How Much of ISO 27001 Can You Actually Automate?
ISO/IEC 27001:2022 has 93 Annex A controls. Our 27 automated compliance checks cover 18 of them — not quite a fifth — an...
Guides & How-tos · Worked examples · Real numbers
Cybersecurity guides
Step-by-step how-tos, head-to-head comparisons and honest roundups — every guide worked through with current figures, then backed by a RECATOOLS calculator or AI-directory entry so you can act on it.
185 guides published
15 topic areas
Latest guide Aug 2026
Health & Wellness
8
Personality
6
Statistics
6
Consumer Tech
6
Cyber Threat Intel
6
Privacy & Data
5
Home & Living
5
Sustainability
4
Business
2
Advertisement
What Our Own Security Audit Found
Nine parallel red-team reviews of our own admin panel produced twelve security findings. Eleven are closed, including al...
How to Check Who Owns the Lookalikes of Your Domain
Five edit rules per character generate the confusable space around a domain name, and DNS says which of those names alre...
Advertisement
The Post-Quantum Migration Already Started, and Nobody Told You
Quantum computing and encryption is usually framed as a countdown. For the connections you actually use, the migration h...
How Many Domains Does Your Bank Send Email From?
Every scam-email guide ends with "check the sender", which assumes a bank is a domain. We read the published records for...
Public Wi-Fi: The Warning Is Out of Date, the Exposure Is Not
All eight sites we checked end on HTTPS and all eight set HSTS, so nobody on the café network can read what you send — i...
What Does a QR Code Actually Store? You Cannot Tell by Looking
Two codes pointing at two different sites differ in 35.6 per cent of their squares — and no human can tell, because nobo...
Is This Email Really From Them? The Check You Cannot See
The sender name is free text and the address can be forged. The real check happens in DNS before the message reaches you...
What Does the Padlock Actually Prove? We Read Six Real Certificates
It certifies that the connection is encrypted and that the name in the address bar matches the certificate. It says noth...
Account Security You Can Finish in an Afternoon
Four jobs, ordered by how much loss each one prevents, with the arguments settled by the standard rather than by folklor...
Cybersecurity for a Small ASEAN Business
Until this week our own password checker rated Summer2026 as Fair. It is not fair — it is one of the first few hundred g...
Which Hash for What: MD5, SHA-256, and the Password Mistake
"MD5 is broken, so hash your passwords with SHA-256 instead" gets both halves wrong, in opposite directions. What broke...
Who Sees Your DNS? DoH, DoT and What Encrypted DNS Actually Hides (2026)
DoT, DoH and DoQ encrypt your DNS queries, but destination IPs, the TLS SNI and your resolver still see plenty. What the...
That 30-Second Code: How Authenticator Apps Actually Work (2026)
The six digits in your authenticator app come from two short public standards. We walk the algorithm step by step and un...
Passkeys Explained: What Actually Replaces Your Passwords (2026)
What a passkey is per the WebAuthn spec, NIST's synced vs device-bound line, recovery on Apple, Google and Windows, and...
How to Build a Password System That Actually Holds (2026)
NIST's 2025 rewrite raised the password floor to 15 characters and killed forced rotation. Rebuild your logins with a pa...
How to Check if an AI Tool Is Safe for Company Data (2026)
Consumer AI tiers train on your data; business tiers don't. A 10-minute vetting workflow for SMEs, with ASEAN PDPA ancho...
Advertisement