Guides
Website and AI security guides
Practical advice you can act on today — no jargon required.
9–16 of 20 guides
API keys and secrets: preventing accidental exposure
Where application credentials leak, how to restrict access and what to do when a private key has been exposed.
7 November 2026 · 4 min read
Dependency security: keeping web application packages safe
Track direct and indirect packages, assess advisories, apply supported fixes and verify critical workflows after updates.
7 November 2026 · 4 min read
Healthcare and legal apps: protecting sensitive client data
Map patient and client data across uploads, search, AI features and suppliers before agreeing a safe security assessment.
7 November 2026 · 4 min read
How to prioritise and fix penetration test findings
Turn a security report into an action plan: assess business impact, assign owners, verify fixes and track remaining risk.
7 November 2026 · 4 min read
OWASP Top 10 for AI apps: a plain-English guide
The biggest security risks for chatbots, AI assistants and LLM-powered apps, explained simply — with practical steps to reduce each one.
7 November 2026 · 7 min read
How to check your website’s security headers
What HTTP security headers are, how to check yours in two minutes, and the recommended settings for most business websites.
7 November 2026 · 5 min read
Is a free penetration test safe? What to check first
How to tell a legitimate free penetration test from a risky one — the questions to ask about authorisation, scope, data handling and reporting.
7 November 2026 · 4 min read
Which regulations require penetration testing? A UK guide
PCI DSS, SOC 2, ISO 27001, DORA, UK GDPR, NHS DSPT and Cyber Essentials — which explicitly require penetration testing and which simply expect it.
7 November 2026 · 6 min read