https://xono.ai/blog/ Practical, no-nonsense guides on cybersecurity for growing businesses — SOC 2, ISO 27001, NIS2, DORA, vCISO, penetration testing, secure SDLC, and cloud security. en Sat, 23 May 2026 09:00:00 GMT https://xono.ai/blog/cloud-security-aws-azure-gcp/ https://xono.ai/blog/cloud-security-aws-azure-gcp/ Sat, 23 May 2026 09:00:00 GMT IAM, networking, KMS, Kubernetes, IaC review. The configuration mistakes we see most often and what real defence-in-depth looks like. Cloud Security https://xono.ai/blog/penetration-testing-explained/ https://xono.ai/blog/penetration-testing-explained/ Sat, 23 May 2026 09:00:00 GMT Black-box, grey-box, white-box. Web app, network, cloud, red team. A practical guide to scoping a pen test that delivers actionable findings. Penetration Testing https://xono.ai/blog/secure-sdlc-shifting-left/ https://xono.ai/blog/secure-sdlc-shifting-left/ Sat, 23 May 2026 09:00:00 GMT How to bake threat modelling, SAST, SCA, secret scanning, DAST, and SBOM hygiene into your pipeline without becoming the team everyone routes around. Secure SDLC https://xono.ai/blog/what-is-a-vciso/ https://xono.ai/blog/what-is-a-vciso/ Sat, 23 May 2026 09:00:00 GMT The roles, rhythms, deliverables, and honest signals that tell you whether your organisation is ready for fractional executive security leadership. vCISO https://xono.ai/blog/soc2-iso-27001-readiness/ https://xono.ai/blog/soc2-iso-27001-readiness/ Sat, 23 May 2026 09:00:00 GMT How to pick a framework, when to combine them, realistic timelines and costs, and what auditors actually look for. Compliance https://xono.ai/blog/security-essentials-foundations/ https://xono.ai/blog/security-essentials-foundations/ Sat, 23 May 2026 09:00:00 GMT A no-nonsense baseline for organisations formalising security for the first time — what to implement, in what order, and what to defer. Security Essentials