NetGuard blog
Practical guides, threat analysis and product news from our security engineers.
Exposure management7 min read
What is CTEM? Learn attack surface management, the five CTEM stages, exposure management vs vulnerability management, key metrics and how to get started.
Read article
Vulnerability management7 min read
OWASP Top 10 explained: each 2021 web application security risk with an example and fix, plus SAST vs DAST, API security and where web scanning fits.
Read article
System hardening7 min read
Docker and Kubernetes hardening guide: minimal images, non-root containers, Pod Security Standards, RBAC, NetworkPolicies, secrets and CIS benchmarks.
Read article
Security compliance8 min read
AFTA security requirements in Iran explained - who is affected, common technical expectations and a readiness checklist for critical infrastructure security.
Read article
Vulnerability management8 min read
A practical patch management process: asset inventory, KEV and EPSS prioritization, testing, deployment rings, emergency patching, SLAs and best practices.
Read article
System hardening7 min read
Database hardening checklist for SQL Server, Oracle, MySQL and PostgreSQL: default accounts, least privilege, TLS, TDE, auditing, risky features and backups.
Read articleHardening guides and checklists for servers, operating systems, network devices, databases and containers.
System hardening7 min read
Docker and Kubernetes hardening guide: minimal images, non-root containers, Pod Security Standards, RBAC, NetworkPolicies, secrets and CIS benchmarks.
Read articleSystem hardening7 min read
Database hardening checklist for SQL Server, Oracle, MySQL and PostgreSQL: default accounts, least privilege, TLS, TDE, auditing, risky features and backups.
Read article
System hardening7 min read
Network device hardening for Cisco routers, switches and firewalls: SSH and AAA, CoPP, routing authentication, SNMPv3, NTP, logging and rule reviews.
Read article
System hardening8 min read
Active Directory hardening guide: tiered admin model, privileged groups, LAPS, Kerberos and NTLM controls, LDAP signing, auditing and DC security.
Read article
System hardening9 min read
A practical Linux server hardening checklist for Ubuntu and RHEL: SSH, sudo, auto updates, firewall, mount options, sysctl, auditd, SELinux and CIS audits.
Read article
System hardening9 min read
A practical Windows Server hardening checklist: LAPS, password policy, SMB, LLMNR, RDP, firewall, auditing, Defender ASR and TLS, with PowerShell and GPO.
Read article
System hardening7 min read
What are CIS Benchmarks and how do you use them? Level 1 vs Level 2, automated vs manual checks, CIS Controls, STIG comparison and a CIS hardening plan.
Read article
System hardening8 min read
What is system hardening and why does it matter? A practical server hardening guide covering types, CIS and STIG baselines, a step-by-step process and pitfalls.
Read articleISO 27001, PCI DSS, NIST CSF, AFTA and how to turn technical controls into audit evidence.
Security compliance8 min read
AFTA security requirements in Iran explained - who is affected, common technical expectations and a readiness checklist for critical infrastructure security.
Read article
Security compliance8 min read
NIST CSF 2.0 explained - the six functions including Govern, profiles and tiers, mapping to ISO 27001 and CIS Controls, and how to use it outside the US.
Read article
Security compliance8 min read
PCI DSS 4.0 requirements explained: the 12 requirements, 4.0.1 changes, customized approach, Req. 2 and 6.3.3, PCI DSS vulnerability scanning, ASV and pentests.
Read article
Security compliance7 min read
A practical guide to ISO 27001:2022 technical controls, ISO 27001 vulnerability management (8.8), configuration management (8.9), certification and evidence.
Read article
Security compliance8 min read
What is security compliance and how does it differ from security? A practical guide to ISO 27001, PCI DSS, NIST CSF, continuous compliance and audit evidence.
Read articleCVEs, CVSS, scanning, penetration testing, patching and running a vulnerability management program.
Vulnerability management7 min read
OWASP Top 10 explained: each 2021 web application security risk with an example and fix, plus SAST vs DAST, API security and where web scanning fits.
Read articleVulnerability management8 min read
A practical patch management process: asset inventory, KEV and EPSS prioritization, testing, deployment rings, emergency patching, SLAs and best practices.
Read article
Vulnerability management7 min read
Vulnerability assessment vs penetration testing compared by goal, depth, frequency, cost and output, plus PCI DSS 11.3 and 11.4 and where red teaming fits.
Read article
Vulnerability management8 min read
What is a vulnerability scanner and how does it work? Network vs web, agent vs agentless, authenticated scans, false positives and how to choose one.
Read article
Vulnerability management7 min read
The vulnerability management lifecycle step by step: asset inventory, scanning cadence, prioritization, remediation SLAs, verification, metrics and reporting.
Read article
Vulnerability management8 min read
CVSS vs EPSS vs KEV explained: CVSS 4.0 severity, exploit probability and known-exploited lists, combined into a practical vulnerability prioritization model.
Read article
Vulnerability management9 min read
What is a CVE? Learn how CVE IDs are assigned, who runs the program, how NVD enriches records and how to use CVE data to find and fix vulnerabilities.
Read articleAttack surface management and continuous threat exposure management (CTEM).
Get a complimentary external exposure assessment and a prioritized report from our security engineers.
