5 min read
What Is Infrastructure Penetration Testing?
Infrastructure penetration testing evaluates your networks and systems through external and internal assessments. Here is what it covers.
Read more
Blog
Practical, plain-language notes on penetration testing, web and network security, and hardening.
4 min read
Microsoft's Windows 365: An Option to Consider for Remote Workers
Windows 365 offers cloud PCs for remote and hybrid teams. Here is a quick overview and a few points to weigh.
Read more4 min read
FTC Says Predatory Schools Have Been Targeting Active Duty Military and Veterans
A summary of a Federal Trade Commission consumer protection post about for-profit schools targeting service members and veterans.
Read more3 min read
Hide the Nginx Server Header
The Nginx Server response header can reveal version details. Turning off the version takes about a minute.
Read more5 min read
Penetration Testing vs Bug Bounty
Penetration testing and bug bounty programs solve different problems. Here is how they compare and when each makes sense.
Read more4 min read
Using X-Frame-Options to Avoid Clickjacking in Your Web Application
Clickjacking uses hidden frames to trick users into clicking. X-Frame-Options and CSP frame-ancestors let you control who can frame your pages.
Read more5 min read
The Dangers of Misconfiguring CORS Headers on a Web API Server
How CORS works, why a misconfigured policy creates risk, and how to set Access-Control-Allow-Origin safely.
Read more4 min read
Web Application Penetration Testing Companies
Not all web application penetration testing companies are the same. A few practical questions help you gauge a firm's depth before you sign.
Read more