THE CYBERSCAN KNOWLEDGE HUB

Cyber security guidance.
A practical next step.

Clear guidance for the decisions behind better security. Find a quick explanation, follow a practical checklist or take a structured path from your first check to a verified change.

Explore 12 resources Your reading list

3 dated briefings5 practical guides4 implementation checklists

A USEFUL PLACE TO START

Choose a learning path.

Three connected reads, with a practical outcome.

START HERE10 min reading

Run your first useful assessment

Understand the scope, give your provider an answerable request and verify the outcome.

EMAIL PROTECTION10 min reading

Strengthen your business email

Understand authentication, plan a controlled DMARC change and check the evidence.

WEBSITE SECURITY11 min reading

Work through website controls

Review HTTPS, agree hosting responsibilities and deploy a policy that fits your site.

START WITH THE TOPIC

Guidance with a working record.

Choose an overview, follow its guides and download a blank template to use with your team.

Website security headers and HTTPS checks

Understand website security headers, HTTPS and public check limits. Plan a change, assign an owner and record evidence with a website control template.

Explore website security headers and https checks

SPF, DKIM and DMARC email security checks

Check the meaning of SPF, DKIM and DMARC observations. Find the correct DKIM selector, map legitimate senders and plan a controlled email policy change.

Explore spf, dkim and dmarc email security checks

Vulnerability management and verified remediation

Turn a scanner finding into an owned remediation task. Check asset attribution, vendor evidence, business impact and the result of a suitable retest.

Explore vulnerability management and verified remediation

Cyber security and recovery planning for small businesses

Review the accounts, backups and dependencies behind your business. Build a practical security action plan and keep evidence of recovery exercises.

Explore cyber security and recovery planning for small businesses

12 of 12 resources

Primary sources · Clear scope · Practical steps

Start here4 min read

Choose the right scan: public checks or a connected scanner

Understand what each mode can observe, which permission it needs and what a reassuring result still leaves unanswered.

1 Nov 2026Practical guide

1 supporting source

Web security4 min read

HTTPS, certificates and CDNs: understand the connection checked

Separate a successful HTTPS request from certificate analysis, origin protection and a complete TLS configuration review.

1 Nov 2026Practical guide

3 supporting sources

Email checklist3 min read

Move DMARC from monitoring to enforcement

A controlled rollout for teams that need stronger anti-spoofing protection while preserving legitimate business email.

1 Nov 2026Step-by-step checklist

3 supporting sources

Resilience briefing3 min read

NCSC resilience guidance: start with your critical services

Apply the NCSC’s October guidance by connecting technical findings to the services your business needs to keep running.

1 Nov 2026Source-checked briefing

1 supporting source

Account security3 min read

Passkeys: protect the accounts behind your website

A September update to UK business guidance added passkey advice. Your registrar, hosting and email accounts are a good place to apply it.

1 Nov 2026Source-checked briefing

2 supporting sources

NCSC briefing3 min read

PHP alert: ask your hosting provider for patch evidence

The NCSC’s 21 October alert makes a timely case for checking the software behind your website, including components managed by your host.

1 Nov 2026Source-checked briefing

2 supporting sources

Evidence checklist3 min read

Prepare a provider escalation and evidence pack

Turn a technical finding into a clear request your host, developer or insurer can review without guessing what the scan proved.

1 Nov 2026Step-by-step checklist

2 supporting sources

Vulnerability triage4 min read

Reading version banners and backported patches

Learn when an old-looking version needs investigation and which evidence can confirm whether a security fix is present.

1 Nov 2026Practical guide

2 supporting sources

Developer checklist3 min read

Roll out a Content Security Policy safely

Build a policy around your actual application, inspect reports and test essential journeys before enforcement.

1 Nov 2026Step-by-step checklist

1 supporting source

Email security4 min read

SPF, DKIM and DMARC: a practical guide for business email

Map your real senders, understand alignment and strengthen your policy without losing legitimate messages.

1 Nov 2026Practical guide

4 supporting sources

Retest checklist3 min read

Verify a security fix and keep a useful record

Retest the same condition, distinguish missing visibility from remediation, and document what actually changed.

1 Nov 2026Step-by-step checklist

2 supporting sources

WordPress4 min read

WordPress and hosting: who owns the security fix?

Give each finding an owner across your business, developer and host, then verify the change with useful evidence.

1 Nov 2026Practical guide

1 supporting source

News briefings explain dated developments. Guides and checklists support practical work. Always use the linked primary sources for the current technical detail.