Dependencies and SBOM: controlling the software supply chain
Applications rely on third-party libraries. Learn how SBOM inventories, continuous checks and clear update and package selection rules help manage the risks.
3 min read
ARTICLES AND GUIDES
Blog
Practical articles on testing, protection and security management, with links to public frameworks and vendor documentation.
Dependencies and SBOM: controlling the software supply chain
Applications rely on third-party libraries. Learn how SBOM inventories, continuous checks and clear update and package selection rules help manage the risks.
3 min read
How to read a penetration test report and set remediation priorities
A penetration test report is the start of remediation. Learn to interpret severity in context, assign owners, plan fixes and verify them through retesting.
3 min read
IDOR and API authorisation: a flaw automated scanners often miss
If changing a number in an API request returns someone else's invoice, object-level authorisation is broken. Learn why scanners miss it and how to address it in design and code.
3 min read
How to prepare for a penetration test
Good preparation saves time and produces more useful results. Here is what to clarify beforehand: scope, authorisation, Rules of Engagement, test accounts and contacts.
3 min read
INITIAL CONVERSATION, NO OBLIGATION
Not sure where to start? Tell us what you are facing.
You do not need to know whether you need a test, a technology or a consultation. We will suggest a suitable next step based on your situation.