INSIGHTS

Research and perspectives.

Analysis of the technology decisions that carry consequences, published where the answers available elsewhere are thin.

Why we publish

Most writing about enterprise technology is one of two things. It is vendor marketing, which is accurate about the product and silent about the consequence. Or it is analyst summary, written for a market rather than for an environment, which tells you who leads a category and not whether the thing works inside your boundary.

The questions that actually decide outcomes sit between those two. What does this platform carry for you, and what does it leave with you. What does the licensing model cost at year three rather than year one. What happens if the commitment turns out to be wrong. Which model is authorized in the cloud you are actually deploying in, today, not when the press release was written.

Those questions have answers. They are usually public, usually in a maintained table or a published dataset, and usually nobody has read them closely.

So that is what we publish. Every figure traces to a named source with a date. Where we calculate something, the method is stated so you can reproduce it. Where sources disagree, we say so rather than picking the convenient one. Where something is our judgment rather than a documented fact, we mark it as judgment.

We publish what we would want to have read before making the decision.

Latest research

ALL

RESEARCH

PERSPECTIVE

Perspective

Most teams are troubleshooting yesterday’s environment

Cloud environments change faster than anyone’s understanding of them. The result is teams making security and architecture decisions against a picture of a system that no longer exists, and calling the documentation that would have prevented it bureaucracy.

9 min

Perspective

One-time money buys recurring obligations

Grant funding, emergency relief and one-off capital buy technology that costs money every year afterwards. The purchase is scrutinized. The obligation it creates usually is not.

8 min

Perspective

Copilot did not leak anything

An AI assistant inside your tenant shows people what they already had access to. When that turns out to be more than anyone intended, the finding is not about the AI. It is about a permissions model that was only ever protected by how hard things were to find.

9 min

Perspective

Nobody owns the seams

Technology decisions are made inside domains. Their consequences travel across them. Most organizations have someone accountable for every component and nobody accountable for the joins, which is where the cost actually accumulates.

9 min

Research

What it costs to be wrong: comparing cloud commitments on exit rather than discount

Every comparison of cloud commitment instruments ranks them by discount rate. Almost none rank them by what happens if the commitment turns out to be wrong, which is the axis that determines what a mistake costs.

9 min

Research

Inside the walls: what K-12 technology funding covers after the reset

Three federal funding streams moved in 2025 and 2026. One ended, one was cut back, and one grew by 20.7 percent. The net effect is that the money left pays for connectivity inside school buildings and nothing outside them.

9 min

Research

Three days: what the KEV Catalog shows about the new federal patching clock

We analyzed all 1,709 entries in CISA's Known Exploited Vulnerabilities Catalog. The federal remediation deadline for the highest-risk vulnerabilities has fallen from 181 days to three, and most of that drop happened on a single day in June 2026.

10 min

Research

What a federal agency can actually run: the AI authorization tables, read closely

Vendor announcements say a service is FedRAMP authorized. The published tables say something more specific, and in places the opposite of what the market assumes.

11 min

Research

Microsoft's nonprofit licensing change was a security change

When Microsoft ended the free Business Premium grant in July 2025, most coverage treated it as a pricing story. For nonprofits that moved to the free Business Basic tier, it was a security posture change, and the cost of reversing it is now a published number.

8 min

Tell us what you are deciding.