Austria’s NISG 2026 is here, since 1 October and with no transition period. You can read what the law says in plenty of places by now. The real question is a different one: how do you implement it in your own company without it ending up as a paper tiger in a drawer or quietly...
The email comes from procurement and is three lines long: to continue working together, they need proof of your company’s IT security. No questionnaire attached, no standard named, no form, no deadline. Just the expectation that something will be sent. NIS2 is in force, supply chain reviews are moving up more and more to-do lists,...
In exactly one month, the first binding stage of the Cyber Resilience Act goes live. From 11 September 2026, as a manufacturer you must be able to report an actively exploited vulnerability in your product within 24 hours. Not „my company was attacked” – but „a vulnerability in the product I shipped is being exploited...
Want to know whether your website is properly encrypted, without installing anything? Enter your domain at gossling.checkfix.io, start the scan, read the grade from A+ to F. Free. What the grade means and what to fix first if it comes back badly is below.
Yes, there is a free alternative to SSL Labs that runs online, gives you a real A+ to F grade, and can be used commercially: Gossling. That combination is rarer than you would expect. Here is where the well-known tools run out of road.
Recently, we had a candidate for our free Security Check. Everything ran cleanly – until one point: the TLS/SSL assessment choked on this particular setup. No clean result, no completion. 3 weeks later we had our own tool: Gossling, a TLS/SSL scanner that fixes exactly this problem and completed that check in the process. Documented,...
The rapid rise of artificial intelligence (AI) makes life easier for many legitimate businesses—unfortunately, it does the same for cybercriminals. One particularly sneaky tactic is the fake-shop scam through website cloning. Criminals create convincing copies of reputable online stores and use them to lure unsuspecting customers into a trap. Genuine retailers suffer heavy reputational damage...
DNS plays a critical role in sending and receiving email: it provides the infrastructure mail servers rely on to talk to each other. Yet proper DNS configuration is often neglected—or people assume it happens automatically. Fact is: even if you’re on M365, you must configure these records yourself. If you don’t, your emails will land...
Your own AI instead of the cloud. Data sovereignty instead of API dependency. The plan was clear, the hardware impressive, the anticipation high. We set up a server that would have passed for a supercomputer just two years ago – Threadripper, Blackwell GPU, 96 GB VRAM – assembled everything, configured everything, loaded the model. And...
The CheckFix Blog is intended as a tutorial where we thoroughly explain the most important IT security measures and back them up with examples. Our team of IT security specialists spends their professional lives focused exclusively on cybersecurity — we like to call ourselves “Good Hackers.” Why? Because we hack into our clients’ systems to...
