Blog

What is CREST (Council of Registered Ethical Security Testers) Simply put, CREST is an accreditation and certification body for the security industry. It sets standards … Read more

Introduction to API Security Testing In this blog post, we explore the topic of API Security Testing and provide real-world examples, including code snippets and … Read more

Introduction to Digital Technology Assessment Criteria As we move into a digital age, keeping track of your health has become a lot easier with the … Read more

Introduction Authorised Economic Operator (AEO) is a status that a lot of UK companies want to obtain for the sake of their continued growth. AEO … Read more

How to protect against Phishing Attacks. A comprehensive guide to phishing mitigation for security-conscious Business Owners.

Organisations are legally and ethically obligated to protect the data of their users. Negligent handling of user data opens up the organisation to fines or lawsuits from its users. In Europe and the UK, users own their data, giving them the right to revoke access or alter it when the organisation stores it. This risk to the user’s data and the organisation arises because user data holds value for both.

Introduction Navigating the complex terrain of web penetration testing can be daunting. As an experienced penetration tester specialising in web application security, I can assure … Read more

Introduction In the expansive landscape of cyber security careers, opportunities abound across a diverse range of specialisations. Whether you’re inclined toward roles like Security Operations … Read more

Web application penetration testing describes the process of simulating an unobtrusive attack against a web application. It allows companies to understand vulnerabilities that are easy to miss during the development process. These vulnerabilities can have wide-reaching consequences to the application as well as the data stored within its database. 

Cross-Site Scripting (XSS) attacks are injection attacks in which malicious scripts are injected into otherwise trustworthy and innocuous websites. XSS attacks occur when an attacker uses a web application to send malicious code to a particular end user, usually in the form of a browser side script.