top of page


The Big Data Blog


SentinelOne Prompt Security: The Browser Extension
Part 3: installing the Prompt Security browser extension by hand, the three easy ways around it, force-installing it by policy, what the vendor's MDM package does and misses, and how to close the private-window gap.
2 days ago11 min read


SentinelOne Prompt Security: How the Console Fits Together
Before I get into the browser extension and the agent, I want to walk through the console itself. Almost every result later in this series - a key that got redacted, a key that sailed straight through, a pop-up that never showed - comes back to how four screens in the console work together. If you understand those four, the rest of the series makes sense. If you don't, half of it looks random. It took me a good few days of testing to get this picture straight, mostly because
4 days ago12 min read


SentinelOne Prompt Security: What It Is, and How I Actually Tested It
Every company I talk to has the same quiet worry right now: people are pasting things into ChatGPT, Claude and Copilot that should never leave the building. API keys. Customer records. Whole .env files. The AI is useful, so nobody wants to ban it, but nobody can see what is going into it either. That gap is exactly what a product like Prompt Security is supposed to close, and when SentinelOne picked it up it landed on my desk to evaluate properly. So I did what I usually do:
7 days ago5 min read


What Your Browser Tells Every Website You Visit (And Why I Finally Checked Mine)
Today I opened AmIUnique.org in my browser just to see what it would say. The first line on the screen was: "Yes! You are unique among 5,635,779 fingerprints in our entire dataset." My first reaction was, wait, is that good or bad? I use Brave. I use a VPN. I work in security every day. I thought I had this covered. So I sat down and went through the results line by line. That's why I'm writing this. Most people never look at what their browser is sharing, and once you do, yo
Oct 295 min read


RunReveal Agents: What I Found Without Pressing Run
What Agents Are Supposed to Do Most of a SIEM is reactive. A detection fires, someone gets paged, someone goes and looks. RunReveal's Agents feature tries to move part of that work onto a schedule. You write a prompt, pick a model, set a cron expression, and an LLM goes off, queries your logs with the same tools you'd use, and sends you what it found. There are six starting templates in the console: Weekly Threat Hunt: a recurring hunt that ends in a written report. It doesn'
Oct 178 min read
Ready to discuss:
- Schedule a call for a consultation
- Message me via "Let's Chat" for quick questions
Let's connect!
bottom of page