Pentera builds automated security validation software that tests a network the way an attacker would. The company was called Pcysys when I worked with it.
The assignment
This was the company's first technical whitepaper. I joined as a fractional writer and editor, working alongside the person who owned the security research.
The technical problem
The subject was endpoint detection and response (EDR) evasion and Windows system architecture, including BIOS-level attacks, hardware security surfaces, and ways an attacker can avoid endpoint detection at the hardware and firmware level. A writer could alter a security claim with a small wording change, so I edited the material closely.
My role
The research owner supplied and approved the security claims. I co-wrote and edited the paper, focusing on structure, clarity, the level of detail a security reader would expect, and checking simplifications against the source material as we worked.
Why I split the work this way
My job on technical content is to understand the subject closely enough to simplify the explanation while keeping the claim intact. The research owner kept ownership of the research, and I shaped the structure and language for buyers. Pentera's marketing team is also one of the best I have worked with.
