WNCDS traverses trust relationships backward from your protected assets to find every node that holds an unprotected path to your crown jewel data — using only publicly observable information. No authenticated access. No systems touched. No disruption.
Every other security methodology starts with the attacker and works forward. WNCDS starts with what matters — your protected assets — and traverses backward through every trust relationship to find every node that can reach them. The result is a consequence-classified map of your real exposure, derived entirely from public data.
Three case studies across the security sector reveal a consistent pattern. The organisations that teach, certify, and advise on security carry the same weak node exposure as the clients they serve. Security expertise does not self-immunise internal infrastructure.
Three organisations assessed using passive DNS reconnaissance only. No systems accessed. All findings derived from publicly observable data. Organisation identities are withheld — the methodology, findings, and remediation patterns are the research contribution.
The cybersecurity industry operates on an unverified substrate. Organisations hold certifications, adopt frameworks, and write policies. But the actual observable state of their internet-facing infrastructure — the ground truth — is rarely verified continuously against those claims.
WNCDS was developed to close that gap. By starting with protected assets and traversing backward through every trust relationship to every reachable node, the methodology produces a consequence-classified map of real exposure — derived entirely from publicly observable data, without touching a single system.
The research is ongoing. Each case study builds the evidentiary base for a finding that has implications for how the industry certifies, audits, and verifies security posture. WNCDS provides the verification instrument.
Assessments are offered on a complimentary basis to organisations in the security, compliance, and regulated data sectors. The output is a complete WNCDS report — classified, consequence-mapped, and remediation-ready. No systems touched. No disruption to your operations.
The WNCDS methodology document is available for download. It details the full Weak Node Classification and Detection System — the reverse reachability framework, classification rules, consequence path analysis, and the governance principles derived from three case studies across the security sector.