Security

• Web Security (OWASP Top 10) medium

  The OWASP Top 10 is a periodically refreshed list of the most common classes of web application flaw: injection, broken access control, insecure design,…

• HTTPS & TLS medium

  HTTPS is HTTP carried inside TLS: the client verifies the server's identity against a certificate issued by a trusted authority, then negotiates an…

• Secrets Management small

  Secrets management is keeping API keys, database passwords, signing keys and tokens out of the repository, out of build artefacts and logs, and giving…

• Dependency Scanning (SCA) small

  Software composition analysis watches the packages a project depends on — direct and transitive — and reports the ones with known vulnerabilities, matched…

• GDPR & Data Privacy medium

  Data privacy law sets conditions on handling personal data: you need a lawful basis for processing it, you must tell people what you do with it, you may…

• Content Security Policy (CSP) small

  A Content Security Policy is a set of rules a server sends with a page that tell the browser what that page is allowed to load and execute: which origins…

• Data Ethics small

  Data ethics is the set of questions legality does not answer: what you should collect, what you should infer from it, who should see it, and what happens…