Posts

Browse all posts in one place. Find tutorials, deep dives, guides and updates on AI, programming, security, infrastructure and web development.

Types of Penetration Testing: Black, White and Grey Box

Not all penetration tests are the same. The types of penetration testing differ along two axes: how much the tester knows about your systems in advance (black, white, or grey box) and what part of your environment is in scope (a web app, an API, the network perimeter, and so on). Getting these right is what makes a...

Server Security Audit Checklist: What Actually Gets Checked

A server security audit is a systematic review of a server’s exposure and configuration to find where an attacker could get in and what they could do once inside. If you have been asked to commission one, or you want to run an internal review, this guide explains exactly what a thorough audit examines and why each area...

OWASP Top 10 Explained for Business Owners

The OWASP Top 10 is the most widely referenced list of web application security risks, published by the Open Worldwide Application Security Project (OWASP) , a respected non-profit. It is written for security professionals, but the risks it describes have direct business consequences: data breaches, downtime, fines,...

Mainframe Modernisation: Rewrite, Refactor or Replatform

Mainframe modernisation is rarely a single decision. It is a choice between several distinct strategies, each with a very different cost, timeline, and risk profile, and the right answer depends on your business goals rather than on technology preference. Choosing “rewrite everything” when a replatform would do, or...