DevelopmentResources
Can you get pwned with CSS?
Let’s find out if CSS can cause serious damage.
DevelopmentSamples
Do breached sites take security seriously?
Let’s find out if compromised websites have a security.txt file now.
DevelopmentResources
What the QWAC?!
What to expect from the Qualified Website Authentication Certificate.
DevelopmentTools
New security headers grading criteria
Security Headers, the security scanning tool, gets an update.
DevelopmentResources
XSS is deadly for passkeys
The hidden flaw in passkey authentication.
BusinessSamples
Why No Passkeys?
Top sites that still lack passkey support.
DevelopmentResources
Connection Allowlist
A network firewall, built into the browser.
DevelopmentSamples
Top 1 Million Analysis 2026: Web Security
“There is still a lot of value left on the table.”
DevelopmentSamples
Top 1 Million Analysis 2026: Cryptography
“The TLS and certificate ecosystem feels like it’s finally in good shape.”
DevelopmentTools
Does your browser support DBSC?
A live test of the Device Bound Session Credentials exchange.
DevelopmentOpinions
eMudhra’s CA keys cracked in milliseconds
What happened, who’s exposed, and what to check now.