Practitioner-grade cybersecurity content
Technical playbooks, war stories, and how-to-think guides — written by practitioners, anchored to the Indian context.
Want structured, step-by-step learning instead? Explore the Academy (guided courses) or the AI security hub.
Latest articles
Most recent practitioner playbooks across every track. Filter by topic in the sidebar, or use search.
Module 3 · Authentication Attacks
Username enumeration, password spraying, credential stuffing, session attacks, JWT vulnerabilities, OAuth/SAML flaws, MFA bypasses.
AcademyModule 2 · Web Enumeration & Recon
Subdomain enumeration, technology fingerprinting, directory brute-forcing, JavaScript bundle analysis, and Wayback reconnaissance.
AcademyModule 1 · HTTP & Web Fundamentals
How HTTP actually works at the wire level — methods, status codes, headers, cookies, TLS. The foundation for every web-app attack pattern.
Cloud SecurityCSPM Tools Compared: Wiz, Orca, Prisma, Defender (2026)
Honest comparison of CSPM tools in 2026: Wiz, Orca, Prisma Cloud, Microsoft Defender, Lacework, plus open-source (Prowler, ScoutSuite, Trivy). How to choose…
DPDP ComplianceHiring a Data Protection Officer (DPO) in India: The 2026 Guide
When DPDP requires a DPO, when to hire one anyway, the candidate profile, market rates in 2026, the fractional-DPO alternative, and the…
Cloud SecurityHardening a New AWS Account in 2 Hours (Runbook)
The 10-step runbook we use to harden a new AWS account from default state to production-defensible posture in about 2 hours. Commands,…
VAPTVAPT Report: What a Good One Actually Contains
What a good VAPT report contains, with an annotated 8-section template — serving CTO, engineer, auditor, and buyer audiences — and the…
VAPTNetwork Penetration Testing: Internal vs External (2026)
Network penetration testing in 2026 — external vs internal scope, the cloud transition, tools that matter, common findings, and when traditional network…
VAPTMobile Application Penetration Testing: Android + iOS Guide (2026)
Mobile app pen testing for 2026 — Android vs iOS methodology, OWASP MASVS L2 coverage, common findings, platform-specific security features, and typical…
DPDP ComplianceData Principal Rights Under DPDP (With Templates)
Data Principal rights under DPDP — the four substantive rights, the 6-stage request-response workflow, templates for access and erasure responses, and the…