Research
Security engineering, explained plainly.
Technical writing on how web applications break, how to fix them, and how to verify the fix. We publish when we have something real to say.
This section is intentionally sparse. We would rather have a few accurate, tested articles than a wall of placeholder posts written to look productive.
Focus
Current focus areas
These are the subjects we are actively documenting, demonstrated in the Security Lab.
HTTP security headers and content security policy
Authentication, sessions and access control in practice
API authorisation and data-exposure patterns
Dependency risk and safe update practices
Principles
Editorial principles
- Every claim is either reproduced or clearly labelled as opinion.
- No fear-based framing and no artificial urgency.
- Code and configuration examples are minimal and runnable where possible.
- Corrections are published, not quietly removed.
Security
Responsible disclosure
If you believe you have found a vulnerability in any AnkebutSoft system or property, contact us directly. We will acknowledge your report and work with you in good faith.
Scope
Only test assets you own or are authorised to test. We do not test against third-party systems.
Collaborate
Let’s publish something together.
Found something interesting? Write to us about covering a technical topic together.