Practical, no-fluff writeups on performance, security, browser auditing, and code quality.
More Security
CSP is the highest-leverage security header and the easiest one to break your own site with - a safe rollout strategy using report-only mode.
CSP, HSTS, X-Frame-Options, and every other HTTP security header your site should ship - with copy-pasteable examples.
From free header checkers to full vulnerability scanners - a practical comparison of the top tools for finding security issues on a live website.
