Patch TuesdayUpdated monthly
Patch Tuesday archive — last 12 months
Monthly briefings covering vulnerabilities remediated, known deployment issues, pros and cons of rolling out, and how Secure Chain can help.
Read article
Resources
Field notes from a UK MSSP.
Practical writing for the people responsible for security in mid-market firms. No vendor hype — just what we're seeing in client environments.
Toolkits3 downloads
Practitioner toolkits — checklists we actually use
Free downloads written from field work: a Cyber Essentials Plus readiness checklist, a Qualys VMDR configuration audit, and an ISO 27001 SoA scoping matrix.
Read article
Tooling evaluation11 min read
Qualys VMDR vs Tenable: what differs once you're past the sales deck
We've deployed both. The detection is near-identical — the real differences are deployment, licensing traps and how each fits your operating model.
Read articleOperating model10 min read
In-house vs outsourced vulnerability management: the real costs
The scanner licence is the smallest line item either way. The honest comparison is the people-hours between 'found' and 'fixed'.
Read articleQualys9 min read
Qualys vulnerability management — our expertise and managed service
How the Qualys VMDR platform and Secure Chain's managed reporting and remediation combine into a measurable defence for UK businesses.
Read article
Self-assessment2 min assessment
Cyber Health Check — ten questions for business owners
The controls we check first on every new engagement: patching, MFA, backups, monitoring and access. Two minutes, honest scoring, no email required.
Read article
Interactive3 min play
Can You Protect Your Business? — interactive quiz
Ten short, jargon-free workplace scenarios. Test your awareness of everyday cyber risks in under three minutes — no login, no data collected.
Read articleVMaaS6 min read
Why annual penetration tests are no longer enough
Attack surfaces change weekly. Why continuous vulnerability management is the new baseline for mid-market organisations.
Read article
Compliance8 min read
Cyber Essentials Plus without the panic
A practical 60-day plan to take a typical SME through Cyber Essentials Plus without halting the business.
Read article
Legal7 min read
Defending against conveyancing fraud in 2026
Email controls, partner awareness and the technical patterns separating firms that get hit from firms that don't.
Read article
Healthcare5 min read
DSPT evidence that actually maps to controls
How to keep your DSPT submission honest — and survive an inspection.
Read article
Financial Services9 min read
Operational resilience for fintech SMEs
Important business services, impact tolerances and the third-party risks the FCA will actually ask about.
Read articleAwareness12 min read
Phishing Awareness Training: How to Protect Your Business
A UK-focused guide to phishing — definitions, real-world examples, a downloadable checklist for staff and the controls that stop attacks reaching the inbox.
Read articleFAQ10 min read
Cyber Security FAQ — answers to the most asked questions in 2025 & 2026
Plain English guidance on threats, compliance, MFA, vulnerability management, and what SMEs actually need to know.
Read articleMethodology6 min read
Shield-to-Signal: how we run a managed engagement
A look under the bonnet of our industry-standard delivery model.
Read articleSubscribe
Monthly briefing for UK security leaders.
One email a month. New writing, sector advisories and what we're seeing in the wild. No marketing fluff.