Security headers: why your website is probably failing the most basic security check
Five HTTP response headers. Most websites are missing at least three of them. What they do, why attackers look for the gaps, and how to fix it.
Read article →Blog
Practical articles on web security, vulnerabilities and what to do about them.
Five HTTP response headers. Most websites are missing at least three of them. What they do, why attackers look for the gaps, and how to fix it.
Read article →Germany's NIS2 law has applied since December 2025, and roughly 29,500 businesses must register. A two-question test shows whether yours is one of them, and what to do if it is not.
Read article →Two critical vulnerabilities in PHP sent thousands of sites offline. What CVE-2026-109618 and CVE-2026-109619 mean, and the steps that matter now.
Read article →A hack can be fixed in days. Recovering the reputation of your domain takes weeks. How domain blocklists work, why they hurt more than the hack itself, and how to find out before your customers do.
Read article →A stolen cloud backup vendor credential opened over 2,250 Microsoft 365 tenants. What the ConnectWise breach teaches SMEs about third-party access, and what you can actually control.
Read article →