Security 12 November 2026 2 min read
When does your application need custom security testing?
Find out when custom security testing adds value alongside scans and penetration tests for an existing application.
Read articleArticles
Ideas from the work.
On software, security and the decisions that matter.
Explore our practical guidesFrom the archive
All articles
Security 12 November 2026 2 min read
How to test security in a multi-tenant SaaS application
Test tenant isolation across accounts, APIs, exports and background jobs with practical scenarios for SaaS teams.
Read article
Security 12 November 2026 2 min read
Can AI help review security findings?
Explore where AI can help a security team review findings, and why evidence checks and human decisions remain essential.
Read article
Security 12 November 2026 2 min read
How to prevent security vulnerabilities from returning
Turn a security fix into a regression test that checks the original vulnerability and protects legitimate user behaviour.
Read article
Security 12 November 2026 2 min read
Why security scans miss business logic flaws
Learn why automated security scans can miss business logic flaws and how tailored tests protect the workflows your application depends on.
Read article
Security 12 November 2026 2 min read
Why developers and security engineers should work together
A shared approach turns security findings into practical software improvements.
Read article
Security 12 November 2026 2 min read
How to prepare for an application security assessment
A practical checklist for scope, access and safe security testing.
Read article
Security 12 November 2026 2 min read
The security risks hidden in business workflows
How to identify security questions in the steps of a business process.
Read article
Security 12 November 2026 2 min read
Why a passing security scan is not the whole story
Automated scans are useful, but their results need context and follow-up.
Read article
Security 12 November 2026 2 min read
How do you know a security fix worked?
A practical way to verify a security fix without overlooking normal user behaviour.
Read article
Security 12 November 2026 5 min read
Barracuda email gateways are being exploited: what businesses should check
Two Barracuda appliance flaws are being exploited. A practical guide to exposed admin interfaces, firmware updates and checking for signs of compromise.
Read article
Security 11 November 2026 5 min read
Node.js security releases are available: check your production runtimes
Node.js 22.23.5, 24.22.3 and 26.13.1 contain the November security fixes. Here's how to verify production runtimes and deployment.
Read article