retest.asiaNotes
Prevention, in plain words.
Short notes on prevention, for the people who own the product. What goes wrong, and what to do first.
Written for foundersPlain languagePrevention first
Every note
These notes describe what to look for and what to fix, never how to break something. That is deliberate.
Phishing
Before anyone gets phished
Recognise the lure, verify on a second channel, and know the first hour after a click. Phishing arrives through people, not firewalls.
a short read
Data exposure
The quiet ways checkouts leak
Customer data rarely leaves through the front door. It leaks through scripts, APIs, forgotten staging and logs. Each has one line of prevention.
a short read
Getting started
Security basics that fit in a week
The founder's minimum: least access, a password manager, session flags, dependency updates, an offboarding list. Do these before a test.
a short read
Next
A test finds what a checklist cannot.
The scope comes back in writing, and nothing starts until you sign it. Send a URL and two sentences.