Articles about Secure development
Everything we have written about Secure development.
- All topics
- WordPress
- Web security
- Incident response
- Ransomware
- Secure development
- Compliance
- Identity and access
- Phishing
- Penetration testing
- Email security
- Vulnerabilities
-
Security headers that matter, and the ones to retire
A practical guide to CSP with nonces, HSTS and preload, frame-ancestors, Referrer-Policy, Permissions-Policy and COOP, with examples and what to drop.
-
Before you connect company data to an AI assistant
A checklist for IT teams: data classification, hostile input, access control, logging, vendor review and ownership before connecting an LLM.
-
How to design and test secure file uploads
A checklist of controls for file upload features, based on the OWASP cheat sheet, with a table of tests to run against each upload endpoint.
-
JWT security pitfalls and how to avoid them
Common JWT mistakes - alg none, RS256 and HS256 confusion, weak HMAC secrets, missing claim checks, kid injection, revocation and storage - and the fixes.
-
A one-week GitHub Actions hardening plan for dev teams
Five daily tasks for GitHub Actions: token permissions, action audits, script injection, secrets handling and workflow ownership.
-
Cyber Resilience Act: a 2026 plan for product makers
What software and hardware teams should set up before CRA obligations apply: development evidence, vulnerability handling, updates and documentation.