Application Security7 min read
What Is Penetration Testing?
A penetration test is not a scan with better branding. Here is what actually happens during one, phase by phase, and what the report should contain when it lands.
Read the articleInsights
Field NotesFrom the Work
Practical write-ups from the work we actually do — application security testing, technical SEO, performance and automation. No recycled listicles. If we have not done it or measured it, it is not here.
Application Security7 min read
A Content-Security-Policy That Actually Works
Most Content-Security-Policy headers in production restrict nothing. Here is why the allowlist approach failed, and the nonce pattern that replaced it.
Read the articleApplication Security7 min read
What a Penetration Test Report Should Contain
You are not really buying a test. You are buying the document it produces. Here is how to tell a real one from an expensive PDF.
Read the articleApplication Security6 min read
The Security Headers Checklist
Ten minutes of configuration closes the layer that every auditor, customer questionnaire and procurement review checks first. Here is the whole list, with values.
Read the articleApplication Security5 min read
Black Box or Grey Box: Which Test Do You Need?
Black box testing mirrors the real threat and has a blind spot the size of everything behind your login. Here is how to choose, and what each approach cannot see.
Read the articleTechnical SEO6 min read
The Technical SEO Checklist
Technical SEO is mostly about removing obstacles, not adding tricks. Here is the checklist, ordered by what actually costs you traffic when it is wrong.
Read the articleTechnical SEO6 min read
Website Migration Without Losing Your Rankings
Most traffic lost in a migration is lost in the redirect map, and the damage shows up weeks later. Here is the checklist, in the order it has to happen.
Read the articleCRM & Automation6 min read
The First Five Automations Worth Building
Most automation projects stall because they start with the complicated workflow. These five are boring, fast to build, and carry almost all the value.
Read the articleWeb Performance6 min read
What Actually Makes LCP Slow
LCP has four distinct parts, and most teams optimise the wrong one. Break the metric down first and the fix is usually obvious — and often a single attribute.
Read the articleConversion Optimization7 min read
Running an A/B Test That Means Something
Most A/B tests declared as wins never happened. Here is how to size a test properly, when to stop, and why checking the results early ruins them.
Read the articleLet's Talk
Ready to GetStarted?
We are happy to offer a free initial consultation to explore your goals and how NEXHUB can help you reach them.
Get a Free Consultation