Blog

Do you remember Maslow's Hierarchy of needs? How humans need food and water before they can start thinking about self actualization? This post talks about the first level in a theoretical security hierarchy of needs.

How to make sure you get your money's worth for a penetration test - what to ask for, how to tell a great vendor from a scan factory.

Are you a tech leader that gets pulled in to help sales with security questions? This post talks about how we see that play out.

The other day we were giving developers security training around server side request forgery (SSRF). We see this all of the time now (see this great and detailed post by our team on SSRF in Real Life). It can be shockingly damaging. In any case, during the training the developers brought up a very interesting […]

Ever wonder about the effectiveness of audits? This post talks about the good, bad and ugly side of cybersecurity audits.

Ever wonder about the effectiveness of audits? This post talks about the good, bad and ugly side of cybersecurity audits.

This post provides a view into a phishing campaign that targeted job candidates at a customer.

This post is a feature spotlight on the securityprogram.io network scanning.

Now that Server-Side Request Forgery (SSRF) has finally made it onto the OWASP Top 10 you may find yourself wondering whether this is really something you should be worrying about in your apps, or if it's more of an abstract risk that's not really exploitable in the wild. Let me confirm your fears: It is […]

On Friday we wrote a blog post that talked about remote work and security from a workers perspective. We included a checklist. In this post, we want to develop that idea and talk about it more generally from a company and IT strategy perspective. We’ll start with some pictures to illustrate some of the issues. […]