Guides
Practical help you can use today
No jargon and no sales pitch. Most of these you can act on this afternoon, without any technical knowledge.
10 checks you can do today
Ten checks a business owner can do this afternoon, with no technical knowledge.
Is a vibe-coded app safe?
What the NCSC says, what the numbers really show, and how to judge your own app.
Scan, audit or pen test?
What each one can and can't tell you, and how to choose.
Access rules explained
Why customer data in an AI-built app can be open to anyone, and how to check.
Secret keys explained
What they are, why AI-built apps can expose them, and what to do if one leaks.
Spreadsheets and connectors
The joins between your systems are where things fail without anyone noticing.
A leavers’ checklist
What to remove, change and hand over when someone with access moves on.
Cyber Essentials and your app
It's worth having and it's cheaper than ever, but it doesn't look inside your own app.
Why a tester needs permission
Under the Computer Misuse Act, even a well-meant test can be a crime. Who can say yes?
Find out where you stand.
Tell us what you’ve built. We’ll agree the scope and the price with you before anything starts.