Guides

Fix the finding without breaking production.

Query-first technical guides with evidence, rollout order, rollback and known limits.

Web Exposure Audit

Website security headers check: a practical remediation order

Run a security header audit, understand which missing controls matter first, and avoid breaking production with an unsafe rollout.

CSP Policy Analyzer

Content Security Policy checker for small teams

Review CSP directives and move from Report-Only to enforcement without guessing.

Web Exposure Audit

How to check HSTS before enabling preload

Validate HTTPS coverage, max-age and subdomains before making an HSTS decision that is difficult to reverse.

Email Spoofing Audit

DMARC record check and enforcement roadmap

Interpret p=none, quarantine and reject, then phase enforcement using aggregate evidence.

Email Spoofing Audit

SPF record check: syntax, lookup limits and safe -all

Find common SPF weaknesses, understand DNS lookup limits and tighten enforcement without disrupting legitimate senders.

Email Spoofing Audit

Email spoofing protection checklist for a business domain

Coordinate SPF, DKIM and DMARC instead of treating each record in isolation.

Local Secrets Tripwire

How to scan code for secrets locally

Find exposed credentials without pasting source into a third-party scanner.

Local Secrets Tripwire

What to do after a secret reaches Git history

Rotate the exposed credential first, clean repository history second, then add controls that prevent the next leak.

Jira Permission Exposure Audit

Jira permission audit checklist for site admins

Review public access, broad groups, roles, issue security and shared objects with an evidence-first method.

Jira Permission Exposure Audit

How to check anonymous access in Jira Cloud

Locate anonymous access paths and document evidence before changing permissions.

Jira Permission Exposure Audit

Jira permission scheme security: broad groups and default roles

Find permission grants that silently expand when group membership changes.

Jira Permission Exposure Audit

Jira configuration drift monitoring without automatic remediation

Build a baseline, compare material changes and keep a human in control of remediation.