Publications
The Department for Education 'Register of Training Providers' Vulnerability Disclosure
ControlPlane AI Security Team responsibly discloses authorisation gaps in the Department for Education's Register of Training Providers.
Vulnerability disclosure
The Department for Education 'Get Help Buying for Schools' Vulnerability Disclosure
ControlPlane AI Security Team responsibly discloses an access-control vulnerability in the Department for Education's procurement support service.
Vulnerability disclosure
OpenAI Internal Model Red Teaming
Red Team Network contributions to Operator, GPT-4o, o3-mini, and Deep Research system cards.
Security research
eBPF Foundation Security Threat Model
A comprehensive threat model for eBPF-based security solutions.
Threat model
NIST SP 800-233 Service Mesh Proxy Models
Security guide to service mesh proxy models for cloud-native applications.
Security standard
Flux D1 Reference GitOps Architecture
A hardened reference architecture for GitOps with Flux CD.
Reference architecture
FINOS AI Security Reference Architecture
AI security reference architecture for financial services.
Reference architecture
FINOS AI Governance Framework
AI governance framework for financial services.
Governance framework
CNCF Flatcar Threat Model
A project graduation threat model with the TAG Security community.
Threat model
CNCF FluxCD Threat Model
Security assessment and threat model for Flux CD as part of CNCF graduation.
Threat model
CNCF ArgoCD End User Hardening Guide
A guide to hardening ArgoCD for end users.
Hardening guide
Kubernetes for Security Operations Centres
Community collaboration with JP Morgan CyberOps.
Hardening guide
CNCF Envoy Gateway Threat Model
A comprehensive threat model for the Envoy Gateway.
Threat model
Hacking Kubernetes
The definitive guide to Kubernetes offensive and defensive security.
Book
Financial Services User Group Kubernetes Threat Model
Financial services-specific threat model for Kubernetes.
Threat model
CIS Benchmarks for Google Kubernetes Engine
Center for Internet Security hardening guide for GKE.
Security standardNo publications match the selected filters.