Articles about Web security
Everything we have written about Web security.
- All topics
- WordPress
- Web security
- Incident response
- Ransomware
- Secure development
- Compliance
- Identity and access
- Phishing
- Penetration testing
- Email security
- Vulnerabilities
-
A practical WordPress security checklist
Twelve WordPress hardening steps in a sensible order, from updates and abandoned plugins to 2FA, XML-RPC, backups, file integrity and a WAF.
-
Security headers that matter, and the ones to retire
A practical guide to CSP with nonces, HSTS and preload, frame-ancestors, Referrer-Policy, Permissions-Policy and COOP, with examples and what to drop.
-
How to design and test secure file uploads
A checklist of controls for file upload features, based on the OWASP cheat sheet, with a table of tests to run against each upload endpoint.