Blog
Guides for keeping your business secure and running smoothly
Plain-language guides on penetration testing, digital exposure, cloud security, AI automation and building software for your business.
All posts
What to do after you get a penetration test report
Got a long pentest report? Here is how to read it, fix the risks in the right order, ask for a re-test and keep records.
How to check if your company emails were in a data breach
Find out whether your team's work email addresses appear in known breaches, what to do if they do, and how to stop password reuse.
Logo files and brand assets to ask your designer for
Vector logo, colour versions, icon, brand guide and source files. A checklist of what to get at handover and what to check in the contract.
How to prepare for a penetration test
A plain checklist for business owners: scope, written permission, test accounts, backups and who to call, so your penetration test runs smoothly.
How to find look-alike domains that copy your brand
Look-alike domains are used in phishing. Learn how to spot ones that copy your brand, what to check and how to report them.
Five AWS account mistakes small teams make
Using the root login, skipping MFA, leaving admin rights on, hard-coding keys. Check your AWS account for these five mistakes.
Why a chatbot gives wrong answers from your documents
A chatbot built on your files can still make things up. Here is why, and how retrieval, source links and testing keep answers right.
How to check if your AWS S3 buckets are public
A step-by-step way to see whether your S3 storage is open to the internet, turn on Block Public Access and fix the usual leaks.
How APIs leak other users' data, and how to stop it
Changing one ID in a request can show someone else's record. Learn what broken object-level authorisation is and how to fix it in your API.
How to extract invoice data with AI and keep it accurate
AI can read invoices from PDFs and scans. Learn the review step, the checks and the tests that stop wrong numbers reaching your books.
Website, web app or SaaS: what does your idea need?
A website shows information, a web app lets people do things, SaaS is how you sell it. Work out which one your project really is.
WhatsApp chatbot for a small business in India
Meta's built-in Business AI, a custom bot on the WhatsApp API, or no bot yet. Learn how to choose, what to prepare and what can go wrong.
Vulnerability scan vs penetration test for small business
A scan lists known weaknesses. A penetration test shows what an attacker could do. Learn which one your business needs first, and when to do both.