Concepts
HTTPS vs. SSL vs. TLS: the terms, untangled
People say SSL, TLS and HTTPS as if they are the same thing. They are related but distinct — and one of them has been retired for years. Here is the clean version.
Tag
#concepts
Concepts
What is a CVE, and how do you know if you are affected?
You keep seeing CVE-2024-something in advisories and dependency warnings. Here is what that ID actually is — and the more useful question of whether it touches you.
Concepts
Pentest vs. automated scan vs. bug bounty: which do you need?
Pentest, scan, bug bounty — they sound interchangeable but they are not. Each catches different things at a different cost. Here is how to choose.
Concepts
What is an attack surface? Your website edition
Your attack surface is simply every way the outside world can reach your site. Understanding it is the first step to shrinking it — here is what counts.
Concepts
How VerifiedApp scans without touching your data (GDPR by design)
A security scanner is in a position of trust. Here is exactly what ours does and does not do — only your domain, no third-party probing, no plaintext secrets stored.
Concepts
What does an automated website security scan actually check?
Automated scans are not magic. They check a defined list of things an attacker can see from outside. Here are the eight categories, and what each one means.