Insights
Security and compliance, in practice.
Notes on penetration testing, compliance and the attacks we simulate, written from hands-on testing experience.
DORA · Compliance
DORA and the Secure SDLC: What Your Engineering Team Needs to Prove
What DORA's Article 16 expects your engineering team to prove, five questions to check where you stand, and where penetration testing and TLPT fit in.
Read article
iOS · Mobile security
Storing secrets in the iOS Keychain is only half the job
The other half is the settings: when a secret can be read, who must be present, six common mistakes attackers exploit, and how to fix them.
Read article