OnSecurity's Latest Articles, News and Industry Tips
Security should be important to everyone. Our blog features articles regarding your business’ security and different aspects to consider.
Across real-world penetration testing engagements, the same handful of web app vulnerabilities surface time and
Zero trust security is built on one principle: never trust and always verify. Every user,
White box penetration testing gives security teams the deepest possible view of an application’s weaknesses,
Organisations pursuing or maintaining ISO 27001 certification are often surprised to learn that the standard
Key Takeaways Introduction A website penetration test is only as good as its scope. Too
Continuous Threat Exposure Management (CTEM) replaces periodic security assessments with ongoing validation. Learn how CTEM’s
Cyber threats are evolving, and every business – large or small – faces potential risks.
With security software evolving quickly to mitigate growing threats, many organisations now face problems with
What is Shadow AI, how it emerges, how to detect it, and how to build
Scaling your business? Learn how to build a security programme that grows with you, from
ISO 27001 audit day fails on honesty, evidence, and scope, not tech. Learn the top
Discover the top IoT vulnerabilities, how attackers exploit them, and practical steps to secure devices
Learn what third-party risk management is, why vendor risk is rising, and how penetration testing
Automated scanning tools catch a great deal. Misconfigured headers, known CVEs, and injection points left
Discover the top 5 CREST-accredited penetration testing service providers in the UK, and find out
Continuous Threat Exposure Management (CTEM) replaces periodic security assessments with ongoing validation. Learn how CTEM’s five stages work, who’s responsible for each, and how penetration testing supports the programme.
Learn what third-party risk management is, why vendor risk is rising, and how penetration testing helps CISOs validate and reduce external security risk.
University networks are complex, open, and high-value. See how penetration testing for universities finds the gaps your internal team can’t see.
From ransomware to data exfiltration, UK universities face growing cyber threats. Learn how to build resilience and protect sensitive data.
A practical guide to implementing Secure by Design in UK government product delivery. Covers risk-driven design, lifecycle security activities, compliance with the PSTI Act, and how regular penetration testing keeps your security posture continuously validated.
Learn GDPR essentials: data protection principles, subject rights, breach management, and compliance tools to safeguard personal data effectively.
Learn how to secure SaaS applications with expert strategies for data protection, access control, compliance, and threat detection.
Learn what ISO 42001 is, why it matters, and how businesses can implement AI governance, manage risk, and align with EU AI Act compliance requirements.
Protect patient data in healthcare with essential security measures, pentesting insights, and UK data protection guidance.
Technical debt increases breach risk, slows response, and drives up costs. Learn why security debt matters and how to manage it.
Discover how 2-step authentication secures business data from breaches. Compare MFA methods to strengthen your security.
Discover what an ISMS is and how it enhances your organisation’s information security. Read our clear guide to implement effective management systems.
Tom Keyte reflects on five years at OnSecurity- from infrastructure wins to security lessons, and how his role evolved beyond just writing code.
The EU AI Act sets strict rules for AI providers and users. Learn who it applies to, key risk categories, compliance steps, and what businesses must do to prepare.
OnSecurity secures award highlighting the breakthrough year of growth, innovation and AI-augmented cybersecurity
Across real-world penetration testing engagements, the same handful of web app vulnerabilities surface time and again, regardless of industry, application
Zero trust security is built on one principle: never trust and always verify. Every user, device, and connection is treated
Organisations pursuing or maintaining ISO 27001 certification are often surprised to learn that the standard sets no fixed penetration testing
Key Takeaways Introduction A website penetration test is only as good as its scope. Too many organisations assume that any
Continuous Threat Exposure Management (CTEM) replaces periodic security assessments with ongoing validation. Learn how CTEM’s five stages work, who’s responsible for each, and how penetration testing supports the programme.
Cyber threats are evolving, and every business – large or small – faces potential risks. A single vulnerability in your network infrastructure can lead to data breaches, financial losses and reputational damage. Network penetration testing is a proactive approach to uncover and address these vulnerabilities.
With security software evolving quickly to mitigate growing threats, many organisations now face problems with legacy software. This blog outlines
What is Shadow AI, how it emerges, how to detect it, and how to build governance to protect your business from hidden AI risks.
Discover the top IoT vulnerabilities, how attackers exploit them, and practical steps to secure devices and reduce risk across your organisation.
Learn what third-party risk management is, why vendor risk is rising, and how penetration testing helps CISOs validate and reduce external security risk.
Discover the top 5 CREST-accredited penetration testing service providers in the UK, and find out what sets them apart. Uncover the best penetration testing services for your business.
Insecure data storage is the second biggest threat to mobile apps, according to OWASP. Learn how attackers exploit local storage and how to protect sensitive user data.
Protect your POS systems from cyber threats. Learn key attack vectors, compliance frameworks, and security controls for retail and e-commerce.
Why is penetration testing important for enterprise businesses when it comes to mitigating cyber threats?
Learn how to embed LLM security testing into your CI/CD pipeline to catch jailbreaks, prompt injection, and data leakage before they reach production.
Explore the challenge of vulnerabilities exploited before fixes. Learn how to address security gaps and protect against threats in this insightful discussion.
Data exfiltration is the end goal of most serious cyberattacks. Learn what it is, how attackers do it, and how to stop it before it happens to your organisation.
New research shows the prevalence of email phishing as the top cyber threat, tricking firms into revealing information through reputable sender disguises.
Build a secure software development cycle: integrate pentesting & shift security left. Guide for security leaders & developers.
Smishing, a form of cyber-attack that uses SMS messages to deceive victims, is on the rise. By exploiting human trust,
Exploring Cloud Security: Risks, Regulations & Remedies. Learn from incidents & strategies for robust cloud protection in an evolving digital landscape.
Discover how to mitigate financial risks from subdomain takeovers. Learn strategies to safeguard against reputational damage and data breaches.
Explore SSDLC stages: From planning to deployment. Learn how to secure web apps effectively with OnSecurity’s solutions.
How would we define Cybercrime? What do you imagine when you think of a cybercriminal? Do you envision an erratic,
The risks of typosquatting and its implications for online security. Explore cybercriminal tactics, real-world cases, and protective measures for your brand.
Radar by OnSecurity: an advanced tool for threat intelligence. Learn its role in enhancing security, achieving ISO certifications, and prioritizing threats.
The best practices with OnSecurity’s cyber security checklist 2023. Identify crucial steps to protect data and systems from unauthorised access and threats.
Learn how external vulnerability scanning can support your organisation in achieving operational resilience in this blog.
Delve into an effective external vulnerability scanning strategy and adopt best practices. This guide offers a very comprehensive understanding of the role they play.
New report reveals increasing cyber threats to drilling rigs, potentially leading to severe safety incidents. Understand the emerging vulnerabilities.
Ready to experience the future of pentesting?
Discover how combining expert insight with automation leads to faster, more precise, and high-impact penetration testing.