Practical security for founders and owners of 5-200 person companies. What to actually do, in what order, without hiring anyone — and a weekly note on what changed.
No fear, no vendor pitches, no jargon you have to look up.
One email a week: what changed in security, what it means for a company your size, and the one thing worth doing about it. No vendor pitches, no fear.
Weekly. Unsubscribe in one click. See the checklist first.
The application form is the most specific, best-prioritised security checklist you will ever be handed — written by people who pay when it goes wrong. Read it that way.
Customer Trust & Compliance6 min read
The security questionnaire is a sales document that happens to be about security. Here is how a company with no security team answers one credibly — and turns it into an advantage.
Customer Trust & Compliance7 min read
Everything about surviving ransomware comes down to one question you can answer today: if it all got encrypted tonight, how long until you are working again — measured, not guessed?
Data, Backups & Recovery8 min read
Access outlives employment at almost every small company. Here is the checklist that closes the gap — hour one, day one, week one — and the two hard cases nobody plans for.
Accounts & Access7 min read
MFA is the highest-value hour you will ever spend on security — if you do it in the right order. Here is the order, the accounts everyone forgets, and how attackers get around weak MFA.
Accounts & Access7 min read
The advice you were given — check for typos, look for urgency — stopped working years ago. Here is a check that still holds up, short enough that people will actually use it.
Email & Payment Fraud6 min read