Start Here: Security Basics for Small Teams
Security foundations
Security Foundations
Managing secrets
Managing Secrets
- How to Manage Secrets and API Keys
- Writing the Service Account Inventory Your Auditor Will Ask For
- A Rotation Order for Secrets an Agent Can Reach
- How to Audit Secret Scanning Alerts and Triage False Positives
- How to Write a Secrets Rotation Runbook Your Team Will Use
- Using a Secrets Manager in CI Without Storing Keys
Multi-factor authentication
Multi-Factor Authentication
- How to Set Up Multi-Factor Authentication for a Company
- How to Audit MFA Enrollment Coverage and Close the Gaps
- How to Handle MFA Exceptions Without a Permanent Bypass
- How to Respond to a Compromised MFA Device Incident
- How to Write the Exception Request Form Reviewers Actually Read
- Automating the Revocation Step: A Script and a Test
- Mapping MFA Coverage to Your AI Agent's Access Paths
- MFA Exceptions for Contractors and Vendors: Scope and Exit
Phishing defense
Phishing Defense
Backups and recovery
Backups and Recovery
Incident response
How Small Teams Prepare for Security Incidents
- An Incident Response Plan for a Small Company
- A Pre-Incident Briefing for Support Staff on AI Features
- A Status Page and Status Updates Customers Can Read
- Drafting the Message Sent When an AI Feature Breaks
- When an Agent Fails at 3 A.M.: A Triage Decision Tree
- Writing a One-Page Incident Runbook for a Small Team
- A Blast Radius Note You Fill In Before the Agent Ships
- A Public Incident Archive: What to Publish, What to Keep Internal
- All of Incident response