Editorial policy

Sourcing

Every story is built from identifiable sources: vendor advisories and release notes, regulator decisions, court filings, company statements and filings, published research, and reporting from established outlets. The sources are listed at the end of each article. We say what kind of source each claim rests on.

Accuracy

We report numbers, version numbers and dates as published and attribute them. We do not invent quotations or people. Where sources disagree, we say so. We use software to help research and draft; an editor checks every story against its sources before publication.

Security reporting

We describe what happened and how to reduce risk. We do not publish exploit code, step-by-step attack instructions, or details of vulnerabilities before a fix is available, and we do not link to leaked data.

Independence

News coverage is chosen on its interest to readers. Sponsors and partners do not decide what we report or how. Commercial content is reviewed by the editor for accuracy and relevance.

Corrections

If we get something wrong, we fix it. Material corrections are noted on the article with the date of the change. Requests go through the contact page.