PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

Scheduling Work with Professionally Evil Test Credits

How Do Prepurchased Credits Work?

This article explains the ways that pre-paid credits work and the discounts within the service. Credits are for penetration testing and security testing...
Read ›
Waving the White Flag: Why InfoSec should stop caring about HTTPOnly

Waving the White Flag: Why InfoSec should stop caring about HTTPOnly

As a company that is constantly working with our penetration testing clients on understanding where they should focus their efforts......
Read ›
How Do We Estimate Testing Credits?

How Do We Estimate Testing Credits?

This article explains how you can estimate pre-purchased testing credits which allows you to prepay for security assessments and Pentests at a discount....
Read ›
Proxying HTTPS Traffic with Burp Suite

Proxying HTTPS Traffic with Burp Suite

Because every new installation of Burp generates a different CA, this doesn't create a risk of somebody else intercepting your traffic surreptitiously....
Read ›
Einstein Told Us

Einstein Told Us: Why User Awareness is NOT the right focus

“The definition of insanity is doing the same thing over and over again and expecting different results.” – Einstein (Well, not really!)...
Read ›
What’s the difference between API and Web Application Pentests

What’s the difference between API and Web Application Pentests?

Web applications are now remarkably complex. Know the difference....
Read ›
How Do We Embed Testing

How Do We Embed Testing in Our SDLC?

This article discusses building security into your development....
Read ›
Do you offer discounts on security services and classes

Do you offer discounts on security services and classes?

This article discusses discounts that Secure Ideas offers for testing services and training....
Read ›
Cooking up Better Security Incident Communications

Cooking up Better Security Incident Communications

Delicious-looking meal descriptions, receiving a package full of ingredients, the smells, and of course tasting that first bite of the new things!...
Read ›
communicate a security incident

How should I communicate a security incident?

Guidance for how to address a security incident on your company FAQ page....
Read ›
What factors impact the cost of Reporting

Can We See a Sample Report from a Penetration Test?

This page provides a sample report for a consulting engagement...
Read ›
Asset Discovery

Asset Discovery

Unless you have a strong understanding of the systems and services on your network, you have no hope of keeping it both secure and usable....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.