Protecting your small business.Super Cyber toolkits.
Simple security checks for small businesses. Find the gaps in a few minutes and get a fix list you can act on today.
Can someone send email pretending to be you? Find out in 10 seconds.
Start with a free check.No signup. No jargon.
Latest threats.In plain English.
We read advisories from trusted national agencies and software makers. Each threat gets a toolkit: what it is, what it means for you, and how to fix it.
SonicWall firewall VPN logins can skip multi-factor checks
A SonicWall flaw lets someone with a valid password get past SAML sign-in, and its multi-factor check, on the SSL VPN. Update SonicOS.
Out-of-date iPhones, iPads and Macs are being attacked
A 2024 Apple flaw that helps attackers get past a built-in protection is now being exploited. Updating fixes it.
WordPress sites can be taken over while they update
A flaw in how WordPress installs core updates lets attackers run code on your server. Update to WordPress 7.1.4.
Office VPN gateways are being taken over
Attackers are chaining three Ivanti Connect Secure flaws to run commands on VPN gateways. Update, and check for signs of a break-in.
Cisco firewalls can be crashed through their VPN
A flaw in Cisco ASA and FTD firewalls lets anyone on the internet make the device restart through the VPN service. Update to a fixed release.
Online shops on Magento and Adobe Commerce need the July update
Adobe fixed critical flaws in its shop software in July. One is now being exploited, so any shop that skipped the update is exposed.
Two PHP flaws let attackers run code on web servers
Two critical PHP flaws let anyone on the internet run code on a server that runs PHP. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
Backup servers (AhsayCBS) are being broken into
Two critical AhsayCBS flaws let attackers bypass login and run commands on backup servers. Update, and rebuild if you may have been hit.
Browse by area.Find what affects you.
Spoofing, phishing and inbox takeovers.
Passwords
Leaked logins, reuse and MFA.
Websites
Domains, hosting and site software.
Apps
Cloud apps, plugins and extensions.
Coding
Packages, frameworks and build tools.
Infrastructure
Routers, VPNs, servers and backups.
Devices
Laptops, phones and home working.
People
Scams, fake invoices and staff training.
Checked at the source.From sources you can trust.
We only use national cyber agencies and the software makers themselves. No blogs, no social media rumours.
Scan
Read new advisories and known-exploited lists in every country we cover.
Summarise
Write the issue, the impact on a small business, and the fix, in plain English.
Publish
Release a toolkit with the right country flags and areas, linked to the source.
Follow up
Re-check threats with no fix yet. Update the toolkit the day a fix ships.
Cyber Essentials.Ready before you apply.
Many public sector and large-company contracts ask for Cyber Essentials. Our free readiness check covers the five controls in plain English, so you know your gaps before you pay for an assessment.
Small business or enterprise.We've got you covered.
Free toolkits
£0. Always.
- Domain, password and breach checks
- Threat toolkits for your country
- Cyber Essentials readiness check
- Fix lists written for people without an IT team
Managed security
Tailored to your estate
- Managed monitoring across your infrastructure
- Alerts triaged by people, with a clear next step
- Incident response when something goes wrong
- Help getting to Cyber Essentials and beyond
Talk to our team.Book a call to speak to an advisor.
Tell us about your business and what you need. If you are dealing with an active incident right now, say so in the message and our quick response team will treat it as a priority.