Domains
Whole fields of security practice: what makes application security different from cloud security, why mobile has its own threat model. For how security is actually tested, seeMethodology; for named standards and compliance regimes, seeFrameworks and Compliance.
AI Security
The security concerns specific to building and operating AI systems, across the data, the model, the infrastructure, and the application layer around it.
Domain OverviewApplication Security
The concepts, tooling categories, and practices that make up application security, and where it fits relative to network and infrastructure security.
Domain OverviewBlue Team & Security Operations
What defenders actually do day to day, detection, monitoring, and response, and how red teaming pressure-tests this discipline.
Domain OverviewCloud Security
What changes about security when infrastructure moves to the cloud, the shared responsibility model, and the misconfigurations that cause most real cloud incidents.
Attack LandscapeCommon Types of Cyberattacks
A working reference to the cyberattack types every newcomer and client-facing security person should recognize by name, how each works, and how it's normally prevented.
Domain OverviewGRC (Governance, Risk & Compliance)
The discipline of actually running a security program, setting policy, managing risk decisions, and proving compliance, distinct from any single named regulation.
Domain OverviewMobileApp Security
What's structurally different about securing an iOS or Android app compared to a web application, and the mobile-specific failure patterns that show up again and again.
Domain OverviewNetwork Security
How securing a network differs from securing an application, the core building blocks, and where most real network security gaps come from.
Domain OverviewWebApp Security
What actually makes a web application vulnerable, from broken access control and injection through to the protocol and browser mechanisms every app depends on.