Application Security resources
Explore Network Box USA's published resources about Application Security. Follow the articles below for the relevant security context, considerations, and supporting guidance.
Topic library
Explore Application Security guidance.
Use an annotated testing scope to choose what belongs in staging, what needs production, and how to control real bookings, payments, and messages.
Read →BlogVirtual Patching: Does a WAF Rule Fix the Vulnerability?A WAF rule can reduce exposure while an application flaw remains. Learn how to distinguish a verified mitigation from a completed software repair.
Read →BlogTLS Certificate Renewal: Is the New Certificate Live?A successful renewal job does not prove your website serves the new TLS certificate. Learn how to separate issuance, deployment, and live verification.
Read →BlogRetiring a Cloud Service? Prevent Dangling DNS FirstRetire cloud services in the right order: update DNS, account for cached records, verify the transition, and then release the resource.
Read →BlogCan Traffic Bypass Your WAF? An Origin Access ChecklistMap application entry points, restrict unintended direct access, and verify the evidence that shows whether traffic can reach an origin around its WAF.
Read →BlogWeb App Pen Test Accounts: A Preparation ChecklistPrepare the roles, user pairs, customer environments, and test data needed to assess application access controls and understand gaps in test coverage.
Read →