Security basics
Security basics, in plain words.
Short explanations of the words you will meet. Each one links to the official source or to the service that helps.
Post-quantum cryptography (PQC)
Encryption designed to stay safe even against future quantum computers. NIST published the first standards in August 2024.
Harvest now, decrypt later
Attackers can store encrypted data today and decrypt it once quantum computers are strong enough. That is why long-lived data needs PQC now.
ML-KEM and ML-DSA
ML-KEM (FIPS 203) agrees keys; ML-DSA (FIPS 204) signs data. We use them in a hybrid with today’s proven algorithms.
PHP vulnerabilities
PHP runs many websites, including most WordPress sites. When a critical flaw is found, update quickly and hide version numbers.
Security headers (HSTS, CSP and more)
Small settings your server sends with each page. They force HTTPS, block other sites from framing yours, and limit what scripts can run.
WAF (web application firewall)
A filter in front of your site that blocks known attack patterns. Cloudflare offers one on its free plan.
Bots posing as people
Automated tools that log in and click like a person, only faster. Behaviour-based detection spots them where IP blocking cannot.
Prompt injection
Hidden instructions that try to make an AI ignore its rules and reveal data.
End-to-end encryption (E2EE)
Data is encrypted on the user’s device, and only the intended recipient can decrypt it. The server in between only sees ciphertext.
Row Level Security (RLS)
A database setting that decides which rows each user may read or change. Missing RLS is a common cause of leaks.