Skip to content
Cyber Security Firms

Defenses and Tools

Firewalls, multi-factor authentication, encryption, backups and password managers: what each one does, what it does not, and which ones you need.

22 resources

How to Create a Strong Password That Actually Holds Up
Beginner

How to Create a Strong Password That Actually Holds Up

Most password advice is a decade out of date. The rules that replaced it are shorter, easier to follow, and written down in a federal standard you can check.

14 min read
Two-Factor Authentication: How 2FA Works and Which to Use
Beginner

Two-Factor Authentication: How 2FA Works and Which to Use

A password is one secret, and secrets travel. Two-factor authentication adds a second proof that whoever stole the first one does not have, and which kind of second factor you pick matters more than anyone tells you.

14 min read
What Is a Firewall? How It Works and What It Misses
Beginner

What Is a Firewall? How It Works and What It Misses

A firewall decides which network traffic gets through and which does not. That is a narrower job than most people assume, and knowing exactly where the line falls is what tells you which other defenses you still need.

14 min read
What Is a Password Manager? How It Works and the Catch
Beginner

What Is a Password Manager? How It Works and the Catch

A password manager is an encrypted vault that invents a different password for every account and types it for you. The reason to use one is arithmetic, and the reasons not to are worth hearing before you commit.

20 min read
What Is Encryption? How It Works and the Two Types
Beginner

What Is Encryption? How It Works and the Two Types

Encryption is running on almost everything you touch, and the only decision that ever matters is who holds the key. Here is how it works, what the two types are for, and where it quietly stops protecting you.

13 min read
EDR vs Antivirus: What Is Different and Which You Need
Intermediate

EDR vs Antivirus: What Is Different and Which You Need

Antivirus asks whether a file is known to be bad. EDR asks whether the last twenty minutes on this machine look like an attack. Almost every company ends up running both, and the interesting question is which one you are actually paying for.

15 min read
Penetration Test vs Vulnerability Scan: Which to Buy
Intermediate

Penetration Test vs Vulnerability Scan: Which to Buy

One of these is a tool run against everything you own. The other is a person working against a few things you named. The quotes differ by a factor of twenty because the products differ by more than that, and most buyers are comparing them as if they were the same purchase in two sizes.

18 min read
SIEM vs SOAR: What Each One Does and Which You Need
Intermediate

SIEM vs SOAR: What Each One Does and Which You Need

A SIEM decides that something is happening. A SOAR does something about it. They are quoted side by side as though a buyer picks one, and that framing is what leads companies to spend six figures on the wrong half first.

19 min read
VPN vs Zero Trust: The Differences and Which You Need
Intermediate

VPN vs Zero Trust: The Differences and Which You Need

A VPN proves you are allowed onto the network. Zero trust asks, every time, whether you should reach the one thing you are asking for. Most companies end up running both, and the money is in knowing which jobs to move first.

19 min read
What Is a SOC? Inside a Security Operations Center
Intermediate

What Is a SOC? Inside a Security Operations Center

A security operations center is the team that answers the alert, not the software that raised it. The distinction decides almost everything about what one costs and whether yours works.

14 min read
What Is Application Security? Scope, Risks and Tools
Intermediate

What Is Application Security? Scope, Risks and Tools

Application security is the one domain where the people holding the fix are developers rather than the security team. Knowing where its edges sit is what stops a company buying a scanner and assuming the software problem went with it.

18 min read
What Is Cloud Security? Risks, Controls and Owners
Intermediate

What Is Cloud Security? Risks, Controls and Owners

Moving to the cloud moved the hardware. It did not move the responsibility, and the half that stayed with you is the half that gets breached.

16 min read
What Is EDR? Endpoint Detection and Response Explained
Intermediate

What Is EDR? Endpoint Detection and Response Explained

An EDR agent watches every process that starts on a laptop or a server, keeps the record, and can cut the machine off the network. The part nobody sells you is that someone still has to read what it finds.

16 min read
What Is Email Security? Controls, Threats and Gaps
Intermediate

What Is Email Security? Controls, Threats and Gaps

Email security is the one domain every employee touches daily, and the only system a company runs that accepts unsolicited input from strangers by design. Knowing where its edges sit is what stops a company buying a filter and assuming the problem left with it.

20 min read
What Is Endpoint Security? Controls, Tools and Gaps
Intermediate

What Is Endpoint Security? Controls, Tools and Gaps

Endpoint security is the part of the field that lives on the devices people actually work on. Knowing where its edges sit is what stops a company buying an agent and assuming the rest of the problem went with it.

15 min read
What Is Network Security? Controls, Threats and Gaps
Intermediate

What Is Network Security? Controls, Threats and Gaps

Network security is the part of the field that governs what may reach what. The firewall at the boundary is the famous piece, and it is also the piece attackers now go after first.

16 min read
What Is Penetration Testing? The Phases, Types and Limits
Intermediate

What Is Penetration Testing? The Phases, Types and Limits

A penetration test is an authorized attack on your own systems, run by someone you pay to succeed. What varies enormously is the scope, the skill and what you get back, which is why three quotes for the same request arrive at three prices.

13 min read
What Is SIEM? How Log Data Becomes a Security Alert
Intermediate

What Is SIEM? How Log Data Becomes a Security Alert

Every system you run is already writing down what it did. A SIEM is the product that reads all of it at once and tells you which three lines out of nine million belong together.

15 min read
What Is Vulnerability Scanning? Types and How It Works
Intermediate

What Is Vulnerability Scanning? Types and How It Works

A vulnerability scan tells you what is wrong with your systems in a few hours. Working out which of the four hundred findings an attacker would actually use is the part that decides whether the scan was worth running.

16 min read
What Is Zero Trust? The Principles, Pillars and Limits
Intermediate

What Is Zero Trust? The Principles, Pillars and Limits

Zero trust is a set of design principles, not a category of software, and the distance between those two things is where most security budgets go wrong. Here is what the model actually says, who defines it, and what it does not solve.

12 min read
XDR vs EDR: What Each One Sees and Which You Should Buy
Intermediate

XDR vs EDR: What Each One Sees and Which You Should Buy

EDR knows one machine in extraordinary detail. XDR knows a little about the endpoint, the identity system, the mailbox and the cloud tenant, and joins them into one story. The choice is usually about how many consoles you want, not about which product detects more.

17 min read
Red Team vs Penetration Test: What Differs and Which to Buy
Advanced

Red Team vs Penetration Test: What Differs and Which to Buy

A penetration test asks which of your systems can be broken into. A red team asks whether anyone would notice. They are priced differently because they are measuring different things, and a company that buys the wrong one gets a real answer to a question it was not asking.

17 min read

Related topics

Cyber Security BasicsThreats ExplainedProtect YourselfCyber Security for BusinessCompliance and RegulationCareers and Certifications