Website security library
Use these references to understand an external security signal, validate it with the responsible team and plan a safe remediation and retest.
These are maintained product and technical reference pages, not a chronological blog.
TLS security check
Understand the certificate, protocol and HTTPS signals visible on an authorized public endpoint.
Open page02HTTP security headers
Review browser-facing response headers and decide which controls fit the application.
Open page03DNS security review
Check the public records that route web and email services and identify avoidable configuration risk.
Open page04SPF, DKIM and DMARC
Understand how public email authentication records reduce unauthorized use of a domain.
Open page05Open ports and public services
Decide whether each internet-reachable service has a current owner and business purpose.
Open page06Subdomain discovery and ownership
Use discovered names as an inventory lead, then verify ownership before assessment or remediation.
Open pageTurn the observation into a decision.
Review the illustrative report first, then define the domains and hosts you are authorized to assess in your workspace.