diff --git a/ai-security/prompt-engineering/README.md b/ai-security/prompt-engineering/README.md
index 4c0136a..b061eb9 100644
--- a/ai-security/prompt-engineering/README.md
+++ b/ai-security/prompt-engineering/README.md
@@ -22,15 +22,9 @@ layout:
 
 # Prompt Engineering
 
-### Introduction
+Use AI-assisted analysis carefully in security operations. Check outputs against the original logs, product documentation and investigation evidence before acting on a recommendation.
 
-**Artificial intelligence**—particularly generative AI and large language models (LLMs)—has become a core tool in cybersecurity operations. From accelerating threat detection to automating incident response and enriching threat intelligence, AI augments defenders' capabilities at an unprecedented scale.
-
-However, **the quality of AI outputs depends almost entirely on the quality of the inputs:** this is where prompt engineering comes in. Prompt engineering is the disciplined practice of crafting precise, structured, context-rich instructions (prompts) to guide AI models toward reliable, accurate, and actionable results.
-
-While some argue that autonomous AI agents and auto-optimisation reduce the need for manual prompting (e.g., shifting focus to oversight and judgement), prompt engineering remains essential in cybersecurity, where precision, evidence-based reasoning, hallucination avoidance, and auditability are non-negotiable.
-
-This page explores why prompt engineering matters profoundly for cyber defenders (SOC analysts, DFIR practitioners, threat hunters, and detection engineers) and the broader cybersecurity field.
+## Background
 
 ### What Is Prompt Engineering?
 
diff --git a/knowledge-base/tools-how-to/README.md b/knowledge-base/tools-how-to/README.md
index fa5d67c..9d8576a 100644
--- a/knowledge-base/tools-how-to/README.md
+++ b/knowledge-base/tools-how-to/README.md
@@ -22,21 +22,9 @@ layout:
 
 # Tools How-To
 
-## Operational Tooling Guides
+Practical notes for security tooling. Use these guides to understand capabilities, prerequisites and common investigative workflows. Verify all commands before use on production systems.
 
-#### Master the Instruments of Cyber Warfare
-
-**Theory is useless without execution.**
-
-This section is the technical field manual for the tools that define the battlefield. Whether you are hunting persistence in memory, mapping an adversary's perimeter, or living off the land, proficiency with these binaries is non-negotiable.
-
-We do not provide "man page" summaries. We provide operational syntax—the exact flags, chains, and logic required to achieve effects in real-world environments.
-
-***
-
-[Select Your Weapon →](https://rootguard.gitbook.io/cyberops/resources-hub/tool-arsenal)
-
-***
+## Tool guides
 
 ### The Philosophy of Tooling
 
diff --git a/resources-hub/tool-arsenal/README.md b/resources-hub/tool-arsenal/README.md
index 0eb10d7..d8d9b26 100644
--- a/resources-hub/tool-arsenal/README.md
+++ b/resources-hub/tool-arsenal/README.md
@@ -22,17 +22,11 @@ layout:
 
 # Tool Arsenal
 
-## Operational Tooling for the Modern Defender
+Find tools used for authorised security operations, evidence collection and investigation. Check the tool's current documentation, version and licensing before using commands from RootGuard.
 
-**Automate. Hunt. Eradicate.**
+## Tools and workflows
 
-Manual forensics doesn't scale. RootGuard Operational Tooling bridges the gap between detection and remediation, providing battle-tested tools to accelerate triage, automate evidence collection, and execute deep-dive investigations.
-
-This is not a script dump. This is a curated armoury of frameworks designed to function in hostile environments without deployment friction.
-
-***
-
-### The Arsenal
+## The Arsenal
 
 #### 🛡️ Custodian-HT