The Cybersecurity Blog

What the CyberFundamentals framework is, how the four levels and three assurance routes work, what a label costs, and which NIS2 deadlines still apply.

Managed firewall pricing benchmarks for Europe and North America, what the monthly fee hides, and the seven questions to ask before signing an MSP quote.

MPLS cost benchmarks per site and per Mbps for Europe and North America, plus the contract mechanics, exit fees and price trajectory behind your invoice.

The five stages of certificate lifecycle management, what each costs, and honest thresholds for when a spreadsheet, a script or a platform is right.

Every step in the TLS certificate lifespan reduction: 200 days now, 100 in 2027, 47 in 2029 — with the renewal maths and what breaks first in your estate.

What certificate pinning does, why HPKP failed, how it breaks TLS inspection, and when SPKI pinning is still worth it — a guide for IT and security teams.

NIS2 doesn’t ban end-of-life systems, it bans unmanaged ones. The defensible process: inventory, risk assessment, compensating controls and documentation.

Every WatchGuard Firebox end-of-life date in one table: what stops working at EOS and EOL, the security record, and your options beyond the next box.

Can’t migrate off Windows Server 2016 before January 2027? The honest guide to ESU costs, compensating controls and ZTNA isolation that auditors accept.