How does CoSA Lab source its facts?
CoSA Lab links every factual claim to its primary source: the vendor's advisory or documentation, the original research report, the standards body, or the official statement. We don't cite other news write-ups as proof. When a fact can't be confirmed from a primary source, we leave it out or say plainly that it is unconfirmed.
Briefs about breaches and reports follow a stricter rule. A brief says nothing about what happened until the facts come from the affected vendor or the original report.
How are pages dated?
Each page shows the date its content last changed. A change in the date means the facts or the steps changed, not just a typo fix or a design update.
How does CoSA Lab handle corrections?
When CoSA Lab gets something wrong, we fix the page and add a note at the end saying what changed and when. To report an error, use the contact page.
Is CoSA Lab independent?
Yes. CoSA Lab carries no affiliate links, no sponsored posts and no "best tool" lists, and no vendor pays for coverage. When a guide names a vendor's feature, it is because readers are likely to be using that vendor already.
Does CoSA Lab use AI tools to write?
Yes. CoSA Lab uses AI tools to help find primary sources and draft pages. The same rules apply to every page however it was drafted: each factual claim links to the primary source it comes from, claims that can't be confirmed are left out, and a person edits and approves the page before it is published.
What doesn't CoSA Lab publish?
- Hacking tutorials, exploit code or attack walk-throughs
- Freebies, tools or gated downloads
- Affiliate links or "best tool" lists
- Warnings without a source behind them
