Guides

• External attack surface monitoring for small businesses

  What an external attack surface is, why a small business has more of one than it realizes, and what monitoring it involves.

• SPF, DKIM and DMARC explained for small businesses

  How the three email authentication records work, what a good setup looks like and the mistakes that leave a domain open to spoofing.

• What cyber insurers look at on your internet exposure

  What insurers tend to ask about your public systems, which weaknesses are easiest to fix before an application and how to show your work.

• External vs internal vulnerability scanning: what each one finds

  The difference between scanning your business from the internet and from inside the network, what each one finds and when you need both.

• How often should a small business scan for vulnerabilities?

  Why a one-time scan ages quickly, how often to scan your internet-facing systems and what should trigger an extra scan.

• Open ports: which ones should never face the internet

  What an open port is, which services are risky to expose to the internet and how to close or protect them.

• Subdomain takeover explained: how a forgotten DNS record becomes a risk

  How subdomain takeover works, why it happens to businesses that use outside services and how to find and fix dangling DNS records.

• TLS certificate problems that hurt small business websites

  The certificate and encryption problems behind browser warnings and security findings, and how to avoid each one.

• Security headers for small business websites: what they do and which matter

  What the common HTTP security headers do, which ones matter most for a small business site and how to add them safely.