Home / Blog

Web security, explained simply.

The most common vulnerabilities, described without jargon — what they are, why they matter, and how to protect yourself.

Injection

SQL injection explained simply

The flaw that lets a visitor rewrite the questions your site asks its database. How it works, and how to close it for good.

8/20/20266 min

Read the article

Method

False positives: the silent plague of scanners

A scanner that “finds” 400 flaws, 380 of them false, doesn’t help you: it exhausts you. The real challenge isn’t detecting more, it’s being wrong less.

8/18/20265 min

Read the article

Access control

Path traversal: reading forbidden files

When a file name comes from the visitor, a few ../ can be enough to climb through your folders and read your secrets. Explanation and defence.

8/15/20265 min

Read the article

Enough theory?

See what these flaws look like on a real report.

Request an audit See the proof