Accuracy and verification
Nulltap publishes work that can withstand comparison with the underlying record. Quotations, dates, version ranges, identifiers, victim counts, technical mechanisms, and consequential defensive claims are checked before publication. A claim that the evidence cannot support is removed or qualified.
Articles distinguish established facts from vendor statements, researcher assessments, attribution judgments, and Nulltap analysis. Unknown scope, impact, exploitation, or root cause is stated plainly.
Sources and attribution
Nulltap prefers primary evidence such as advisories, filings, court records, technical reports, official statements, and direct technical artifacts. Important sources are linked where readers first encounter them and collected in the article’s primary-source block.
Anonymous or confidential sourcing is exceptional. Before accepting it, the editor must agree on the communication method, the basis for confidentiality, and how the information will be protected. Claims from unnamed sources require independent support before publication. The standard tip email is not an anonymous channel.
Malicious artifacts and public links
Nulltap explains technical mechanisms in the detail defenders need. It also separates detection indicators from acquisition paths. Articles print defanged domains and IP addresses, hashes, filenames, paths, registry keys, environment variables, service names, malicious package names and versions, detection markers, audit operations, log paths, and command signatures when the evidence supports them.
Malicious and operational artifacts are text-only references by default. Public links point to defensive, vendor, research, or analysis material rather than live malicious packages, payload downloads, phishing pages, weaponized exploit repositories, or campaign infrastructure. A complete or defanged acquisition path receives the same review as a clickable link.
A direct artifact link is exceptional. The Editor in Chief must find that it is an official, defensive, or genuinely dual-use research resource; does not deliver a payload or facilitate an active campaign; is responsibly public; materially helps defenders verify or remediate; and provides value that an advisory or research report cannot. The finding is recorded with the article review.
Independence and conflicts
Editorial coverage is selected for its relevance to defenders. Nulltap does not accept payment in exchange for coverage or an editorial conclusion. A material personal, financial, or professional conflict is disclosed with the affected article or the assignment is declined.
If Nulltap introduces advertising, affiliate relationships, or sponsored material, that material will be identified clearly and kept separate from editorial decisions. When reporting uses terms such as paid ads or sponsored results, it describes the campaign evidence, not a Nulltap commercial relationship.
Editorial accountability
The named editor is accountable for every published article. Review covers the source record, headline, factual claims, language, defensive value, and visuals. A deadline, vendor request, or desire to publish does not lower the evidentiary standard.
Visual integrity
Photographs, screenshots, logos, illustrations, and diagrams must identify or explain the reported story without fabricating evidence. Third-party material requires a documented right to use it. Editorial illustrations are not presented as documentary images, and technical figures are checked against the relationships described by the sources.
Corrections
A material factual correction receives a dated note explaining what changed. Spelling, typography, and formatting may be fixed without a note when the change does not alter meaning. Send the article URL, disputed text, and supporting evidence to [email protected].
Reader questions and complaints
Questions about sourcing, fairness, conflicts, or these standards may be sent to [email protected]. Include the article URL and the specific passage or decision at issue so the desk can review the record.
Reader safety
Nulltap provides journalism and general technical information. Defensive guidance names its assumptions and expected result when the source record supports them. Readers should confirm current vendor guidance and evaluate commands or configuration changes against their own systems before acting.