How to find subdomains of a domain you own: certificate transparency, passive DNS, brute force and resolution — plus what to do with the list you get.
Free Security Checks: 6 Things to Test on Your Own Domain
Free security checks: six tests you can run on your own domain today — subdomains, headers, DMARC, open ports, dangling DNS and TLS, with real commands.
Aikido Alternative in 2026: The Autonomous Pentest Scanning Can’t Replace
Aikido alternative for real pentesting: scanners find and flag, SelfHack AI exploits and proves — full-stack, exploit-validated, with published research.
XBOW Alternative: Why Security Teams Choose SelfHack AI in 2026
Looking for an XBOW alternative? SelfHack AI matches autonomous web depth, then covers cloud, firmware & confidential computing — with published research.
Best AI Pentest Tools in 2026: SelfHack AI, XBOW, Terra & Aikido Compared
The best AI pentest tools in 2026 compared: SelfHack AI, XBOW, Terra & Aikido — autonomy, exploit validation, and full-stack coverage, ranked.
Supply Chain Penetration Testing: What Slovakia’s Backdoored Cameras Reveal
Supply chain penetration testing after Slovakia’s backdoored cameras: the SMS shell, SecureBoot-off firmware, and how to test hardware you cannot trust.
Avionics Penetration Testing: Inside an F-35 System-of-Systems Assessment
Avionics penetration testing of the F-35: the five attack domains, the 1970s-bus problem, and the zero-trust engineering that closes the gap.
Confidential Computing Pentest: The GPU Changed, Attestation Did Not
Confidential computing pentest of AMD SEV-SNP + NVIDIA Blackwell GPU: the attestation binding gap, what held, what broke — and the 9-step chain.
Connected Vehicle Pentest: Telematics, EV Charging (OCPP) and Fleet APIs
Connected vehicle pentest: telematics cloud, EV charging (OCPP) & fleet APIs in one engagement. The command-path bugs that unlock cars and fleets.
Blockchain Pentest: Securing a Gold-Backed Tokenization Platform Across Every Layer
Blockchain pentest: web, API, cloud AND smart contracts in one engagement. Why siloed audits miss the off-chain to on-chain seam where tokens break.