← Netgraph overview
Netgraph · Resources
Field notes from the practitioner team.
SOC tradecraft, detection engineering, graph-native architecture, Indian regulatory operations, written by the people who build and run Netgraph.
Featured researchTop 20 vulnerabilities of the last six months: a graph-grounded analysis
Read the analysis→Blogs
Field notes · tradecraft · updates
SOC operations6 Aug 2026
Who should be running Netgraph in their SOC, and who shouldn't (yet)
Read→Exposure management5 Aug 2026
An effective CTEM strategy: unifying SIEM, UEBA, SOAR, NDR, EDR, CDR, CSPM and BAS
Read→SOC operations23 Jul 2026
Why unified telemetry works
Read→Threat landscape2 Jul 2026
Ransomware in H1 2026: what the first six months taught defenders
Read→AI security11 Jun 2026
Frontier AI threats: getting visibility through Netgraph
Read→SOC operations26 May 2026
Why graph-native SOC
Read→Compliance21 May 2026
CERT-In 6-hour reporting straight from the graph
Read→MSSP7 May 2026
Multi-tenant pitfalls every MSSP discovers the hard way
Read→Architecture16 Apr 2026
"Air-gap ready" isn't a checkbox: it's an architecture decision
Read→UEBA2 Apr 2026
UEBA after the honeymoon: why most behavior models go stale
Read→SOAR19 Mar 2026
SOAR without tears: code-first playbooks that survive an audit
Read→Buying guide5 Mar 2026
AI-SOC overlays vs graph-native platforms: a buyer's framework
Read→Detection engineering19 Feb 2026
Retrospective detection: the quietly overlooked superpower
Read→Incident response5 Feb 2026
Blast radius as a first-class concept in incident response
Read→Compliance22 Jan 2026
The DPDP 72-hour clock: a SOC operations checklist
Read→DevOps8 Jan 2026
Detection-as-Code without a dedicated platform team
Read→SOC tradecraft18 Dec 2025
MTTD vs correlation debt: the metric your SIEM doesn't tell you about
Read→Architecture4 Dec 2025
Why the graph is the product, not a feature
Read→Technical whitepapers
Deep dives on architecture
Security research
Malware anatomy · AI vs AI · vulnerability analysis
Research7 Aug 2026
What next in the game of thrones: offensive vs defensive AI
Read→Research5 Aug 2026
How is CTEM shaping up as a market, and is it worth investing in?
Read→Research4 Aug 2026
July 2026: top vulnerability findings and impact analysis, a quick glance
Read→Research31 Jul 2026
CTEM as an emerging discipline: how it ends the multi-vendor tool tax
Read→Research28 Jul 2026
How frontier AI made zero-days a potent weapon in adversary hands
Read→Research24 Jul 2026
AI versus AI: a Mythos-class defender vs a GPT-plus attacker
Read→Research18 Jun 2026
Akira ransomware: an anatomy from initial access to the graph that catches it
Read→Research · Featured23 May 2026
Top 20 vulnerabilities of the last six months: a graph-grounded analysis
Read→Case studies
Real deployments · outcomes (anonymised composites of representative real outcomes)
AI Security · Specialization1 Aug 2026
Is there a case for specialized LLMs in security use cases?
Read→AI Security · Model Selection23 Jul 2026
Why generic open-weight LLMs don't deliver the efficacy of frontier models in the SOC
Read→AI Security · Explainability16 Jul 2026
AI security and visibility: how much do we actually know about AI reasoning and explainability?
Read→BFSIBFSI
From bolted-on stack to one graph: a top-10 Indian private bank
Read→HealthcareHealthcare
DPDP-grade patient-data DSPM across 14 hospitals
Read→MSSPMSSP
Multi-tenant onboarding in days, not quarters: an India-headquartered MSSP
Read→Manufacturing · OTManufacturing · OT
Air-gapped OT/IT SOC across four plants
Read→28 questions, straight answers
Why Netgraph differs from a SIEM
Netgraph vs traditional SIEM · vs AI-SOC platforms · deployment, sovereignty & data ownership · detection engineering, agents, and operations.