Blog

Practical articles on preparing for the expertise

What the expertise asks for, where mistakes are common and how to close them — from our own experience.

Backups and restore: from the 3-2-1 rule to restore testing

A backup is only useful if you can restore from it. A practical guide to the 3-2-1 rule, encryption, offline copies, pg_dump/mysqldump and regular restore tests.

25 October 2026 · 10 min read

Server

Logging and incident response: the basics for a small team

What to log, how long to keep it, central logs, alerts and what to do in the first hour of an incident. A practical guide to preserving evidence.

19 October 2026 · 10 min read

Server

Vulnerable dependencies: composer, npm and supply chain security

Even clean code becomes vulnerable through an outdated library. composer audit, npm audit, lock files, Dependabot, abandoned packages and SBOM — a practical guide.

15 October 2026 · 10 min read

Server

Database security: from the port to field encryption

Keep the database off the internet; least-privilege users, TLS, backups, encryption of sensitive fields and auditing. A practical guide for PostgreSQL and MySQL.

11 October 2026 · 11 min read

Server

Securing nginx: 10 items to review before the expertise

The web server is the first layer in front of your app. Hiding the version, default_server, TLS, limits, hidden files, restricting PHP execution, rate limiting and logging.

6 October 2026 · 11 min read

Server

Managing secrets and keys: .env, tokens and rotation

Where to keep .env, API tokens, database passwords and encryption keys, who should see them and when to replace them — a practical guide.

27 August 2026 · 8 min read

Server

Open ports and server hardening

FTP and control panel ports open to the internet are found quickly during an expertise. A practical guide to closing unused services, firewalls and panel allowlists.

26 August 2026 · 7 min read