7 min read
What Is Infrastructure Penetration Testing?
Infrastructure penetration testing evaluates your networks and systems through external and internal assessments. Here is what it covers.
Read more
Blog
Practical, plain-language notes on penetration testing, web and network security, and hardening.
4 min read
Microsoft's Windows 365: An Option to Consider for Remote Workers
Windows 365 offers cloud PCs for remote and hybrid teams. Here is a quick overview and a few points to weigh.
Read more4 min read
FTC Says Predatory Schools Have Been Targeting Active Duty Military and Veterans
A summary of a Federal Trade Commission consumer protection post about for-profit schools targeting service members and veterans.
Read more13 min read
Hide the Nginx Server Header
How to hide or remove the Nginx Server header: server_tokens off, the headers-more module, and a curl check to confirm the change.
Read more5 min read
Penetration Testing vs Bug Bounty
Penetration testing and bug bounty programs solve different problems. Here is how they compare and when each makes sense.
Read more4 min read
Using X-Frame-Options to Avoid Clickjacking in Your Web Application
Clickjacking uses hidden frames to trick users into clicking. X-Frame-Options and CSP frame-ancestors let you control who can frame your pages.
Read more8 min read
The Dangers of Misconfiguring CORS Headers on a Web API Server
How CORS works, why a misconfigured policy creates risk, and how to set Access-Control-Allow-Origin safely.
Read more