Start with the language of security, then connect it to the decisions that keep people and websites safer.
Select a topic to see what it means and what to do next.
Identity security is about verifying people and giving each account only the access it needs. Stolen or reused passwords can turn one compromised service into several.
Applications become vulnerable when they trust data too much or make access decisions in the wrong place. Examples include injection, cross-site scripting (XSS), and broken authorization.
Your site includes code, packages, servers, and services. Keeping an inventory helps you find outdated components and protect sensitive data before something goes wrong.
Good defense includes noticing unusual activity and recovering with a plan. Useful logs, tested backups, and clear ownership can shorten the time between a problem and a response.
Four quick choices across identity, web safety, access, and recovery. Try it as often as you like; your best score stays with your account when you sign in.