XDEFENSE KNOWLEDGE LIBRARY

Cybersecurity Insights

Technical perspectives, security analysis and practical guidance from XDefense — organised into focused topic clusters so you can quickly find what matters.

CONSULTING SERVICES

THREAT assessment & RESPONSE

strategic services

Our process

learn

XDEFENSE

Cybersecurity Insights

Penetration Testing

Vulnerability assessment vs penetration testing

Internal vs external penetration testing

Web application penetration testing checklist

API security testing guide

How often should penetration testing be performed?

What should a penetration testing report include?

Automated scanning vs manual penetration testing

Questions to ask a VAPT provider

Microsoft Azure

What is an Azure Landing Zone?

Azure Landing Zone assessment checklist

Common Microsoft Entra ID security gaps

Azure cost optimisation assessment

Azure security assessment vs penetration testing

How to secure public-facing Azure resources

Azure backup and disaster-recovery review

When to conduct an Azure assessment

Ransomware & Recovery

Ransomware readiness checklist

What to do immediately after a ransomware attack

Should encrypted servers be restarted?

Can ransomware-encrypted backups be recovered?

Recovering VMware and Hyper-V environments after ransomware

Ransomware defence assessment vs incident response

How to validate backups before restoration

Common mistakes after a ransomware attack

CTEM & Attack Surface Management

What is CTEM?

CTEM vs vulnerability management

CTEM vs penetration testing

The five stages of a CTEM programme

Attack Surface Management explained

What is Breach and Attack Simulation?

Continuous red teaming vs annual red teaming

How CTEM helps growing organisations

CTEM metrics for CISOs

Governance, Risk & Compliance

NIST CSF 2.0 assessment guide

ISO 27001 gap assessment checklist

CBK CORF readiness assessment

What is GRC (Governance, Risk and Compliance)?

GRC vs cybersecurity: how they differ and overlap

Risk assessment vs risk management explained

How to build a risk register

GRC software and tools explained

Third-party / vendor risk management guide

Regulatory compliance vs framework compliance

How GRC supports board-level reporting

Integrating GRC with a cybersecurity maturity assessment

Virtual CISO

What is a vCISO and how does it work?

vCISO vs full-time CISO

vCISO vs cybersecurity consultant

When does a company need a vCISO?

What does a typical vCISO engagement include?

vCISO pricing models explained

vCISO for startups vs enterprises

Questions to ask before hiring a vCISO

How a vCISO supports compliance and audits

Signs your organisation needs a vCISO

Security Architecture

What is a security architecture review?

Security architecture review vs penetration testing

Zero trust architecture explained

Network segmentation best practices

Secure by design principles for new systems

Security architecture for hybrid and multi-cloud environments

Common security architecture weaknesses

Security architecture review vs cloud security assessment

When to conduct a security architecture review

Building a security architecture roadmap

Software Development Transformation