Detection Advisories
How to identify security issues before they are exploited. Covers passive analysis, evidence interpretation, and distinguishing confirmed findings from false positives.
Other Research Categories
Information Disclosure in HTTP Responses: What You Are Leaking and How to Stop It
HTTP responses routinely leak server software versions, framework names, internal IP addresses, file system paths, and stack traces. None of these are required for the application to function. This article covers each disclosure type, the reconnaissance value it provides to attackers, and how to remove it.
How to Verify Security Header Deployment After a Change
Deploying a security header is not the same as verifying it is being served correctly. CDN configurations, reverse proxies, and per-route overrides can silently strip or modify headers. This article covers how to reliably verify that the headers you configured are actually reaching users.