Security Field Kit
The guide, editable workbook and control register for running a release review. US$149, paid once, with applicable taxes included.
Preview the workbook, controls and worked example →
Security Field Kit
$149 one-time purchase; applicable taxes included
- For
- A founder, builder, product owner or team taking responsibility for a working system.
- Outcome
- A repeatable way to identify consequential security decisions, validate boundaries and keep evidence as a system changes.
- Includes
- From Prototype to Production (PDF); Review Workbook (PDF + DOCX); Control Register (XLSX + CSV); Harbor Desk Worked Example (PDF); Start Here (PDF); License (TXT). Eight files in one 3.1 MB ZIP.
- Applies to
- Useful beyond a single launch and beyond any one hosting provider. Provider-specific material is labeled as an implementation example.
- You need
- Access to the system you are responsible for, or its documentation.
- Not included
- No lifetime revisions, future titles or personalized adaptation. Not a review of your system.
- Updates
- The supplied license does not promise future updates.
- Support
- Billing and access questions through the contact form. No individual advice or implementation work included.
- License
- Licensed purchaser or organization; completed client deliverables permitted. Full license on the product page.
Reviewed 2026-10-31
The Four Gaps
Start with a free introduction to the method and a worksheet for your first review.
The Four Gaps
Free
- For
- Anyone responsible for a website, application, API, internal tool, data workflow or AI system.
- Outcome
- A shared way to think about permission, behavior, proof and drift, with a worked handoff example and a first review worksheet.
- Includes
- Read online; PDF; Word; Markdown.
- Applies to
- Platform-neutral principles. It does not depend on any framework, host or language.
- Not included
- Not a certification or a substitute for technical standards such as OWASP ASVS or NIST SSDF.
- Updates
- Corrections are issued as numbered editions; the edition and date are printed in the guide.
- Support
- Report errors through the contact form.
- License
- CC BY 4.0
Reviewed 2026-10-29
Implementation playbooks
These playbooks are in development and cannot be purchased. The planned package covers one defined workflow with templates, guided prompts, verification steps, a worked example and evidence examples. Prompts are components of the workflow: each lists its prerequisites, expected output, how to validate the result and its limits.
Access and Data Boundaries Working title
$99 per playbook, one-time purchasePlanned pricing
- For
- A builder or team whose system has accounts, customer organizations, staff access, integrations or uploaded files.
- Outcome
- Write the intended access rules for your system, test them with synthetic identities and keep the evidence.
- Includes
- One defined workflow; Templates; Guided prompts with prerequisites, expected outputs, validation and limits; Verification steps; A worked example; Evidence examples. Planned package for each playbook.
- Applies to
- Principles apply to any stack. Worked examples will name the technologies they cover.
- You need
- An authorized test environment and synthetic accounts for the boundaries you test.
- Not included
- Prompts are components of the workflow, not a guarantee of correct output. Not a review of your system.
- Updates
- A purchase includes the stated edition and its listed files. Corrections to that edition are included.
- Support
- Billing and access help. Corrections reported through the contact form.
Reviewed 2026-10-30
How a playbook module is built
- The problem and its consequence
- Relevant context, and when the module does not apply
- The principle
- Implementation alternatives, labeled by platform where they differ
- Steps
- Verification
- An evidence template
- A worked example
- Limits
- Sources and review date
Further playbook subjects will be announced when they are ready.