Research for the people who own the loss.

Engineering notes and risk methods for testing the actor behind a financial application.

Published research

Threat models, constructed cases and evaluation methods for risk, fraud and engineering teams working on application-time identity controls.

  1. Where mule detection sits in the timeline

    Mule detection and personhood scoring observe different moments. The useful design connects them without pretending that one replaces the other.