Original Hard2bit research: large-scale scans, AI Agent Readiness reports and external-posture analyses, published with data and methodology.
Original work from Hard2bit's research team: large-scale scans (typosquatting, sector attack surface), original reports on AI Agent Readiness in Europe, analyses of non-human identities and digital supply chain, post-quantum cryptography and enterprise preparation.
We publish data, methodology and findings. When a finding translates to a service or product (for example, Hard2bit Scanner covering public posture and AI Agent Readiness), we say so explicitly.
Passive analysis of 60 EU domains — banking, pharma, telcos, energy, retail and public sector — against the 11 emerging AI Agent Readiness standards. Aggregated data by sector.
By Adrián González · CEO
An incompletely rotated token compromised Trivy, KICS and LiteLLM in March. Four months on, those credentials feed Vect ransomware that destroys data beyond recovery.
By Adrián González · CEO
OWASP, PTES, OSSTMM, NIST SP 800-115 and MITRE ATT&CK: what each penetration testing methodology contributes, how they differ and how they combine in a serious test.
By Thilina Manana · COO y Director Técnico de Seguridad hard2bit
Nmap, Burp Suite, BloodHound, NetExec, Impacket, Hashcat: a penetration tester's real toolkit by phase, what each family validates, how it chains together and the trace it leaves.
By Adrián González · CEO
Anubis ransomware has claimed 91 victims by exploiting Citrix Bleed 2: it leaks NetScaler memory, steals session tokens and walks in with no password and no MFA. What to detect before encryption.
By Thilina Manana · COO y Director Técnico de Seguridad hard2bit
Sysdig documents JADEPUFFER, the first agentic ransomware: an AI model that entered through Langflow, stole credentials and destroyed a database. Read from the defender's side.
By Adrián González · CEO
ENISA Threat Landscape 2025 (4,875 EU incidents) and Verizon DBIR 2026 combined: five CISO lessons on supply chain, digital dependencies, vulnerabilities, AI phishing and NIS2.
By Adrián González · CEO
Before you leave…
Quick 15-minute assessment and we'll tell you what to prioritise first: Microsoft 365, pentesting, vulnerability management, SOC, DORA, NIS2, ENS or ISO 27001.
No spam. Reply within 24h.
