CIA triad
Three properties, lost one at a time
Read the sketch
Simple sketches for a safer digital world.
Cyber security can be complicated.
The ideas behind it do not always have to be.
Drawn2Security explains the concepts, mistakes, trade-offs and strange stories that shape digital security, one sketch at a time.
New additions
Latest ideas
Where to begin
Start with the big ideas
These are the categories that form the foundation. Understanding these makes everything else click into place.
See the guided sequenceBrowse by topic
Explore cyber security
66 ideas
Identity & access
Who someone is, what they may do, and how both get proved. Most breaches start here.
58 ideas
Vulnerability management
Finding weaknesses, ranking them honestly, and actually fixing some.
57 ideas
Networks
Routing, naming, certificates and segmentation. The plumbing attackers move through.
52 ideas
AI security
Models, agents and the pipelines around them. New surface, mostly old failure modes.
50 ideas
Incident response
What you do once it has already happened, and what you wish you had done first.
45 ideas
Data protection & privacy
Where data lives, who can read it, and what the law expects of you.
44 ideas
Detection & SOC
Finding the thing. Telemetry, rules, and the gap between the two.
35 ideas
Architecture & resilience
Designing so that failure is survivable rather than surprising.
34 ideas
Application security
The flaws that come from how software is written, not how it is deployed.
Teach me something random
Pick a sketch and see where it leads.
Concept clusters
Popular connections
Identity and trust
- Identity is the new perimeter
- Why MFA is not all the same
- What zero trust actually means
Why controls fail
- One mistake should not be enough
- Severity is not risk
- Blast radius
How attackers move
- What lateral movement means
- What is an attack surface
- Blast radius
Cloud assumptions
- Shared responsibility in cloud
- Identity is the new perimeter
- What zero trust actually means
Human behaviour
- One mistake should not be enough
- Why MFA is not all the same
- Secure by design
Security trade-offs
- Severity is not risk
- Least privilege
- Secure by design
Stay curious
A new sketch, when it is ready.
No noise. Just a useful idea, explained clearly. Unsubscribe whenever you like.
No spam. No vendor content. Just ideas.