161 security guides
Practical, source-backed guides on securing real deployments: pre-launch checklists, exposed secrets, security headers, and platform-specific misconfigurations.
Modern browsers default missing SameSite attributes to Lax, which changes CSRF protection. Learn how to check, set, and verify SameSite for all cookies.
Vercel runs on AWS hardware but adds its own edge network, fluid compute, and managed services, creating a higher - level platform. Learn how Decloak can monitor this stack for security gaps.
Vercel provides automatic TLS, DDoS mitigation, a built - in firewall and free deployment protection, but developers still need to configure WAF rules and secret management to stay safe.
Vercel’s popularity comes from its zero - config preview workflow, deep Next.js integration, global edge network, freemium model and AI - native tooling that together give developers instant, fast, and frictionless deployments.
Supabase encrypts data at rest with AES - 256 and in transit with TLS 1.2+, plus a built - in Vault that uses libsodium AEAD for secret storage.
Supabase uses AES‑256 full‑disk encryption for all stored data and TLS 1.2+ for all network traffic, with optional Vault and column‑level encryption for extra protection.
Supabase offers industry - standard compliance, encryption, and PostgreSQL - based access controls, but you must correctly configure Row - Level Security and keep the service_role key secret to maintain trust.
Supabase offers enterprise - grade security features, but mis - configured Row - Level Security is the most common risk. Learn the built - in safeguards and how to avoid costly mistakes.
A concise guide to the top Supabase vulnerabilities discovered in 2025 - 2026 and step - by - step remediation you can apply today.
A SOC 2 audit is a CPA - led attestation that evaluates a service organization’s controls against the AICPA Trust Services Criteria, delivering a report that proves data - security practices to customers and partners.
SOC 2 is an AICPA attestation that evaluates a service organization’s controls against the Trust Services Criteria. Learn the report types, timeline, and how to prepare for a successful audit.
Supabase holds an annual SOC 2 Type 2 audit covering security, availability, processing integrity, confidentiality, and privacy, but you must still handle data that leaves the platform.
The ISO quality - management standards are built on seven core principles: customer focus, leadership, engagement of people, process approach, improvement, evidence - based decision making, and relationship management.
ISO compliance is an internal self - assessment, while ISO certification is a third - party written assurance. This guide explains the distinction, the certification process, and how to verify certificates.
DORA is the Digital Operational Resilience Act, an EU regulation that sets mandatory ICT risk management and resilience standards for financial entities.
DORA is the EU Digital Operational Resilience Act, a regulation that forces financial institutions and their ICT providers to manage, test and report digital risks, with heavy fines for non - compliance.
DORA is the EU’s Digital Operational Resilience Act, a regulation that forces financial firms and their ICT providers to manage, test and report on ICT risk. Compliance starts on 17 January 2025 and non - compliance can cost up to 2 % of worldwide turnover.
Get the current consolidated PDF of the EU Artificial Intelligence Act, verify its authenticity, and learn how to access alternative official mirrors.
The EU AI Act was formally adopted on 13 June 2024, entered into force on 1 August 2024 and became generally applicable on 2 August 2026, making it a binding regulation across the EU.
The EU AI Act is a Regulation that creates a risk - based framework for AI across the EU, banning dangerous uses and imposing strict obligations on high - risk systems. It affects any provider or deployer whose AI reaches EU users, even from outside the bloc.
The EU AI Act creates a risk - based framework that bans the most harmful AI uses, imposes strict obligations on high - risk systems, and sets up new oversight for powerful foundation models, becoming fully enforceable on 2 August 2026.
The EU AI Act (Regulation 2024/1689) defines AI systems, sets risk - based rules, and outlines compliance dates, penalties, and transparency duties for providers and deployers in the European market.
The NIST AI Risk Management Framework’s Map function captures an AI system’s purpose, stakeholders, deployment context and impact, creating a foundation for risk measurement and mitigation.
NIST stands for the National Institute of Standards and Technology, the U.S. agency that defines measurement and cybersecurity standards. Knowing this helps you align your projects with trusted guidelines.
Learn the core NIST publications that form a practical, layered security program, how they map together, and concrete steps to start using them today.
NIST is the U.S. agency that creates the Cybersecurity Framework and a suite of standards like SP 800 - 53 that guide risk management for both government and private organizations.
Yes - the EU AI Act has extraterritorial reach and can bind U.S. AI providers, deployers, importers or distributors whenever their systems are placed on the EU market, used by an EU entity, or produce output that is used in the Union.
DORA applies to all EU - authorized financial entities and any ICT service provider that supports them, with limited exemptions for very small firms.
A DORA certification is a private - sector credential that proves you’ve completed regulated training and passed an exam, not a legal requirement but a useful proof for auditors and employers.
Free Excel checklists for the EU DORA regulation vary in size and features; the 95 - item doragrc.com workbook offers the most detail, while smaller templates suit quick assessments.
Free security scan
Decloak's free scan runs in about 15 seconds, no account required, and covers: