The Coalfire Blog - Coalfire

Threat and vulnerability management
Penetration testing: shifting paradigms from reactive to proac...

Part 2 in a blog series spotlighting Coalfire’s 5th Annual Penetration Risk Report.
- Adam Kerns
3 min read
Application security
A rundown of the OWASP top 10 for large language model applica...

As part of the Open Worldwide Application Security Project (OWASP) AI Project, a community of international experts published a list of the top 10 critical vulnerabilities seen in Large Language Model (LLM) applications.
- Priyadharshini Parthasarathy
4 min read

Browse by topic

Latest

ThreadFix

Applied ThreadFix: Fire Bullets, Then Cannonballs – AppSec Edition

Dan Cornell

4 min read

Threat and vulnerability management

The Basics of Exploit Development 1: Win32 Buffer Overflows

Andy Bowden

9 min read

Threat and vulnerability management

Windows Update Warning

Adversary Ops

2 min read

ThreadFix

Managing Web Application Security

ThreadFix Team

1 min read

Threat and vulnerability management

Deserialized Double Dirty

John Skipper

Compliance

Will ISO 27701 Be the New GDPR Certification?

David Forman

3 min read

Services
Move forward, faster with solutions that span the entire cybersecurity lifecycle. Our experts help you develop a business-aligned strategy, build and operate an effective program, assess its effectiveness, and validate compliance with applicable regulations.

Get advisory and assessment services from the leading 3PAO.

Leverage our comprehensive platform-enabled offensive security services, spanning program design through remediation, to effectively address vulnerabilities across your cloud, applications, network, IoT, hardware, and more.
PCI DSS
Protect cardholder data from cyber attacks and breaches

HITRUST
Receive guidance from an original HITRUST CSF Assessor firm

ISO
Build a management system that complies with ISO standards
SOC and attestations
Maintain trust and confidence across your organization’s security and financial controls

StateRAMP
Expert guidance and advisory services for CSPs that want to achieve StateRAMP authorization

CMMC
Navigate your path to Cybersecurity Maturity Model Certification
View more >
Strategy, privacy, and risk
A business-aligned, modern cybersecurity program. Advantage you.

Cloud security
Unlock the full potential of your cloud – and lock in your success.
Platforms
- Compliance Essentials
- Hexeon
Business outcomes delivered. Your success secured. The world's leading organizations trust Coalfire to elevate their cyber programs and secure the future of their business with tech-enabled compliance and offensive security solutions.

Reduce compliance costs and automate internal activities with Compliance Essentials

Hexeon, Coalfire's offensive security platform, streamlines vulnerability management and provides real-time actionable insights.
Blog
Written by Coalfire's leadership team and our security experts, the Coalfire Blog covers the most important issues in cloud security, cybersecurity, and compliance.
Resources
- White papers
- Webinars
- Reports
- Data sheets
- Videos
Find information that can help you approach cybersecurity programmatically. Explore our research reports, white papers, webinars, videos, case studies, news and more.
About
Since 2001, Coalfire has worked at the cutting edge of technology to help public and private sector organizations solve their toughest cybersecurity problems and fuel their overall success.

Ready to solve some of the world's toughest cybersecurity challenges and grow your career with the industry's best and brightest? Explore careers at Coalfire and see why we've been consistently named a "Best Place to Work."

Coalfire helps organizations comply with global financial, government, industry and healthcare mandates while helping build the IT infrastructure and security systems that will protect their business from security breaches and data theft. The company is a leading provider of IT advisory services for security in retail, payments, healthcare, financial services, higher education, hospitality, government and utilities.

The Coalfire Board of Directors provides invaluable guidance for the organization and reflects Coalfire’s dedication to achieving success for our customers.

Coalfire is committed to creating a culture that fosters diversity, inclusion, belonging, and equity.

Coalfire’s executive leadership team comprises some of the most knowledgeable professionals in cybersecurity, representing many decades of experience leading and developing teams to outperform in meeting the security challenges of commercial and government clients. With diverse backgrounds in IT systems security, governmental security, compliance, and reducing risk while implementing the latest enabling technologies (such as the Cloud and IoT), our leaders understand the challenges customers face.

Security is a team game. If your organization values both independence and security, perhaps we should become partners.

Created in honor of the late co-founder of Coalfire, the Richard E. Dakin Fund at The Denver Foundation is supporting scholarship programs at several universities for promising college students studying cybersecurity and related fields.

The Coalfire Research and Development (R&D) team creates cutting-edge, open-source security tools that provide our clients with more realistic adversary simulations and advance operational tradecraft for the security industry.
Contact
- Locations
Search for: