Cybersecurity Application security 8 min
API Security Assessment and Hardening Guide
API Security Assessment and Hardening Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
WEBSITETOON guides
Practical guidance for better digital decisions
Plan, build, grow, and protect your digital operations with detailed guidance from the WEBSITETOON team. Browse every guide in one place.
Guide library
Explore all guides
Use these guides to prepare projects, brief internal teams, ask stronger vendor questions, and identify practical next steps. Technical security guidance should be adapted to your environment and verified before production use.
115 guides Web development Marketing Cybersecurity
Cybersecurity Application security 8 min
Authentication and Authorization for REST APIs
Authentication and Authorization for REST APIs: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
AWS Security Foundations for Business Workloads
AWS Security Foundations for Business Workloads: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 10 min
BigCommerce Store and App Security Best Practices
Secure BigCommerce storefronts and integrations by controlling users, API credentials, app callbacks, theme code, and customer-data flows.
Cybersecurity Security operations 8 min
Building a Continuous Vulnerability Management Program
Building a Continuous Vulnerability Management Program: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Marketing 12 min
Building a Measurable Marketing Program
Build a marketing program that connects customer needs, channels, content, measurement, and responsible automation.
Cybersecurity Governance & risk 8 min
Building a Practical Cybersecurity Program Roadmap
Building a Practical Cybersecurity Program Roadmap: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
Building a Practical Data Classification Program
Building a Practical Data Classification Program: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Building a Risk-Based Patch Management Program
Building a Risk-Based Patch Management Program: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Building a Secure Software Development Lifecycle
Building a Secure Software Development Lifecycle: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Building an Annual Cybersecurity Operating Plan
Building an Annual Cybersecurity Operating Plan: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Building an Annual Security Testing Cadence
Building an Annual Security Testing Cadence: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Building and Testing an Incident Response Plan
Building and Testing an Incident Response Plan: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Building or Selecting a Security Operations Centre
Building or Selecting a Security Operations Centre: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Canadian Privacy Breach Response Guide
Canadian Privacy Breach Response Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Choosing a Cybersecurity Control Framework
Choosing a Cybersecurity Control Framework: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
Collecting Technical Compliance Evidence Efficiently
Collecting Technical Compliance Evidence Efficiently: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Container Image and Runtime Security Guide
Container Image and Runtime Security Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Creating a Useful Information Security Policy Suite
Creating a Useful Information Security Policy Suite: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Creating and Maintaining an IT Asset Inventory
Creating and Maintaining an IT Asset Inventory: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Customer Identity and Access Management Guide
Customer Identity and Access Management Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Cybersecurity Business Continuity Planning
Cybersecurity Business Continuity Planning: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Cybersecurity Due Diligence for Mergers and Acquisitions
Cybersecurity Due Diligence for Mergers and Acquisitions: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Cybersecurity Metrics and KPIs That Support Decisions
Cybersecurity Metrics and KPIs That Support Decisions: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Cybersecurity Reporting for Boards and Executives
Cybersecurity Reporting for Boards and Executives: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Database Security and Hardening Guide
Database Security and Hardening Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
DDoS Protection and Resilience Planning
DDoS Protection and Resilience Planning: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Defining Cybersecurity Roles with a RACI Matrix
Defining Cybersecurity Roles with a RACI Matrix: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Designing Effective Cybersecurity Awareness Training
Designing Effective Cybersecurity Awareness Training: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Digital Forensics Readiness for Organizations
Digital Forensics Readiness for Organizations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
DNS and Domain Security Guide
DNS and Domain Security Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Dynamic Application Security Testing Implementation Guide
Dynamic Application Security Testing Implementation Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Email Authentication with SPF, DKIM, and DMARC
Email Authentication with SPF, DKIM, and DMARC: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Endpoint Detection and Response Deployment Guide
Endpoint Detection and Response Deployment Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
GDPR Technical and Security Readiness Guide
GDPR Technical and Security Readiness Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Google Cloud Security Foundations
Google Cloud Security Foundations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
GraphQL API Security Best Practices
GraphQL API Security Best Practices: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
HIPAA Security Readiness for Digital Health Services
HIPAA Security Readiness for Digital Health Services: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
How to Build a Defensible Cybersecurity Budget
How to Build a Defensible Cybersecurity Budget: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
How to Build and Maintain a Cybersecurity Risk Register
How to Build and Maintain a Cybersecurity Risk Register: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
How to Conduct a Privacy Impact Assessment
How to Conduct a Privacy Impact Assessment: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
How to Run a Cybersecurity Risk Assessment
How to Run a Cybersecurity Risk Assessment: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
How to Run an Effective User Access Review
How to Run an Effective User Access Review: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
How to Scope and Prepare for a Penetration Test
How to Scope and Prepare for a Penetration Test: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 9 min
HTML, CSS, and Browser Security Best Practices
Protect browser-facing websites by treating content, forms, scripts, embeds, and response headers as parts of one security boundary.
Cybersecurity Identity & access 8 min
Identity and Access Management for Growing Organizations
Identity and Access Management for Growing Organizations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
Implementing the CIS Critical Security Controls
Implementing the CIS Critical Security Controls: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Infrastructure as Code Security Review Guide
Infrastructure as Code Security Review Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
ISO 27001 Readiness: A Practical Starting Guide
ISO 27001 Readiness: A Practical Starting Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 10 min
JavaScript and TypeScript Security Best Practices
Reduce client- and server-side JavaScript risk through safe data handling, controlled dependencies, clear trust boundaries, and secure deployment.
Cybersecurity Application security 8 min
Kubernetes Security and Hardening Guide
Kubernetes Security and Hardening Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Large Language Model Security Best Practices
Large Language Model Security Best Practices: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 12 min
Linux and Nginx Web Server Security Best Practices
Reduce web-server risk by minimizing services, restricting administration, hardening Nginx and TLS, and monitoring the deployed system over time.
Cybersecurity Cloud & infrastructure 8 min
Linux Server Hardening Guide
Linux Server Hardening Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Managing Cybersecurity Exceptions and Risk Acceptance
Managing Cybersecurity Exceptions and Risk Acceptance: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Managing Service Accounts and Machine Identities
Managing Service Accounts and Machine Identities: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Microsoft Azure Security Foundations
Microsoft Azure Security Foundations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Mobile Application Security Planning Guide
Mobile Application Security Planning Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 10 min
MongoDB and Database Security Best Practices
Protect application data by combining database hardening with safe queries, narrow service identities, controlled networks, encryption, and tested recovery.
Cybersecurity AI & people 8 min
Monitoring AI Systems for Security and Misuse
Monitoring AI Systems for Security and Misuse: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Multi-Cloud Security Governance Guide
Multi-Cloud Security Governance Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Multi-Factor Authentication Deployment Guide
Multi-Factor Authentication Deployment Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Network Segmentation for Small and Mid-Sized Organizations
Network Segmentation for Small and Mid-Sized Organizations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Nginx Reverse Proxy Security Guide
Nginx Reverse Proxy Security Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 11 min
Node.js and Express Security Best Practices
Protect Node.js services by controlling inputs, packages, process permissions, network behaviour, and the production environment around Express.
Cybersecurity Compliance & privacy 8 min
PCI DSS Readiness for Ecommerce and Payment Environments
PCI DSS Readiness for Ecommerce and Payment Environments: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 11 min
PHP and Laravel Security Best Practices
Secure PHP and Laravel applications by preserving framework protections, limiting runtime privileges, and maintaining the full hosting stack.
Cybersecurity Compliance & privacy 8 min
PIPEDA Cybersecurity and Privacy Safeguards Guide
PIPEDA Cybersecurity and Privacy Safeguards Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Planning a Passwordless Authentication Rollout
Planning a Passwordless Authentication Rollout: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Web development 12 min
Planning a Website or Web Application
Plan a website or application around users, workflows, integrations, AI opportunities, and a successful launch and handover.
Cybersecurity AI & people 8 min
Planning Ethical and Useful Phishing Simulations
Planning Ethical and Useful Phishing Simulations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Governance & risk 8 min
Preparing for a Cyber Insurance Application or Renewal
Preparing for a Cyber Insurance Application or Renewal: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
Privacy by Design for Websites and Web Applications
Privacy by Design for Websites and Web Applications: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Privileged Access Management for Administrators
Privileged Access Management for Administrators: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Prompt Injection Prevention and Testing Guide
Prompt Injection Prevention and Testing Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 10 min
Python and Django Security Best Practices
Use Django’s built-in safeguards deliberately while hardening Python dependencies, settings, data access, and the production deployment path.
Cybersecurity Compliance & privacy 8 min
Quebec Law 25 Technical Readiness Guide
Quebec Law 25 Technical Readiness Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Ransomware Readiness and Recovery Planning
Ransomware Readiness and Recovery Planning: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 9 min
React Security Best Practices
Preserve React’s safe defaults while securing HTML rendering, authorization, data flows, dependencies, and the server-side code around the interface.
Cybersecurity 12 min
REST and GraphQL API Security Best Practices
Design API security around identities, objects, actions, data exposure, resource consumption, and the clients and integrations that depend on them.
Cybersecurity Compliance & privacy 8 min
Reviewing Vendor Data Processing Agreements
Reviewing Vendor Data Processing Agreements: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Role-Based Access Control for Business Systems
Role-Based Access Control for Business Systems: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Running a Cybersecurity Executive Tabletop Exercise
Running a Cybersecurity Executive Tabletop Exercise: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Secrets Management for Applications and DevOps Teams
Secrets Management for Applications and DevOps Teams: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Secure Backup and Recovery Testing Guide
Secure Backup and Recovery Testing Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
Secure Data Retention and Disposal Planning
Secure Data Retention and Disposal Planning: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Secure Employee Onboarding and Offboarding
Secure Employee Onboarding and Offboarding: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Secure File Upload Design and Testing
Secure File Upload Design and Testing: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Secure Joiner, Mover, and Leaver Processes
Secure Joiner, Mover, and Leaver Processes: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Secure Sessions, Cookies, and Browser Storage
Secure Sessions, Cookies, and Browser Storage: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Securing CI/CD Pipelines and Software Releases
Securing CI/CD Pipelines and Software Releases: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Securing Retrieval-Augmented Generation Systems
Securing Retrieval-Augmented Generation Systems: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Security Assessment for AI Vendors and Platforms
Security Assessment for AI Vendors and Platforms: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity AI & people 8 min
Security Governance for Business AI Systems
Security Governance for Business AI Systems: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Security Logging and Monitoring Foundations
Security Logging and Monitoring Foundations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Security-Focused Code Review Guide
Security-Focused Code Review Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 10 min
Shopify Store and App Security Best Practices
Protect a Shopify operation by governing staff access, apps, theme code, customer data, webhooks, and the systems connected to the store.
Cybersecurity Security operations 8 min
SIEM Planning, Selection, and Implementation
SIEM Planning, Selection, and Implementation: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Identity & access 8 min
Single Sign-On Planning and Implementation Guide
Single Sign-On Planning and Implementation Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
SOC 2 Readiness for Technology and Service Organizations
SOC 2 Readiness for Technology and Service Organizations: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Software Composition Analysis and Dependency Security
Software Composition Analysis and Dependency Security: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Static Application Security Testing Implementation Guide
Static Application Security Testing Implementation Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 11 min
Strengthening Application Security
Strengthen application security with a practical combination of assessment, testing, hardening, protection, and continuous review.
Cybersecurity Governance & risk 8 min
Third-Party and Supplier Cybersecurity Risk Management
Third-Party and Supplier Cybersecurity Risk Management: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Threat Modelling for Web Applications
Threat Modelling for Web Applications: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Understanding Cloud Shared Responsibility
Understanding Cloud Shared Responsibility: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Using Cyber Threat Intelligence Effectively
Using Cyber Threat Intelligence Effectively: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Compliance & privacy 8 min
Using the NIST Cybersecurity Framework 2.0
Using the NIST Cybersecurity Framework 2.0: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Application security 8 min
Using the OWASP Top 10 in Application Reviews
Using the OWASP Top 10 in Application Reviews: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Security operations 8 min
Vulnerability Scanning Planning and Operations Guide
Vulnerability Scanning Planning and Operations Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Web Application Firewall Selection and Deployment
Web Application Firewall Selection and Deployment: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Windows Server Security and Hardening Guide
Windows Server Security and Hardening Guide: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity 11 min
WordPress Security Best Practices
Reduce WordPress risk by maintaining a small trusted software inventory, hardening administration and hosting, and preparing to detect and recover from incidents.
Cybersecurity Application security 8 min
Writing Security Requirements for Software Projects
Writing Security Requirements for Software Projects: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
Cybersecurity Cloud & infrastructure 8 min
Zero Trust Adoption Roadmap
Zero Trust Adoption Roadmap: a risk-based implementation path with practical evidence, review questions, and measurable next steps.
