Web Security
Articles, guides and tutorials on web security, covering OWASP Top 10 vulnerabilities, secure headers, injection prevention and protecting web applications.
Cloudflare AI Crawl Control WAF Rules: Fix Rule Conflicts
Configure Cloudflare AI Crawl Control WAF rules with clear precedence and verified tests. Diagnose crawler blocks while preserving intended search access.
Continue ReadingPHP2Shell Exploit: Is Your PHP Website Safe? Patch Now
PHP2Shell puts PHP websites at risk. Check the fixed versions, understand Cloudflare WAF limits, and get help checking, monitoring and patching servers.
Continue ReadingDrupal Security: Advisories, Patching and Real Risk
How Drupal security advisories work, why the gap between publication and patching is the entire risk, and what hardening actually buys you.
Continue ReadingPassword Storage: What to Use in 2026
Which hashing algorithm to choose and with what parameters, why a salt is not enough on its own, and the storage mistakes that survive for years.
Continue ReadingSoftware Supply Chain Security for Small Teams
Where dependency risk actually comes from, which controls repay the effort at small scale, and what an SBOM does and does not tell you.
Continue ReadingBlocking or Allowing AI Crawlers: The Business Decision
Whether to block AI crawlers is a commercial decision, not a technical one. What Cloudflare changed, what blocking costs you, and how to decide.
Continue ReadingAPI Security: How to Protect a Public API in 2026
API security beyond the auth header: the attacks that actually hit public APIs, what a penetration test finds, and how to close each class of flaw.
Continue ReadingWordPress Hacked: Malware Removal and Recovery Guide
Your WordPress site is hacked. What to do in the first hour, how to remove malware properly, why restoring a backup rarely works, and what recovery costs.
Continue ReadingCloudflare Zero Trust: Enterprise Access Security Guide
Thinking of migrating? Read our guide on cloudflare zero trust pricing, application access controls, secure tunnels, and device vetting.
Continue ReadingCyber Essentials Compliance: A UK Vetting Guide 2026
Want to achieve cyber essentials compliance uk? Read our enterprise guide on scoping audits, technical security checks, and certification costs.
Continue Reading