Pentesting

Pentesting · 2 Sep 2025 · 5 min read

Common AWS Security Misconfigurations That Cause Breaches

The AWS security misconfigurations that actually cause breaches: public S3 buckets, over-privileged IAM, exposed snapshots, metadata abuse and flat networks.

Pentesting · 22 Jul 2025 · 5 min read

BOLA and IDOR Explained: Broken Object Level Authorisation

BOLA and IDOR explained: how attackers manipulate object IDs to access other users' data, why scanners miss it, and how to test for it properly.

Pentesting · 1 Jul 2025 · 6 min read

OWASP Top 10 Explained: What Each Category Means in Practice

The OWASP Top 10 explained in plain terms: what each category actually means for your dev team, how the flaws happen in practice, and how to fix them.

Pentesting · 20 May 2025 · 5 min read

Subdomain Takeover Explained: Dangling DNS and How to Fix It

Subdomain takeover happens when dangling DNS records point at unclaimed services. How attackers exploit them, the impact, and how to detect and prevent it.

Pentesting · 8 Apr 2025 · 6 min read

How to Prepare for a Penetration Test: A Practical Checklist

Prepare for a penetration test with our practical checklist: scope, environments, test accounts, rules of engagement and comms, so testing days aren't wasted.

Pentesting · 18 Mar 2025 · 5 min read

How Often Should You Do a Penetration Test?

Most organisations need a penetration test at least annually, plus after major changes. Here's how to set the right cadence for your risk and compliance.

Pentesting · 25 Feb 2025 · 5 min read

Penetration Test vs Vulnerability Scan: What's the Difference?

A vulnerability scan finds known issues automatically; a penetration test proves what an attacker can do. Here's when each fits and how to tell them apart.

Pentesting · 4 Feb 2025 · 5 min read

What Is Penetration Testing? A Plain-English Guide

Penetration testing is a controlled, authorised attack on your systems to find real vulnerabilities before criminals do. Here's how it works and what it costs.