Position
Why We Do Not Publish Case Studies.
Discretion is not a marketing posture. It is the product.
By Bailey Besheer ·
File · The position,
The position, in Bailey's words
Operator Note OPR · STANDARD-OF-WORK
“Alacrinet operates at the intersection of offensive security and discretion, and the discretion is non-negotiable. Clients engage us during moments of operational vulnerability: when something has happened, when something is about to, when leadership needs an honest read on exposure that internal teams can't deliver. They trust us with a level of access that almost nothing else in their security program receives. That trust is not material for marketing. All client testing artifacts are destroyed within 30 days of engagement end. We don't retain copies for portfolio purposes.”
File · What this
What this means mechanically
- [01] No sanitized case studies. A redacted narrative is still a narrative. The wrong reader recognizes the environment, and we will not take that risk with a client's exposure to win yours.
- [02] No retained evidence. Reports, screenshots, exploit code, captured data, and proof artifacts are destroyed within 30 days of engagement end. You get written attestation. Your engagement gets the same treatment.
- [03] References only on request, and only with written consent. Need a reference? We arrange a peer call with a client in your sector who has agreed to it in writing. We will not name them in a deck, and we will not name you in someone else's.
File · What you
What you get instead of a case study
The refusal is the easy part. Here is the proof we put in its place, all of it real and all of it about your engagement, not someone else's breach:
- [01] A reference call this week. Tell us your sector and we connect you with a client who has agreed, in writing, to take the call. You hear it from a peer, unfiltered, not from our marketing.
- [02] The operator's name and credentials, before you sign. You will know exactly who runs your test, what they have done, and where they came from. The person on the scoping call is the person on the keyboard.
- [03] The artifact-destruction attestation, before kickoff. We will show you the written attestation you receive at the end so you know the discretion we extend to other clients is the discretion we extend to you.
File · How a
How a low becomes a full compromise (illustrative)
Illustrative Pattern · Not a Client Engagement
A scanner flags a low-severity SSRF on a web host and moves on. An operator does not. The SSRF reaches the cloud metadata endpoint and returns a token. The token belongs to a service account with more reach than anyone intended. From there it is credential reuse on a deploy runner, then a path to the domain controller, then domain admin. One low the report would have buried on page forty becomes the finding that ends up in the boardroom. This is a composite of how these chains tend to run. It is not drawn from any single client, and that is exactly the point: we can show you how attackers think without showing you who they thought it about.
File · Why we
Why we still win deals without case studies
Case studies are a proxy for the thing you actually care about, and a weak one. The deliverable you keep is the report, not the brand association, and the credibility that decides the engagement is the operator's, not the logo wall's. A sharp buyer can read both directly. So read the twelve-question checklist, ask us for the sector reference, and judge the operator. That is more signal than any case study, and it works against every vendor including us.
Talk to an Operator
Ready to See Your Environment the Way Attackers Do?
Real operators. Real attack paths. Real business impact. Talk to us about your security goals.