Beginner
Domain Security Hardening Guide
DNS, registrar locks, and email authentication in the right order.
Guides
Do the work in the right order.
Each guide is written as a sequence, because security work done out of order tends to get undone.
Intermediate
Quarterly Attack Surface Review
A repeatable process for validating your external inventory.
Intermediate
API Security Baseline
Authentication, rate limiting, and versioning practices for production APIs.
Beginner
Phishing Response Playbook
Triage, containment, and user communication steps.
Advanced
Secret Rotation Runbook
How to rotate exposed credentials without breaking production.
Beginner
Security Onboarding: First 30 Days
What to inventory, measure, and fix when you inherit an environment.
Checklists
Checklists to work through
Small Business Security Checklist
Practical baseline controls for teams without dedicated security staff.
24 items
Startup Due Diligence Checklist
What to prepare before your first enterprise security questionnaire.
18 items
Domain & Email Security Checklist
SPF, DKIM, DMARC, DNSSEC, and registrar hardening.
16 items
API Security Checklist
Authentication, authorization, exposure, and lifecycle checks.
22 items
Employee Offboarding Checklist
Access, devices, credentials, and third-party accounts.
14 items
Incident Readiness Checklist
Roles, contacts, evidence handling, and communication templates.
20 items