Research
Explainers.
Common problems I look for on real websites, and how to check whether you have them.
What a good external security assessment gives you
What an external assessment covers, what it does not, and what should be in the report.
Why your website might be insecure
The common problems I look for first on a public website, and how to check whether you have them.
My own findings will go here once they are published. I only publish with permission from the affected party.
Spotted an error in a post? Email hello@ryanhenrick.com.