Security Guides
Practical, specific guides written for real situations. No jargon, no scare tactics, and no advice that only works in theory.
21 guides
Servers, Sites & Networks
Spotting a compromised server, cleaning an infected site, and the hardening that actually reduces risk.
Signs Your Server Has Been Compromised (And What to Check First)
The symptoms that really indicate a compromised server — outbound traffic, unexpected processes, modified files, log gaps — and the order to check them in.
9 min readYour Website Is Infected With Malware — A Recovery Plan
A recovery plan for a hacked website: contain it without destroying evidence, find the way in, clean to a verified state, then get the warnings removed.
10 min readServer Hardening Checklist for Small Businesses
Hardening steps that change real risk on a web server: SSH and access, ports, TLS, updates, logging, least privilege, and backups you have restored.
11 min readHow to Check Your Website for Known Vulnerabilities (CVEs)
What a CVE is, how to find the ones that affect the software your website runs, how to read the severity score, and what to fix first.
8 min readWordPress Security Checklist for Small Businesses
A practical WordPress security checklist: updates, plugins, admin accounts and two-factor, backups, hosting, and what to do with abandoned plugins.
7 min read
Premises & Physical Loss
Recording people lawfully, and the loss patterns that quietly cost a shop or restaurant money every week.
CCTV Monitoring Rules for Indian Businesses
What to get right before recording customers or staff in India: visible notice, a stated purpose, retention, access to footage, and the DPDP Act.
9 min readHow to Cut Theft and Billing Loss in a Shop or Restaurant
The loss patterns that cost Indian shops and restaurants — counter distraction, unbilled tables, void and refund abuse, shrinkage — and the fix for each.
10 min read
Small Business
The security work that matters for a small team, in the order it is worth doing.
Cybersecurity for Small Businesses: A Practical Checklist
The security work a small team should do first: accounts and access, invoice fraud, backups, devices, and a one-page incident plan.
10 min readHow to Choose a VAPT Provider in India
What to ask before commissioning a penetration test in India: scope, method, who tests, what the report contains, re-tests — and the red-flag answers.
9 min readDPDP Act Basics for Indian Businesses
India's DPDP Act in plain language for small and mid-sized businesses: what counts as personal data, notice and consent, rights, and a readiness plan.
10 min readCERT-In 6-Hour Incident Reporting: What Indian Businesses Must Do
CERT-In's 2022 Directions in plain English: which incidents to report within six hours, the 180-day log rule, clock sync, and how to be ready in advance.
11 min read
Phishing & Scams
Spotting a fake message or link before it costs you, and what to do the moment you realise you clicked.
How to Identify a Phishing Link (With Real Examples)
Read a link before you click it: where the real domain hides, the lookalike tricks that fool almost everyone, and the checks that take five seconds.
7 min readCommon Online Scams in India and How to Avoid Them
UPI collect requests, courier and parcel scams, KYC calls, fake job offers, instant-loan apps and QR fraud — how each one works and the one habit that stops it.
9 min readYou Clicked a Suspicious Link — What to Do Now
A calm, ordered response for the minutes after clicking a phishing link: what to do first, what not to bother with, and when it is actually serious.
6 min readHow to Report Cyber Fraud in India (1930 and cybercrime.gov.in)
Lost money to an online scam? Call 1930, tell your bank, file on cybercrime.gov.in and keep the right evidence — in that order, and fast. Here is how.
10 min read
Account Security
Locking down the accounts that everything else hangs off, and recovering one that has already been taken.
Your Social Media Account Is Hacked — Recovery Steps
An ordered recovery plan for a hacked Instagram, Facebook or WhatsApp account, using the platforms' own official recovery routes.
8 min readHow to Enable Two-Factor Authentication (Properly)
Which second factor to choose, why SMS is the weakest option, and the recovery-code step that stops 2FA from locking you out of your own account.
7 min readHow to Secure Your Instagram Account
The Instagram settings that actually matter: 2FA, login activity, connected apps, email security, and the fake-support messages that target creators.
7 min readHow to Secure Your Gmail Account
Your email is the master key to every other account. The Google settings, recovery options and forwarding checks that keep it yours.
7 min read
Passwords
What actually makes a password hard to break, and how to find out if one of yours is already public.
How to Create a Strong Password That You Can Remember
Why length beats symbols, why substituting @ for a fails, and how to build passwords you can actually recall without reusing one.
6 min readHow to Check If Your Password Has Been Compromised
How breach data works, how to check safely without ever sending your password anywhere, and what to change first when a password turns up.
6 min read
Want this handled for you?
Our engineers do this work for businesses every day, on monitoring platforms built to catch it earlier. Describe your situation and we will tell you what would actually help.
Talk to Our Security TeamNothing on this site will ever ask for your password, OTP or recovery codes.