Security Blog
Real cases, business impact, and how to protect your product.
Why Are My Emails Going to Spam? A Fix List for Business Email
When business emails land in spam, the cause is usually your domain, not your words. Check these seven things in order and fix most of them yourself.
Read articleWhy Does My Website Say “Not Secure”? How to Fix It on Any Platform
Chrome says “Not secure” when a page isn’t served over HTTPS or its certificate has a problem. Find your cause in two minutes and fix it on any platform.
Read articleAPI Keys in Your Code: How Secrets Leak and What to Do When One Does
Stripe, cloud and database keys end up in public code more often than you’d think. Where they leak, which keys are safe to show, and what to do first.
Read articleExposed Admin Panel: How to Protect Your Website’s Login Page
Anyone can find your /wp-admin or /admin login and try passwords on it. How attackers get in, and how to lock it on WordPress, Shopify, Wix and Squarespace.
Read articleExposed .env File: How to Check If Your Website Leaks Its Passwords
A .env file holds your site’s passwords and keys. If it opens at yoursite.com/.env, it’s public. How to check in a minute, and what to do if it’s open.
Read articleOutdated Plugins and Software: How Known Holes Get Websites Hacked
Once a hole in a plugin is published, bots look for sites still running the old version, often within hours. Real cases, and how to keep your site updated.
Read articleWhat Is SQL Injection? How It Works and How to Protect Your Site
SQL injection lets a stranger send commands to your website’s database through a form or a web address. How it works, real cases, and how to protect your site.
Read articleWhat Is Cross-Site Scripting (XSS)? A Plain-English Guide
Cross-site scripting (XSS) lets a stranger run their own code in your visitors’ browsers through your website. How it works, real cases, and how to prevent it.
Read article