News & Articles

Our articles and guides on how to protect your startup from cybercriminals

Read about all the security issues that we find during our automated security reviews, and how to solve them.

Latest Articles

All

ISO 27001

All

Navigating GDPR Compliance on AWS

How to secure your AWS environment in compliance with the GDPR?

Mitigations

Plan Your Security Roadmap

Check out how other startups become secure and compliant.

Mitigations

Server Leaks Information via 'X-Powered-By' HTTP Response Header Field(s)

The 'X-Powered-By' HTTP response header is a standard header that web servers include in their responses. It contains information about the technology or software that the server is running. This header can also reveal sensitive information about the server's configuration, which can be exploited by attackers.

Vulnerabilities

Strict-Transport-Security Header

The Strict-Transport-Security (STS) header is a security feature implemented in modern web browsers that enforces the use of HTTPS on a website. If not configured correctly, it can leave your website vulnerable to man-in-the-middle attacks.

Vulnerabilities

Heartbleed OpenSSL Vulnerability (Indicative)

Heartbleed is a serious vulnerability in the OpenSSL cryptographic software library. It allows attackers to obtain sensitive information such as passwords, credit card numbers, and other confidential information from vulnerable servers.

Vulnerabilities

Split Viewstate in Use

The Split Viewstate in Use vulnerability occurs when the viewstate is split across multiple hidden fields on the page. The vulnerability can be exploited by an attacker who can modify one of the hidden fields to change the state of the page.

Vulnerabilities