haroon@lab:~$ ls -t writing/

A practical checklist for locking down a small site with Cloudflare's free tier: TLS, HSTS, WAF, DNSSEC, email records and security headers.

A plain-English explanation of three vulnerability prioritization signals, and how combining them turns thousands of findings into a short to-do list.

How I publish home-lab services to the internet without opening a single inbound port, and why the origin still checks every request itself.