Blog & Articles

What penetration testing for councils covers, how CHECK, PSN health checks and the Cyber Assessment Framework fit together, and how to scope and buy a test.

Purple teaming puts your attackers and defenders in the same live exercise. Here is how it works, how it differs from a red team engagement, and when it is worth …

WPA3 and a strong password aren’t proof your Wi-Fi is secure. Here’s what wireless penetration testing actually checks, and why the gaps are quiet ones.

Following the same path a real attacker takes through Active Directory, from one compromised account to full domain control.

A brute force attack guesses passwords until one works. Here is how the main variants differ, how to spot them, and the controls that actually stop them.

What penetration testing for healthcare involves, whether NHS suppliers must do it, how to scope a test around clinical systems and what to do with the report.

Your IT provider holds the keys to your network. Here is what to ask your MSP, and how to check it has been tested the way an attacker would test …

Cross-site scripting lets attackers run their own code in your users’ browsers. Here is how XSS works, the three main types, and the layered defences that stop it.

A plain-English guide to how interception attacks work, the main types from ARP spoofing to evil twin Wi-Fi, and the controls that stop them.

Session hijacking lets an attacker take over a logged-in account without a password or MFA code. Here is how it works, the main types, and the fixes that matter.