A passive vulnerability scan is a type of security scan in which the scanner sends no unusual requests to the server. It is like a visitor browsing the site.

Starting with Firefox 23, Firefox blocks active mixed content by default. This follows a practice adopted by Internet Explorer (since version 9) and Chrome.

Nowadays, the tools we use to browse the internet require us to follow security standards. Otherwise, they tend to flag our web applications/sites as insecure.

This post will review a few HTTP API access control approaches, from simple API keys to OAuth.

In this article I will talk about the main tool of a web scraping specialist - the http/https packet sniffer.

Retica is a free and open-source python web framework and is available via the pip package manager. The framework comes with ReticaCLI a terminal-based tool.

Although SSH certificates are the most secure way to regulate SSH access, they are underutilized. This article explains why you should be using SSH certificates

Don't know what a CA bundle is? Discover how to use its powerful SSL encryption for secure web server-browser communication, why it's important, and more!

HTTP/3 is the latest HTTP protocol version designed to improve web application performance and security. Built on top of the QUIC protocol, HTTP/3 provides fast