Year: 2026

HIPAA penetration testing — how a test satisfies the Security Rule's risk analysis and evaluation requirements for electronic protected health information | SelfHack AI

September 12, 2026

HIPAA Penetration Testing: How to Satisfy the Security Rule When It Never Says Pentest

HIPAA penetration testing: how a test satisfies the Security Rule’s risk analysis and evaluation, and why continuous beats an annual snapshot.

Compliance Penetration Testing

ephi, healthcare security, hipaa, hipaa penetration testing, security rule

PCI DSS penetration testing — Requirement 11.4 covering external, internal and segmentation testing of the cardholder data environment | SelfHack AI

September 12, 2026

PCI DSS Penetration Testing: Requirement 11.4, Segmentation, and the Significant-Change Trap

PCI DSS penetration testing: what Requirement 11.4 demands, and the significant-change trap that catches teams between annual audits.

Compliance Penetration Testing

compliance, pci dss penetration testi, requirement 11.4, segmentation testing

SOC 2 penetration testing — the evidence auditors expect for the Trust Services Criteria on monitoring and risk | SelfHack AI

September 12, 2026

SOC 2 Penetration Testing: Where It Fits, What Auditors Expect, and How Often to Run It

SOC 2 penetration testing: where it fits in the Trust Services Criteria, what auditors expect in the report, and how often to run it.

Compliance Penetration Testing

compliance, saas security, soc 2 penetration testing, trust services criteria

Compliance penetration testing across SOC 2, PCI DSS, HIPAA, ISO 27001 and DORA — one test, five auditor questions | SelfHack AI

September 12, 2026

Compliance Penetration Testing: What SOC 2, PCI DSS, HIPAA, ISO 27001 and DORA Actually Require

Compliance penetration testing: what SOC 2, PCI DSS, HIPAA, ISO 27001 and DORA each require, and why continuous testing beats an annual certificate.

Compliance Penetration Testing

compliance penetration te, dora, pci dss, soc 2

Autonomous cyber attacks — the attacker's pentest is already autonomous while most defenders still test annually, per Anthropic's September 2026 threat report | SelfHack AI

September 12, 2026

Autonomous Cyber Attacks: What Anthropic’s Threat Report Means for Your Next Pentest

Autonomous cyber attacks are here: what Anthropic’s September 2026 threat report shows, and why an annual pentest cannot answer machine-speed adversaries.

AI Security Penetration Testing

AI penetration testing, anthropic threat report, autonomous cyber attacks, continuous pentest, threat intelligence

SSL TLS check overview — protocol versions, cipher suites, certificate chain, hostname coverage, HSTS and revocation examined across one HTTPS endpoint | SelfHack AI

September 6, 2026

SSL/TLS Check: How to Test Your Certificates and Protocol Configuration

SSL TLS check: certificate validity and chain, protocol versions, cipher suites and HSTS — what each result means and what to fix first.

Security Testing

certificates, encryption, hsts, ssl tls check, tls

Subdomain takeover explained — a dangling CNAME on your domain still points at a third-party service that released the name, letting someone else serve content from your subdomain | SelfHack AI

September 6, 2026

Subdomain Takeover: How Dangling DNS Records Hand Attackers Your Domain

Subdomain takeover: how a dangling CNAME lets someone else serve content on your domain, how to find them safely, and how to prevent the next.

Security Testing

attack surface, cname, dangling dns, dns security, subdomain takeover

How to check open ports on your own domain safely and legally — listening services, firewall reachability, nmap and ss on assets you own | SelfHack AI

September 6, 2026

How to Check Open Ports on Your Own Servers (and What to Close)

How to check open ports on infrastructure you own: the commands that work, what each exposed service means, and the decision rule for what to close.

Security Testing

attack surface, check open ports, nmap, port scanning

DMARC check explained — SPF authorises sending IPs, DKIM signs the message, and DMARC aligns both to the visible From domain before telling receivers to reject spoofed mail | SelfHack AI

September 6, 2026

DMARC Check: How to Test Whether Anyone Can Spoof Your Domain

DMARC check: find out whether anyone can send email as your domain, how to read your SPF, DKIM and DMARC records, and how to reach enforcement.

Security Testing

dkim, dmarc check, email security, phishing, spf

Security headers check overview — the HTTP response headers a security headers check looks for: Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options nosniff, Referrer-Policy and Permissions-Policy | SelfHack AI

September 6, 2026

Security Headers Check: What Each Header Does and How to Test Yours

Security headers check: what HSTS, CSP, X-Frame-Options and Referrer-Policy each stop, how to test yours, and how to fix what is missing.

Security Testing

appsec, csp, hsts, security headers check, web security