Security Awareness
7 guides · 54 glossary terms
Most breaches still start with a person: a reused password, an urgent request nobody verified, a laptop on public Wi-Fi, a convincing voice on the phone. These seven guides are a free course in the habits that stop those moments, written for individuals and employees rather than security teams. Start with the 7-day reset if you want one plan to follow. Every guide ends with an action checklist you can tick off as you go; your progress stays in your browser.
Start here
The 7-Day Personal Security Reset
Seven sessions of 30 to 60 minutes to lock down your email, phone, router, AI chats, money and devices, with a recovery plan and a monthly routine to finish.
Explainers
All explainers→Credential Hygiene: Passwords, Passkeys and MFA That Hold Up
intro · 16 minWhat NIST now says about passwords, how to run a password manager, check for breaches, rank MFA by phishing resistance and switch to passkeys safely.
The Workplace Security Playbook: Habits Every Employee Needs
intro · 16 minThe security habits every employee needs: strong sign-in, verify-before-acting on money and access requests, safe data and AI use, and reporting without fear.
AI-Powered Social Engineering: Deepfakes, Voice Clones and AI Phishing
intro · 16 minAI made scams fluent, personal and able to fake voices and faces. Learn the verification habits that defeat deepfakes, voice clones and AI phishing.
Ransomware Readiness: How Modern Attacks Unfold and How to Be Ready
practitioner · 15 minHow modern ransomware gets in, steals data and extorts, plus the prevention, backup and first-hour response steps that blunt it for small teams.
How-To & Implementation
All how-to & implementation→Work From Anywhere, Securely: Laptops, Phones and Public Networks
intro · 16 minSecure remote work in practice: harden home routers, encrypt laptops, lock down phones, handle public Wi-Fi and travel, and report incidents fast.
Threat Modeling AI Systems: LLMs, Agents and Adversarial ML
advanced · 16 minThreat-model an LLM feature or AI agent before launch: map data flows, apply OWASP, MITRE ATLAS and NIST catalogues, score risks and turn them into tests.
Vocabulary
Short, citable definitions for the terms these guides assume.
- SAML
- OIDC
- OAuth 2.0
- SCIM
- JWT
- MFA
- FIDO2
- WebAuthn
- Passkey
- RBAC
- ABAC
- ReBAC
- PBAC
- SIEM
- SOAR
- EDR
- XDR
- Zero trust
- ZTNA
- SAST
- DAST
- JIT Provisioning
- IGA
- PAM
- CIEM
- ITDR
- Session Management
- Refresh Token
- Token Binding
- Magic Link
- SASE
- SSE
- CNAPP
- CSPM
- DSPM
- ASPM
- IAST
- SCA
- Forward Proxy
- Reverse Proxy
- SOCKS5
- TLS Inspection
- BIMI
- VMC
- DMARC
- SPF
- DKIM
- ARC
- MTA-STS
- SLSA
- Sigstore
- SBOM
- SPIFFE
- mTLS