Insights
Practical guides for people buying a penetration test, and technical deep dives for the people fixing the findings.
How attackers misuse machine accounts in Active Directory, from the default quota to old pre-created accounts, and the settings that shut each route down.
What resource-based constrained delegation is, why attackers love it for moving through Active Directory, and how to detect and prevent its abuse.
TechnicalThe OWASP Top 10 (2025), explainedA plain-English guide to the OWASP Top 10 2025 web application risks, what changed from 2021, and what each category means for your application and team.
TechnicalCross-site scripting (XSS): how it works and how to stop itWhat cross-site scripting is, the three main types, why it still appears in modern applications, and the layered defences that reliably prevent it.
Found something worrying? Get it tested properly.
Tell us what you need tested. You'll get questions or a fixed quote within three working days.