persistent third-party access.
Containment matters, but so does preserving enough context to understand what the administrator identity did before access was reset.
Read 8 min →02Designing Account Recovery for Privileged Business AccountsStrong MFA is valuable, but privileged identity design also depends on how an administrator account is recovered when ordinary access fails.
Read 7 min →03Vendor Access and Offboarding: Where Access PersistsVendor access tends to accumulate across identities, SaaS invitations, API integrations, shared documents, support accounts, and recovery paths.
Read 6 min →Browse the working set.
Filter by publication type or topic. Articles are written as operational reference material rather than as a publishing calendar.