Editorial policy

This policy explains how articles on the Summit research blog and the compliance guides on sumrite.com are written, checked, dated and corrected. It applies to every article published on the blog.

Who writes the content

Articles are written and reviewed under the name of a named author, currently Faisal Khan, Director at Summit. Some articles are drafted with the help of AI writing tools. Technical steps, commands and configuration examples are checked by Summit's security team, and an article is corrected whenever an error is found, before or after publication.

Where case studies come from

Case studies are based on findings from authorised testing engagements. They are anonymised: client names, domains, data and any detail that could identify the client or expose an unfixed weakness are removed or changed, and a case study is only published with the client's permission.

Accuracy and sources

Hardening guides describe configurations as they behave at the time of writing and link to the vendor's own documentation where possible. Compliance guides are plain-English summaries of public laws, regulations and frameworks, with links to the official sources. They are general information, not legal advice, and they do not replace advice from a qualified lawyer or an accredited auditor.

Dates and updates

Every article shows the date it was first published. Articles are reviewed when the underlying standard, product or regulation changes, and the article is revised whenever the substance of an article changes.

Independence

Summit does not accept payment for coverage, does not publish sponsored articles and does not use affiliate links. Tools and vendors are mentioned because they are relevant to the task, not because of any commercial arrangement. Comparison articles that include Summit alongside other providers say so at the top of the article, so readers know the publisher is one of the firms being compared.

Corrections

If you find an error, email sales@sumrite.com with the page address and what is wrong. Confirmed errors are corrected promptly. Security issues in this website itself should be reported through the security disclosure policy.