badrap.io

badrap.io

@badrap.io

Cyber security made easy • https://badrap.io

48 followers71 following25 posts

badrap.io
@badrap.io

Our #atproto based changelog has news of its own 🦋 You can now browse it without logging in at badrap.io/changelog. For logged-in users, a snazzy #new "What's new" ticker appears when there are fresh entries.

badrap.io@badrap.io

A changelog you can reply to! 🦋 We built our new changelog on #atproto. Our Bluesky posts tagged #new, #feature or #release also appear as changelog entries inside badrap.io. Each entry links back to the original post.

badrap.io
@badrap.io

Our new changelog features may not pose an existential threat to humanity, but we still think they're pretty neat.

badrap.io
@badrap.io

Throwback to the Cybersicherheitsgipfel event in Hessen: excellent German and international perspectives on cyber resilience! Our DACH presence continues next week at the Zurich AI Festival and at the ECSO CISO Meetup in Berlin, followed by the German-Finnish Businessforum in Munich. See you there!

badrap.io
@badrap.io

A changelog you can reply to! 🦋 We built our new changelog on #atproto. Our Bluesky posts tagged #new, #feature or #release also appear as changelog entries inside badrap.io. Each entry links back to the original post.

badrap.io
@badrap.io

Strap in, we're going full meta: the above post about our new changelog is now an entry in our new changelog.

badrap.io
@badrap.io

Turn everyday security work into visible compliance progress. Our Security Playbooks now show which compliance requirements each playbook supports, starting with ISO/IEC 27002 and NIS2. From "what should we do?" to "what does this cover?" in one place!

badrap.io
@badrap.io

Pricing by "Contact Sales" is out. Public and transparent pricing is in. We just shipped a way for anyone to plan a cybersecurity roadmap based on their actual needs and budget. No guessing, no forced sales calls. Use the Add to Cart button on our Playbooks page to get started: badrap.io/playbooks

badrap.io reposted

jviide.iki.fi
@jviide.iki.fi

Whee! Published @badrap/valita v0.5.2 using both trusted & staged publishing just now insert party emoji here

daniel r(ooooooh) in nyc 🇺🇸@danielroe.dev

🚨 this is the new gold standard: trusted publishing _plus_ a maintainer with 2fa. 👉 check it out docs.npmjs.com/staged-publi...

badrap.io
@badrap.io

Teams, teams for everyone! 🫶 Whether you're securing a home network with your family or testing the waters for a small organization, we've got you covered. Create your free Team Workspace and start protecting your assets together at badrap.io. 🇪🇺 Co-funded by the European Union

badrap.io reposted

jviide.iki.fi
@jviide.iki.fi

More companies, governmental organizations and community projects should adopt the security.txt convention/proposal: securitytxt.org Making security contact discovery as easy as possible is good for everyone. Yes, even within the context of the recent AI vulnerability report slopocalypse.

badrap.io
@badrap.io

Phishing, invoice scams, CEO scams and ransomware all target people. Our Employee Cyber Hygiene playbook helps you start a practical and engaging course for selected employees, giving your workforce the awareness to become your strongest security asset 💪👁️👄👁️💪

badrap.io
@badrap.io

New in the SensorFu Honeytoken app: automatic IP allowlisting for AWS, Google Cloud, Azure, and other Microsoft services. 🌐 Honeytokens are fake secrets meant to attract hackers like bees to honey – basically digital tripwires to catch someone snooping around. Set up your own at badrap.io.

badrap.io
@badrap.io

Badrap is happy to support @npmx.dev in an advisory role. A better developer experience can be a boon to security. Easier access to trust signals and tips for avoiding unnecessary dependencies, among other things, help make stronger supply chain choices. Read their intro: npmx.dev/blog/alpha-r...

npmx.devAnnouncing npmx: a fast, modern browser for the npm registryToday we're releasing the alpha of npmx.dev – a fast, modern browser for the npm registry, built in the open by a growing community.
badrap.io
@badrap.io

The community @npmx.dev has cultivated in such a short time is extraordinary. It turns out that in open source, much like in security, people are the strongest link in the chain. Check out the code at repo.npmx.dev, join the Discord at chat.npmx.dev, and follow them on Bluesky at social.npmx.dev.

repo.npmx.devGitHub - npmx-dev/npmx.dev: a fast, modern browser for the npm registrya fast, modern browser for the npm registry. Contribute to npmx-dev/npmx.dev development by creating an account on GitHub.
badrap.io
@badrap.io

If you're at the GovWare 2025 expo in Singapore this week, drop by and meet us at booth D10! Our Jani will also be speaking on Tuesday 16:00 (Level 6, Room GW6) about lessons learned from doing supply chain cybersecurity checks for over 3000 companies at scale. Come and chat with him afterwards!

badrap.io
@badrap.io

Your mandatory cyber routines are becoming even easier to automate and execute! We're: 🤗 improving your user experience 🧑‍🔧 by developing new self-service features ⛳️ to the badrap.io platform and playbooks The effort is co-funded by the European Union: badrap.io/eakr2025 #CyberSecurity #EUfunded

badrap.ioCyber Security Made EasyBadrap playbooks help you automate cyber security tasks with ease. Step-by-step best practices boost your online security and privacy.
badrap.io
@badrap.io

Remod wrote (in Finnish) some nice things about partnering with Badrap at remod.fi/asiakastarin... ❤️ Together, we’re tackling email security with the "Spoofproof Your Emails" playbook, helping organizations block fraud and keep communications trusted. Check it out at badrap.io/playbooks/sp...!

remod.fiBadrap ja Remod - Tiukkaa tietoturva-asiantuntemusta jalat maassaBadrapin ja Remodin yhteistyöllä on pitkä historia ja juuret syvällä kotimaisessa kyberturvallisuusyhteisössä.

badrap.io reposted

jviide.iki.fi
@jviide.iki.fi

Quite mind-boggling to learn that jviide.iki.fi/http-redirects was referenced in a proposal to amend the OWASP Application Security Verification Standard: github.com/OWASP/ASVS/i... Huge thanks to everyone involved! Heartening to see the measured debate and the well-worded end result.

github.comDon't redirect to HTTPS for API · Issue #2416 · OWASP/ASVSYour API Shouldn't Redirect HTTP to HTTPS The argument is that when a client uses 'http://api.example.org', it should fail instead of silently be insecure. I propose to add a requirement that speci...

badrap.io reposted

Jani Kenttälä
@janikenttala.bsky.social

Here is a nice list of personal cyber hygiene tasks to complete. 👍

rahaeli@rahaeli.bsky.social

It's December, so here are a collection of end of year digital housekeeping tasks you can do while chilling out for the holidays in order to improve your privacy and security for entering 2024 on a good footing. You don't have to do all of them, but they're stuff to consider!

badrap.io
@badrap.io

Glad to hear that our little library has been useful 🎉 io-ts is also a great option, and has definitely influenced valita and many others.

jr@jhn.lol

my go to schema validation library for typescript has been valita by @badrap.io. its api is very small and defining custom types with .chain() is good for everything so far. i used to advocate io-ts but valita is very small and faster in comparison. github.com/badrap/valita

github.comGitHub - badrap/valita: A typesafe validation & parsing library for TypeScript.A typesafe validation & parsing library for TypeScript. - badrap/valita
badrap.io
@badrap.io

A quick reminder for all our friends creating new Bluesky accounts: Recycling is usually a good thing, but not for passwords. Use a unique password for each online service.

You are up to date.