@roym
Security audits for web applications, penetration testing consultations, and speaking about AI code security risks. Open to collaborating on open-source security tools and writing guest posts about OWASP, NIS2 compliance, and developer security practices. Book a free 15-min security consultation: https://ismycodesafe.com
15h ago · 4 min read · Severity Levels Most vulnerability reports group findings into four levels. The labels map directly to how fast you should fix them: LevelCVSS RangeActionExample Critical9.0 - 10.0Fix immediately. Drop what you're doing.Remote cod...
Join discussion15h ago · 2 min read · Must-Have (Ship Blockers) Don't launch without these. Each one represents a real, exploitable vulnerability if missing. HTTPS with a valid TLS certificate. Use Let's Encrypt — it's free and auto-renews. HTTP redirects to HTTPS. 301 redirect, not 302...
Join discussion15h ago · 4 min read · SSL/TLS (1-6) TLS certificate is valid and not expired. Check expiration date. Set up automated renewal with Let's Encrypt or your CA. TLS 1.2 or higher. TLS 1.0 and 1.1 are deprecated. Disable them in your server config. Use the Mozilla SSL Configu...
Join discussion15h ago · 3 min read · Does GDPR Apply to You? If your website has visitors from the EU/EEA and you collect any personal data, yes. "Personal data" under GDPR includes: names, email addresses, IP addresses, cookie identifiers, device fingerprints, and location data...
Join discussion15h ago · 4 min read · What Is NIS2? The NIS2 Directive (Directive (EU) 2022/2555) replaces the original NIS Directive from 2016. It entered into force in January 2023, with EU member states required to transpose it into national law by October 2024. It significant...
Join discussion