Remediation Advisories
Step-by-step guidance for fixing specific security issues. Includes configuration examples, verification commands, and common mistakes to avoid.
Other Research Categories
DNSSEC and CAA Records: Protecting DNS Integrity and Certificate Issuance
DNSSEC prevents DNS responses from being forged. CAA records restrict which certificate authorities may issue certificates for your domain. Both are DNS-layer controls that address distinct attack classes. This article explains how each works, how to configure them, and how to verify they are active.
Cookie Security: Secure, HttpOnly, SameSite, and What Each Attribute Actually Does
A practical guide to HTTP cookie security attributes. Covers the Secure, HttpOnly, and SameSite flags, what happens when each is missing, how domain scoping affects subdomain exposure, and how to verify your cookies are correctly configured.
SPF, DKIM, and DMARC: Why All Three Are Required and How to Verify Them
Missing or misconfigured email authentication records allow attackers to send spoofed email from your domain. This article explains what SPF, DKIM, and DMARC each do, why having only one or two is insufficient, and how to verify your records are correctly configured.
HSTS Preloading: Requirements, Risks, and How to Apply Correctly
HTTP Strict Transport Security prevents protocol-downgrade attacks. This article covers the difference between HSTS and HSTS preloading, the exact requirements for preload eligibility, the risks of getting it wrong before submission, and how to verify your configuration.