Tessera
Folgen

badrap.io

@badrap.io

Cyber security made easy • https://badrap.io

25 Posts49 Follower71 Folgt
badrap.io@badrap.io · last mo.

Throwback to the Cybersicherheitsgipfel event in Hessen: excellent German and international perspectives on cyber resilience! Our DACH presence continues next week at the Zurich AI Festival and at the ECSO CISO Meetup in Berlin, followed by the German-Finnish Businessforum in Munich. See you there!

Overview of the Cybersicherheitsgipfel Hessen event main stage area, with audience and exhibitor stands.Wall with graffiti next to a display showing the Cybersicherheitsgipfel Hessen event information.Heikki from Badrap along with other international panelists on the stage at the Cybersicherheitsgipfel Hessen event, with audience in the background.
badrap.io@badrap.io · 2mo ago

Turn everyday security work into visible compliance progress. Our Security Playbooks now show which compliance requirements each playbook supports, starting with ISO/IEC 27002 and NIS2. From "what should we do?" to "what does this cover?" in one place!

badrap.io@badrap.io · 6mo ago

Teams, teams for everyone! 🫶 Whether you're securing a home network with your family or testing the waters for a small organization, we've got you covered. Create your free Team Workspace and start protecting your assets together at badrap.io. 🇪🇺 Co-funded by the European Union

A screenshot of the badrap.io user interface highlighting a new team creation feature. On the left sidebar's workspace dropdown menu, a large pink arrow with the text "NEW!" points directly to an option that reads "+ Create a new team". The menu also displays existing options for a personal workspace and a "Friends & Family" team workspace.
Joachim Viide@jviide.iki.fi · 6mo ago

More companies, governmental organizations and community projects should adopt the security.txt convention/proposal: securitytxt.org Making security contact discovery as easy as possible is good for everyone. Yes, even within the context of the recent AI vulnerability report slopocalypse.

Google's security.txt: Contact: https://g.co/vulnz Contact: mailto:security@google.com Encryption: https://services.google.com/corporate/publickey.txt Acknowledgments: https://bughunters.google.com/ Policy: https://g.co/vrp Hiring: https://g.co/SecurityPrivacyEngJobs Expires: 2030-04-01T00:00:00z
badrap.io@badrap.io · 6mo ago

Phishing, invoice scams, CEO scams and ransomware all target people. Our Employee Cyber Hygiene playbook helps you start a practical and engaging course for selected employees, giving your workforce the awareness to become your strongest security asset 💪👁️👄👁️💪

Screenshot of an Employee Cyber Hygiene app page showing search and filter controls, an "Invite selected users" button for initiating the course for the selected employee, a language selector set to English, and a user list with one employee selected and another shown as having already completed the course.
badrap.io@badrap.io · 7mo ago

New in the SensorFu Honeytoken app: automatic IP allowlisting for AWS, Google Cloud, Azure, and other Microsoft services. 🌐 Honeytokens are fake secrets meant to attract hackers like bees to honey – basically digital tripwires to catch someone snooping around. Set up your own at badrap.io.

A screenshot of the SensorFu Honeytoken app settings page showing toggles for cloud provider alerts. AWS and GCP are enabled, while Microsoft Azure and Microsoft Services are muted.
badrap.io@badrap.io · 7mo ago

Badrap is happy to support @npmx.dev in an advisory role. A better developer experience can be a boon to security. Easier access to trust signals and tips for avoiding unnecessary dependencies, among other things, help make stronger supply chain choices. Read their intro: npmx.dev/blog/alpha-r...

Announcing npmx: a fast, modern browser for the npm registry

Today we're releasing the alpha of npmx.dev – a fast, modern browser for the npm registry, built in the open by a growing community.

npmx.dev

badrap.io@badrap.io · 7mo ago

Pricing by "Contact Sales" is out. Public and transparent pricing is in. We just shipped a way for anyone to plan a cybersecurity roadmap based on their actual needs and budget. No guessing, no forced sales calls. Use the Add to Cart button on our Playbooks page to get started: badrap.io/playbooks

badrap.io@badrap.io · last yr.

If you're at the GovWare 2025 expo in Singapore this week, drop by and meet us at booth D10! Our Jani will also be speaking on Tuesday 16:00 (Level 6, Room GW6) about lessons learned from doing supply chain cybersecurity checks for over 3000 companies at scale. Come and chat with him afterwards!

Jani Kenttälä of badrap.io
badrap.io@badrap.io · last yr.

Your mandatory cyber routines are becoming even easier to automate and execute! We're: 🤗 improving your user experience 🧑‍🔧 by developing new self-service features ⛳️ to the badrap.io platform and playbooks The effort is co-funded by the European Union: badrap.io/eakr2025 #CyberSecurity #EUfunded

Cyber Security Made Easy

Badrap playbooks help you automate cyber security tasks with ease. Step-by-step best practices boost your online security and privacy.

badrap.io

badrap.io@badrap.io · 2y ago

Remod wrote (in Finnish) some nice things about partnering with Badrap at remod.fi/asiakastarin... ❤️ Together, we’re tackling email security with the "Spoofproof Your Emails" playbook, helping organizations block fraud and keep communications trusted. Check it out at badrap.io/playbooks/sp...!

Badrap ja Remod - Tiukkaa tietoturva-asiantuntemusta jalat maassa

Badrapin ja Remodin yhteistyöllä on pitkä historia ja juuret syvällä kotimaisessa kyberturvallisuusyhteisössä.

remod.fi

Joachim Viide@jviide.iki.fi · 2y ago

Quite mind-boggling to learn that jviide.iki.fi/http-redirects was referenced in a proposal to amend the OWASP Application Security Verification Standard: github.com/OWASP/ASVS/i... Huge thanks to everyone involved! Heartening to see the measured debate and the well-worded end result.

Don't redirect to HTTPS for API · Issue #2416 · OWASP/ASVS

Your API Shouldn't Redirect HTTP to HTTPS The argument is that when a client uses 'http://api.example.org', it should fail instead of silently be insecure. I propose to add a requirement that speci...

github.com

badrap.io@badrap.io · 2y ago

A quick reminder for all our friends creating new Bluesky accounts: Recycling is usually a good thing, but not for passwords. Use a unique password for each online service.

A crossed-over recycling symbol, accompanied by the text: "Passwords are non-recyclable material."