Cyber Security.
Practical writing on brand, growth and technology — and on the connections between them, which is where most of the value hides. No trend-chasing, no filler; frameworks and honest trade-offs, written by the team that does the work.
What Does an Automated Scanner Find on Your Site Today?
Opportunistic scanners are not looking for you. They are looking for a shape: a known version, an exposed path, a missing header, an open form. Here is what they read and what to do about it.
Read
The Dependency You Shipped but Did Not Write
Most of what you ship, you did not write. Software supply chain security is not about reading every package: it is about knowing what is in the build, how old each part is, and which parts nobody maintains.
Read
Security Headers: Which Ones Matter and What Each One Stops
Most of the value sits in four headers, not fourteen. Here is what each one actually blunts, and why a badly written policy can break your site while doing nothing at all for its safety.
Read
How Do You Prepare for the Day Your Site Is Compromised?
An incident response plan is not a document. It is four artefacts prepared while nothing is wrong: an access register, a tested restore, a contact tree and a statement you can publish.
Read
Passwords, Keys and the People Who Left: Access Hygiene
Access management hygiene is not about attackers. It is about accounts that outlived their owners, keys nobody rotated, and a leaver’s list that gets written after the person has gone.
Read
Collect Less: Privacy as a Security Control
The cheapest control you will ever ship is a field you decided not to collect. Data minimisation belongs in the security programme, not in the compliance folder.
Read
What Should a Small Business Actually Do About Phishing?
Awareness training teaches people to spot a convincing lie. The controls that actually hold are the ones that make the fraudulent request impossible to act on, whether anyone spots it or not.
Read
Is Your Backup a Backup, or Just a Copy in the Same Place?
A copy that lives where the original lives is not a backup. Separation, a restore you have actually run, and a retention window long enough to reach past the damage are what make a file dependable.
Read
Third-Party Scripts: The Code Your Marketing Team Added
A tag manager container is standing permission to run somebody else’s code on every page. Treat each script as a supplier: an inventory, a named owner, a review, an expiry date and a way out.
Read
What a Data Processing Agreement Should Say Before You Sign It
Six clauses decide what a data processing agreement is worth: sub-processors, location, retention, deletion, breach notification and audit. The rest is definitions. Read those six first.
Read
How Do You Secure a Website You Did Not Build?
Inheriting a website means inheriting its access list, its unpatched dependencies and its undocumented code. Work in this order: know what you have, take the keys back, prove the backup restores.
Read
Rate Limiting, Bots and Forms: Stopping Abuse Without Blocking Buyers
Form spam prevention is a layered problem with one rule: the defences that cost a real buyer the most are usually the ones that stop the least. Start at the server and work outwards.
Read
Why Do Small Sites Get Attacked at All?
Nothing about your site was chosen. Automated scanners look for a version string and a weak login, and what they resell is your hosting, your standing with search engines, and your visitors.
Read
Incident Communication: What to Say While You Still Do Not Know
Breach communication fails on timing, not wording. Publish a holding statement within the hour, commit to a next-update time, and refuse to guess at cause, scope or blame.
Read
Should You Run a Penetration Test or Fix the Obvious First?
A penetration test priced for a week of expert time should not spend two days rediscovering an unpatched plugin. Clear the readiness bar first, and fund the fixes before you fund the test.
Read15 articles in Cyber Security.
Rather talk it through
than read about it?
Every engagement starts with a conversation about where your business is going.