Insights
Original research, not listicles.
Written by the people who did the work — founder-led, drawn from anonymised patterns across our own caseload.
Detection Engineering
Alert volume is not a security metric
Why the number of alerts a platform generates tells you almost nothing about whether your organisation is actually safer.
Elena Marsh · 2 Jun 2026
Compliance
DORA is a resilience test, not a compliance checkbox
What actually changes operationally for UK-serving financial firms under DORA, beyond the paperwork.
Merrow Research Team · 14 May 2026
Incident Response
The first 90 minutes of a ransomware event
A breakdown of the decisions that determine containment scope, drawn from anonymised patterns across Merrow's retainer caseload.
Tomás Reyes · 22 Apr 2026