Our #atproto based changelog has news of its own 🦋 You can now browse it without logging in at badrap.io/changelog. For logged-in users, a snazzy #new "What's new" ticker appears when there are fresh entries.
badrap.io@badrap.io · 3w agoA changelog you can reply to! 🦋 We built our new changelog on #atproto. Our Bluesky posts tagged #new, #feature or #release also appear as changelog entries inside badrap.io. Each entry links back to the original post.
Throwback to the Cybersicherheitsgipfel event in Hessen: excellent German and international perspectives on cyber resilience! Our DACH presence continues next week at the Zurich AI Festival and at the ECSO CISO Meetup in Berlin, followed by the German-Finnish Businessforum in Munich. See you there!
Inspired by @jviide.iki.fi post about GitHub name typosquatting, I made a prototype of a possible action we could use in our workflows 👀
Turn everyday security work into visible compliance progress. Our Security Playbooks now show which compliance requirements each playbook supports, starting with ISO/IEC 27002 and NIS2. From "what should we do?" to "what does this cover?" in one place!
Whee! Published @badrap/valita v0.5.2 using both trusted & staged publishing just now insert party emoji here
daniel r(ooooooh) 👻@danielroe.dev · 5mo ago🚨 this is the new gold standard: trusted publishing _plus_ a maintainer with 2fa. 👉 check it out docs.npmjs.com/staged-publi...
Teams, teams for everyone! 🫶 Whether you're securing a home network with your family or testing the waters for a small organization, we've got you covered. Create your free Team Workspace and start protecting your assets together at badrap.io. 🇪🇺 Co-funded by the European Union
More companies, governmental organizations and community projects should adopt the security.txt convention/proposal: securitytxt.org Making security contact discovery as easy as possible is good for everyone. Yes, even within the context of the recent AI vulnerability report slopocalypse.
Phishing, invoice scams, CEO scams and ransomware all target people. Our Employee Cyber Hygiene playbook helps you start a practical and engaging course for selected employees, giving your workforce the awareness to become your strongest security asset 💪👁️👄👁️💪
Announcing: CE3 - Common Excuse & Evasion Enumeration 😁 A taxonomy of vendor dismissal patterns for legitimate vulnerability reports: github.com/badrap/ce3
Switched @badrap/valita to ESM-only, pretty cool how @npmx.dev celebrates the package size reduction 🎉 npmx.dev/package/@bad...
New in the SensorFu Honeytoken app: automatic IP allowlisting for AWS, Google Cloud, Azure, and other Microsoft services. 🌐 Honeytokens are fake secrets meant to attract hackers like bees to honey – basically digital tripwires to catch someone snooping around. Set up your own at badrap.io.
Badrap is happy to support @npmx.dev in an advisory role. A better developer experience can be a boon to security. Easier access to trust signals and tips for avoiding unnecessary dependencies, among other things, help make stronger supply chain choices. Read their intro: npmx.dev/blog/alpha-r...
Announcing npmx: a fast, modern browser for the npm registry
Today we're releasing the alpha of npmx.dev – a fast, modern browser for the npm registry, built in the open by a growing community.
npmx.dev
Pricing by "Contact Sales" is out. Public and transparent pricing is in. We just shipped a way for anyone to plan a cybersecurity roadmap based on their actual needs and budget. No guessing, no forced sales calls. Use the Add to Cart button on our Playbooks page to get started: badrap.io/playbooks
We're again at the wonderful Baden-Württemberg #CyberSicherheitsForum today with friends from NCSC-FI (@traficomfinland.bsky.social), SensorFu, Arctic Security (@arcticsecurity.bsky.social), SensorFleet and Semantti (@semantti.bsky.social). Come and say hi!
If you're at the GovWare 2025 expo in Singapore this week, drop by and meet us at booth D10! Our Jani will also be speaking on Tuesday 16:00 (Level 6, Room GW6) about lessons learned from doing supply chain cybersecurity checks for over 3000 companies at scale. Come and chat with him afterwards!
Your mandatory cyber routines are becoming even easier to automate and execute! We're: 🤗 improving your user experience 🧑🔧 by developing new self-service features ⛳️ to the badrap.io platform and playbooks The effort is co-funded by the European Union: badrap.io/eakr2025 #CyberSecurity #EUfunded
Cyber Security Made Easy
Badrap playbooks help you automate cyber security tasks with ease. Step-by-step best practices boost your online security and privacy.
badrap.io
Great to meet 150 customers and partners at @scanabc.com's #prevent25 today - thanks to everyone for coming! Now off to Disobey (@disobeyfi.bsky.social), catch us there.
Remod wrote (in Finnish) some nice things about partnering with Badrap at remod.fi/asiakastarin... ❤️ Together, we’re tackling email security with the "Spoofproof Your Emails" playbook, helping organizations block fraud and keep communications trusted. Check it out at badrap.io/playbooks/sp...!
Badrap ja Remod - Tiukkaa tietoturva-asiantuntemusta jalat maassa
Badrapin ja Remodin yhteistyöllä on pitkä historia ja juuret syvällä kotimaisessa kyberturvallisuusyhteisössä.
remod.fi
Quite mind-boggling to learn that jviide.iki.fi/http-redirects was referenced in a proposal to amend the OWASP Application Security Verification Standard: github.com/OWASP/ASVS/i... Huge thanks to everyone involved! Heartening to see the measured debate and the well-worded end result.
Don't redirect to HTTPS for API · Issue #2416 · OWASP/ASVS
Your API Shouldn't Redirect HTTP to HTTPS The argument is that when a client uses 'http://api.example.org', it should fail instead of silently be insecure. I propose to add a requirement that speci...
github.com
Here is a nice list of personal cyber hygiene tasks to complete. 👍
rahaeli@rahaeli.bsky.social · 3y agoIt's December, so here are a collection of end of year digital housekeeping tasks you can do while chilling out for the holidays in order to improve your privacy and security for entering 2024 on a good footing. You don't have to do all of them, but they're stuff to consider!
Glad to hear that our little library has been useful 🎉 io-ts is also a great option, and has definitely influenced valita and many others.
jr@jhn.lol · 2y agomy go to schema validation library for typescript has been valita by @badrap.io. its api is very small and defining custom types with .chain() is good for everything so far. i used to advocate io-ts but valita is very small and faster in comparison. github.com/badrap/valita
Oh no, badrap.io has been busted for speeding! What a great idea from @strek.in 😀 Get a ticket issued for your website from speeding-ticket.vercel.app
strek@strek.in · 2y agoHiiii Bskyyyy! I'm here to issue speeding tickets for your website 🚨 test it out here: speeding-ticket.vercel.app I'll go first here's mine:
A quick reminder for all our friends creating new Bluesky accounts: Recycling is usually a good thing, but not for passwords. Use a unique password for each online service.
Let's not forget our Brazilian friends! Huge thanks to Bruno for translating this evergreen post: medium.com/badrapio/sof... #cybersecurity #infosec
Sofri um vazamento de dados. Como devo proceder?
Se você recebeu um alerta de vazamento de dados de um serviço de monitoramento como Have I Been Pwned ou Badrap.io e está se perguntando…
medium.com
