Showing 1–7 of 7 articles
Who can reach a Kubernetes cluster
A cluster’s exposure includes more than its public endpoint. Review administrators, workload identities, role bindings, credentials, network paths, and access to sensitive configuration.
Read the visual guide
Where ordinary IT ends and a safety system begins
A system connected to physical operations can fail in ways that affect safety, not only information. Coordinate security work with the people responsible for the process and its safe operation.
Read the visual guide
Home routers used for work
A home router connects work systems to personal devices and internet services. Review its support status, administration, Wi-Fi configuration, and any unnecessary remote access.
Read the visual guide
What a VPN does, and what it does not hide
A VPN protects a connection between its configured endpoints. Your traffic still reaches destinations, and the device, provider, and account choices remain part of the privacy picture.
Read the visual guide
SSRF explained: when a server fetches a destination it should not
A server-side request feature can reach resources that the user cannot directly access. Review allowed destinations and the authority available to the fetching service.
Read the visual guide
DDoS attacks: distinguish bandwidth floods from application overload
A service can fail because the network link is saturated or because expensive application requests consume its resources. The appropriate mitigation depends on where capacity is exhausted.
Read the visual guide
TLS checks: protect the connection all the way to the service
A valid certificate at the public edge is only part of a secure connection. Review protocol settings, hostname validation, internal hops, and the origin that ultimately handles the request.
Read the visual guide