In exactly one month, the first binding stage of the Cyber Resilience Act goes live. From 11 September 2026, as a manufacturer you must be able to report an actively exploited vulnerability in your product within 24 hours. Not „my company was attacked” – but „a vulnerability in the product I shipped is being exploited...
Want to know whether your website is properly encrypted, without installing anything? Enter your domain at gossling.checkfix.io, start the scan, read the grade from A+ to F. Free. What the grade means and what to fix first if it comes back badly is below.
Yes, there is a free alternative to SSL Labs that runs online, gives you a real A+ to F grade, and can be used commercially: Gossling. That combination is rarer than you would expect. Here is where the well-known tools run out of road.
Recently, we had a candidate for our free Security Check. Everything ran cleanly – until one point: the TLS/SSL assessment choked on this particular setup. No clean result, no completion. 3 weeks later we had our own tool: Gossling, a TLS/SSL scanner that fixes exactly this problem and completed that check in the process. Documented,...
The rapid rise of artificial intelligence (AI) makes life easier for many legitimate businesses—unfortunately, it does the same for cybercriminals. One particularly sneaky tactic is the fake-shop scam through website cloning. Criminals create convincing copies of reputable online stores and use them to lure unsuspecting customers into a trap. Genuine retailers suffer heavy reputational damage...
DNS plays a critical role in sending and receiving email: it provides the infrastructure mail servers rely on to talk to each other. Yet proper DNS configuration is often neglected—or people assume it happens automatically. Fact is: even if you’re on M365, you must configure these records yourself. If you don’t, your emails will land...
Your own AI instead of the cloud. Data sovereignty instead of API dependency. The plan was clear, the hardware impressive, the anticipation high. We set up a server that would have passed for a supercomputer just two years ago – Threadripper, Blackwell GPU, 96 GB VRAM – assembled everything, configured everything, loaded the model. And...
The CheckFix Blog is intended as a tutorial where we thoroughly explain the most important IT security measures and back them up with examples. Our team of IT security specialists spends their professional lives focused exclusively on cybersecurity — we like to call ourselves “Good Hackers.” Why? Because we hack into our clients’ systems to...
As long as it works” is yesterday’s mindset. In modern software development, building security in early determines quality, efficiency, and trust. Shift Security Left ensures that vulnerabilities are discovered and fixed before they cause damage — saving companies time, money, and nerves.
Imagine this: since January 2023, NIS 2 has been in force across the EU. Officially, the directive should have been transposed into national law by October 17, 2024. Now it’s August 2025, and Austria and Germany are still operating without a finalized law. What does that mean? When the explosion comes – and it will...
