Jutsu Blog: Insights for the AI-Native SOC

Research, playbooks, and product updates from the team building autonomous security operations.

All articles

ConnectWise Breach: How One App Exposed 173 Microsoft 365 Accounts, Attackers used a stolen ConnectWise credential to sign in to the Microsoft 365 accounts of 173 companies without a password or MFA. Learn what to check in your own accounts before a vendor breach reaches you.
How to Set Up SOC 2 and ISO 27001 in Jutsu: A Step-by-Step Guide, A screenshot-by-screenshot guide to Jutsu Compliance: setup, policies, evidence, daily checks, your readiness score and the audit, from an empty workspace.
How to Choose a SOC 2 Auditor, A SOC 2 audit must be performed and signed by a licensed CPA firm, and the firm you choose matters nearly as much as the report itself.
Why Startups Need a SOC 2 Gap Analysis Tool (vs a Consultant or Spreadsheet), A SOC 2 gap analysis costs $0 in a spreadsheet, $5,000+ from a consultant, or $12,000+ a year in a tool. Why the tool still wins for a startup.
The 7 Ways Attackers Get Into Startups — And How to Stop Them, Startups move quickly. Almost every day, new employees join, cloud accounts are made, code is submitted, and new technologies are integrated. That pace is amazing, but it also provides openings for attackers. What is the good news? You do not need a large security staff to lower your risk. You must identify and safeguard the […]
The gap between agent access and oversight, By Ayu, Cybersecurity Operations, Jutsu AI agents are not news anymore. They triage tickets, write code, browse the web, and run in half the tools your company pays for. What I keep noticing is how little has changed about the way they get access. This week gave a pretty clear picture of what that looks […]
We Made the Jutsu Console Twice as Fast by Deleting Work Nobody Asked For, Pages usable in half the time, 73% less JavaScript, 73% less ClickHouse time, and flat load times up to 5M events. Here’s what was slow and how we fixed it.
OpenAI Halved ChatGPT Pro. Unlimited AI Was Never Going to Last, OpenAI’s $200 Pro plan now includes half the usage. Why flat-rate AI was always going to end, and how to stop rationing from turning into shadow AI.
OpenClaw Prompt Injection: Attacks, Fixes, and Hardening, Researchers made OpenClaw run attacker code and leak secrets. Here is how the attacks worked, what OpenClaw fixed, and how to harden any AI agent.
The Gentlemen Ransomware: TTPs, Detection, and Defense, The Gentlemen ransomware now lists nearly 900 victims. Here is how it breaks in and spreads like a worm, mapped to ATT&CK, and where to catch it.
npm v12 Disables Install Scripts: What It Stops and Misses, npm v12 blocks dependency install scripts by default. Learn what changed, what breaks, how to allowlist safely, and which supply chain attacks it misses.
A Clean Automated Pentest Doesn’t Mean You’d See the Attack, Automated penetration testing shows whether attackers can get in, not whether you would see them. Here is how detection validation closes that gap.
Swivel Chair SOC: The Risk Hiding Between Your Tools, Copying data between SIEM, EDR, identity, and ticket tools slows response. Learn how to measure swivel chair work in your SOC and close the handoff gaps.
When Exploits Beat Patches: Exposure Validation and BAS, Exploits now arrive before patches do. See why CVSS scores alone fail vulnerability management and how breach and attack simulation sets real priorities.
Radiant Security Alternatives After the Cribl Deal (2026 Guide), Cribl bought Radiant Security’s AI SOC tech in August 2026. What customers should ask now, plus 8 Radiant Security alternatives compared on public facts.
AI SOC Buyer’s Guide: Evaluation Checklist and RFP Questions, An AI SOC buyer’s guide for SOC leaders: choose an architecture, test triage on your own alerts, score a proof of concept, and copy RFP questions.
AI SOC vs SOAR: Playbooks, AI Agents, and the Hybrid Model, AI SOC vs SOAR compared: how playbooks and AI agents differ, where each wins, what AI SOAR means, and how to move to a hybrid model with approvals.
What Is an Agentic SOC? Agents, Autonomy Levels, and Risks, An agentic SOC uses AI agents to investigate and act on alerts within human-set limits. Learn agent roles, autonomy levels, risks, and metrics to track.
What Is an AI SOC? Types, How It Works, and Real Limitations, An AI SOC uses AI to triage, investigate, and respond to alerts. Learn the three product types, how one alert flows end to end, and the real limits.

Cyber AttackOct 19, 2026

ConnectWise Breach: How One App Exposed 173 Microsoft 365 Accounts

Attackers used a stolen ConnectWise credential to sign in to the Microsoft 365 accounts of 173 companies without a password or MFA. Learn what to check in your own accounts before a vendor breach reaches you.

Automation

How to Set Up SOC 2 and ISO 27001 in Jutsu: A Step-by-Step Guide

Oct 18, 2026

Compliance

How to Choose a SOC 2 Auditor

Oct 12, 2026

Automation

Why Startups Need a SOC 2 Gap Analysis Tool (vs a Consultant or Spreadsheet)

Oct 10, 2026

Subscribe to our newsletter

Get the latest security tips, product updates, and news delivered to your inbox.