a man is sitting at a desk in an office working on a computer .

Blog

Thoughts, Transformed.
Conversations, Amplified.

Analytical insights and in-depth analysis of technology trends, platform evaluations, and strategic guidance based on real-world implementation experience across the Australian enterprise landscape.

At Cordant, we cut through technology complexity with analytical insights that matter. Our blog transforms real-world implementation experience into practical guidance that helps Australian enterprises make better technology decisions with confidence.

We examine what actually works—not what vendors promise. From dissecting platform failures to evaluating emerging threats, our content delivers the independent analysis you won't find elsewhere.

Our perspectives are shaped by hands-on experience across critical infrastructure and enterprise modernisation. We write about technology as it really is, not as it should be.

Two bright orange shipping containers stacked high, photographed from below against a dark blue sky

blog

27 Oct 2026

Peter

Hermes Part 2: Running a daily Citrix vulnerability watch

Part 2 of 3. A daily watch for new and changed Citrix and NetScaler vulnerabilities, where a script reads the NVD records and the agent only runs it.

Stacked shipping containers, lit orange by low sun, against a deep blue sky

blog

25 Oct 2026

Peter

Hermes Part 1: Sandbox setup and tests

Part 1 of 3. We run Hermes in a container with a read-only rules folder, no secrets and an allowlist proxy, test each control from inside, and report the gap we found.

Frieze in the style of Greek vase painting: a centaur playing a lyre beside a young man, a dancing couple, two women and a winged figure

blog

24 Oct 2026

Peter

Intro to Hermes: What is it and how can it be set up securely

Introduction to a three-part series. How Hermes is built, what it offers, where its main security risks lie, and the conditions under which we would use it.

	Date	Tags
Hermes Part 2: Running a daily Citrix vulnerability watch Part 2 of 3. A daily watch for new and changed Citrix and NetScaler vulnerabilities, where a script reads the NVD records and the agent only runs it.	27 Oct 2026	Patch Management, NetScaler, CISA, Vulnerability Management, Automation
Hermes Part 1: Sandbox setup and tests Part 1 of 3. We run Hermes in a container with a read-only rules folder, no secrets and an allowlist proxy, test each control from inside, and report the gap we found.	25 Oct 2026	Hermes, AI Agents, Docker, Security Engineering, Egress Control
Intro to Hermes: What is it and how can it be set up securely Introduction to a three-part series. How Hermes is built, what it offers, where its main security risks lie, and the conditions under which we would use it.	24 Oct 2026	Hermes, AI Agents, Security Engineering, Automation, Docker
Passkeys in Island: Getting Entra ID to Actually Accept Them Entra ID will accept passkeys stored in the Island Enterprise Browser, but only if you tell it the AAGUID. Here's the full configuration, the identifiers Microsoft doesn't publish, and the lockout to plan for.	18 Sep 2026	Island, FIDO2, Entra, Microsoft, Cybersecurity
Lookout Ma - the passkeys are-a-comin'! Passkeys aren't just a rebrand of Face ID, and with Microsoft retiring its SMS and voice MFA in Entra ID on 1 February 2027, there are only months left to get across them.	4 Sep 2026	Passkeys, Microsoft Entra ID, Identity Security, Multi-Factor Authentication, Phishing Resistence
Cheese Rolling and Frontier AI Using Gloucestershire's cheese rolling as an analogy for technology professionals chasing an ever-faster target, this post shares what Cordant has seen on the ground running Frontier AI Cyber Readiness Assessments this year.	18 Aug 2026	AI Security, Application Security, Non-Human Identities, Vulnerability Management, Security Operations
CI Fortify – Designing Critical Infrastructure to Endure Australian Critical Infrastructure operators are increasingly expected to show not just strong cyber controls, but how essential services would continue under sustained or constrained conditions.	4 Mar 2026	Critical Infrastructure, CI Fortify, Operational Technology, Cyber Resilience, Business Continuity
Managing Third-Party Application Vulnerabilities: A Critical Component of Modern Device Management Third-party applications are essential to modern workplaces, but each one expands the attack surface, and most IT teams lack the visibility to know which devices are running outdated or vulnerable versions.	7 Nov 2025	Vulnerability Management, Essential Eight, Endpoint Security, Patch Management, Microsoft Intune
Still on Windows 10? How to Move Forward Businesses remain on Windows 10 due to hardware incompatibility, application barriers, and budget constraints. Strategic phased migrations, cloud alternatives, and readiness assessments enable modernisation without disruption.	24 Oct 2025	Workplace2026, Digital Workplace, Cybersecurity, Modern Workplace, AI, End User Computing
Connecting Wiz to your Microsoft Azure Tenant In today’s rapidly evolving cloud landscape, ensuring the security of your resources is paramount.	12 Jan 2025	wiz, azure
Connecting Wiz to your OCI Cloud Tenancy In today’s rapidly evolving cloud landscape, ensuring the security of your resources is paramount.	17 Dec 2024	oracle, wiz, oci
Are We Secure? Dealing with risk in OT environments “Are we secure” are three words that can strike fear into the hearts of many a cyber security professional.	11 Nov 2024	cyber, operational-technology
Deciding Where to Place Your Workloads: A Pragmatic Framework Cordant were recently engaged by a client to develop a technology modernisation strategy.	28 Sep 2024	cloud, on-premise, paas, iaas
The Power of the 5 Whys: Uncovering Root Causes Cloud computing, microservices, agile – they were supposed to make things quicker to deliver, simpler to build and faster to scale – and for the most part they have delivered on all these promises and more.	28 Sep 2024	cybersecurity
What does it mean to be pragmatic in IT? I’m unashamedly parsimonious. I'm not sure if it’s my Scottish heritage, or the fact that I’m surrounded by Lean practitioners (my sister is a Lean process coach), but I detest waste, refuse to spend a dollar more than I need to, and despise process for processes’ sake.	25 Sep 2024	cyber, cybersecurity