SourceSoftware & AIDocs
FTC Cybersecurity for Small Business
Plain-language FTC guidance on cybersecurity basics for small businesses.
ftc.gov/business-guidance/small-businesses/cybersecurity
Playbook Gallery
Secure A Small Web App
Small-business cybersecurity, web-app risk, API security, database access, and response-header references.
public · 10 sources
Contents
- SourceSoftware & AIDocs
NIST Small Business Cybersecurity Corner
NIST's small-business hub for cybersecurity planning, training, and reference material.
nist.gov/itl/smallbusinesscyber - SourceSoftware & AIDocs
NIST CSF 2.0 Small Business Quick-Start Guide
Introductory NIST guide for modest or early cybersecurity programs using CSF 2.0.
nist.gov/publications/nist-cybersecurity-framework-20-small-business-quick-start-guide
- SourceSoftware & AIDocs
OWASP Top 10:2021
OWASP's reference list of common web-application security risk categories.
owasp.org/Top10/2021 - SourceSoftware & AIDocs
OWASP API Security Top 10 2023
OWASP's API-specific risk categories for authorization, authentication, inventory, and unsafe consumption.
owasp.org/API-Security/editions/2023/en/0x00-header - SourceSoftware & AIDocs
OWASP Cheat Sheet Series
Implementation-focused security cheat sheets for authentication, authorization, secrets, sessions, and more.
owasp.org/www-project-cheat-sheets - SourceSoftware & AIDocs
OWASP Web Security Testing Guide
Comprehensive testing reference for web applications and web services.
owasp.org/www-project-web-security-testing-guide
- SourceSoftware & AIDocs
Supabase Row Level Security
Supabase guide to Postgres row-level security policies for protecting user data.
supabase.com/docs/guides/database/postgres/row-level-security - SourceSoftware & AIDocs
Vercel Content Security Policy guide
Vercel guide to using Content Security Policy and related response headers.
vercel.com/docs/cdn-security/security-headers - SourceSoftware & AIDocs
MDN Strict-Transport-Security header
MDN reference for the HSTS response header and HTTPS-only browser behavior.
developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security