Operating standards

How A13E publishes.

A13E publishes daily cyber threat intelligence for the UK cyber security community and the policy makers who drive cyber security programmes. The intel is free to read. This statement explains the editorial standards behind every brief, for readers, supervisory bodies, and the procurement teams that approve A13E for use within regulated organisations. The full operating policy is available to those bodies under non-disclosure agreement.

Audience and remit

A13E publishes intelligence for the UK cyber security community: the practitioners running detection, response, and remediation inside UK organisations, and the policy makers who set and drive cyber security programmes across government, regulators, and supervised industries. Coverage prioritises threats most likely to land on UK organisations and the operating environments their cyber security teams actually face. The editorial framing is targeted at readers who can act on what they read, drawing from vendor PSIRTs, government advisories, exploitation reporting, and independent research. A13E does not attempt to replicate national CERT advisory output. A13E filters and contextualises that output for an audience working under real time and attention constraints.

Editorial independence

A13E publishes under no commercial relationship with the vendors or sources it covers. There is no advertorial, sponsored content, or vendor-paid placement. Coverage decisions are taken by editorial staff according to the verification standards below, not by commercial considerations. A13E does not accept finder's fees from vendors whose products it recommends as mitigations.

Verification standards

Every published finding carries a confidence label of HIGH, MEDIUM, LOW, or UNVERIFIED:

CVE identifiers cited in A13E briefs are verified against authoritative vulnerability databases before publication. Findings that cite advisories not present in those databases are clearly framed as preliminary.

Source diversity

A13E will not publish a brief whose findings are dominated by a single source or source class. Each daily brief draws from a minimum of three distinct source classes: government advisories, vendor security teams, independent research labs, and ecosystem reporting. No single source may account for more than half of a brief's findings. An editorial gate enforces this before every publication.

Publishing rhythm

A13E publishes every day by 08:00 UK time without exception. Every edition reflects what the day's sources actually showed: a full brief on substantive days, a clearly-framed watchlist on low-signal days, or an explicit "no material change" notice on genuinely quiet days. A13E does not pad briefs to maintain a daily-volume metric, and A13E does not go silent. The framing tells clients what the sources said, not the calendar.

Corrections and incident response

A13E commits to acknowledging a verified factual correction within 48 working hours of receipt and to publishing a correction note prominently if the original finding affected client action. Correction notes are appended to the original brief, never overwritten or removed. Editorial errors are logged, reviewed quarterly, and used to tighten verification standards.

Data handling and retention

A13E publishes intel openly on a13e.com. There are no accounts, no subscriber lists, and no email signup. Readers who want notifications can subscribe to the public Atom feed at a13e.com/feed.xml; doing so gives A13E no information about the reader. Published intel is retained indefinitely as a public record. Internal working files (sweep notes, drafts, verification logs) are retained for 90 days and then archived to encrypted storage for one further year. The site uses standard web analytics for aggregate readership metrics; the supplier diligence list, available under non-disclosure agreement, names the analytics provider and what it collects.

Supplier transparency

The supplier diligence list is available to readers and supervisory bodies on request. A13E discloses each third-party service in the production pipeline alongside the function it serves, the data classification it touches, and its contractual terms. A13E reviews this list quarterly and posts a note on a13e.com in advance of any material change.

Contact

Editorial corrections and procurement queries: austin@a13e.com. A13E aims to acknowledge correspondence within one working day and to respond substantively within five.

This statement is reviewed quarterly. Material changes are versioned and the previous version remains available on request.

Version 1.0 · Published 2026-05-09