Security practice
Questions to ask about DDoS protection and hosting
Evaluate hosting protection by scope, exclusions, origin exposure and response procedures.
The reading room
All guides
Security explained through the decisions teams make every day. Identity, secrets and incident preparation, without the theatre.
Identity & access
Review admin access before adding another security tool
Map privileged accounts to people, business needs and a clear removal process.
Identity & access
Give each service account a smaller job
Design machine access around one workload, a limited permission set and a documented owner.
Security practice
Roll out security headers without breaking the site
Inventory page dependencies, test a policy and check the response at the public endpoint.
Security practice
Prepare an inbox for security reports
Decide how reports are received, acknowledged and triaged before an urgent message arrives.