Resources
Practical security advice for people who run businesses, not security teams.
- How DMARC stops criminals sending email as you SPF, DKIM and DMARC explained with one diagram, and the three policy settings every business should know. Read article
- Ransomware: what to do in the first hour The first hour after a ransomware attack decides how bad it gets. A calm, step-by-step guide for small businesses. Read article
- IDOR: the one-number web flaw that leaks customer data How changing a single number in a web address can expose other customers’ records, and how to prevent it. Read article
- How to stop fake payment instructions in real estate and law Wire fraud targets brokerages and law firms through fake emails. Practical steps to protect closings and clients. Read article
- Why we use Tailscale instead of a traditional VPN A side-by-side look at the old office VPN and a modern Tailscale mesh, and why the difference matters for security. Read article
- Why you should stop using text-message codes to sign in SMS codes are the weakest form of multi-factor authentication. What small businesses should use instead. Read article
- The OSI model for business owners: where attacks happen The seven network layers in plain language, the attacks that target each one, and the defence for each. Read article
- Tax season phishing: five scams aimed at accounting firms How attackers target accountants and bookkeepers during tax season, and how to protect client data. Read article
- Building a security program: a cycle, not a project The five stages of a security program small businesses can actually run, from governance to continuous improvement. Read article
- Is your backup really a backup? The 3-2-1 rule for small offices A plain-language guide to backups that actually survive ransomware, hardware failure and human error. Read article
- Five security checks every clinic should do this month A short security checklist for dental and medical practice managers. Read article
- AI agents at work: six security risks to know first Before connecting an AI assistant to your email, files or systems, understand where it can be attacked. Read article
- Microsoft 365 isn't secure out of the box. Six settings to check Six Microsoft 365 settings every small business should review to prevent account takeover and data leaks. Read article
- Preparing for your first SOC 2 or ISO 27001 audit What a first security audit involves, how long it takes, and how small companies can prepare without stress. Read article