What an attacker can learn about your company without touching your website
Certificate logs, DNS records, job adverts and old web archives say a lot about your company. Here is how to look at yourself the way an attacker would.
Guides
You deleted the password from Git. It’s still there.
Deleting a leaked secret in a new commit doesn't remove it. See it for yourself in a minute, then learn what to do, in the right order.
Before you buy a penetration test, read this
Two companies can sell you a "penetration test" and deliver very different things. Eight questions to ask, the red flags to watch for, and what a good report contains.