Best Practices
16 articles in this category.
Link Nextcloud Files Directly in Six Applications
How the SecTepe platform brings a ☁ Nextcloud button into Vikunja, Redmine, Wiki.js, Moodle, TheHive, and Zammad – same-origin via OAuth2 ForwardAuth, strictly read-only, without an upstream plugin system.
Supply-Chain Hardening: Digest Pinning and 334 Verified Image Pins
How the SecTepe platform makes its supply chain verifiable: 123 of 128 base images pinned by SHA-256, GitHub Actions pinned by commit SHA, 334 image pins reconciled – the concrete answer to the NIS2/ISO 27001 supply-chain question.
CTEM in SecTepe SnapScan: Continuous Attack-Surface Validation & Passive OSINT
How SnapScan closes a Continuous Threat Exposure Management loop with scheduled repeat scans – complemented by a purely passive OSINT footprint engine and scanning of .onion targets over Tor.
Wazuh SIEM, OpenBao Vault, and Coraza WAF: The Defensive Stack in SecTepe.Comm
How Wazuh as SIEM, OpenBao as secrets vault, and Coraza as WAF together form a full defense-in-depth stack – self-hosted and auditable.
Identity & Access Management with Keycloak and an AD Connector
How a central Keycloak identity provider with OIDC, SAML, MFA, and an AD connector unifies hybrid environments into real single sign-on – without vendor lock-in.
Matrix and Jitsi: End-to-End Encrypted Team Communication Without a Cloud Gateway
How Matrix/Synapse with the Element client and Jitsi Meet together replace the Slack/Teams/Zoom stack – federated or isolated, with real end-to-end encryption.
Multi-Domain Mail Security: One Gateway, Many Domains
How a central mail security gateway protects multiple domains in parallel – with individual policies, separate quarantines, and automated Mailcow provisioning.
GRC TCO and ROI: In-House Platform vs. Vanta/Drata Over 3 Years
An honest 3-year math: license costs, internal effort, migration risk, and exit costs of SaaS GRC vs. EU-native in-house platform.
Digital Sovereignty: Why Self-Hosted Cyber Security Is a Strategy Again in 2026
Cloud Act, Schrems II, NIS-2, SaaS cost explosion: why more and more mid-market businesses are pulling their security stacks back to the EU – and into their own house – in 2026.
SecTepe.Comm: The Sovereign Cyber Security Platform for Mid-Market Businesses
What SecTepe.Comm is, which building blocks the platform integrates, and why self-hosted cyber security increasingly pays off in regulated mid-market environments.
White-Label Trust Center: A Compliance Portal Under Your Own Domain
How a white-label trust center under your own domain makes compliance evidence, status pages, and certificates publicly available – as proof of trust for customers, partners, and auditors.
eIDAS-Compliant Digital Signatures with PGP/GPG Integration
How eIDAS-compliant digital signatures combined with PGP/GPG replace the classical print-sign-scan workflow – including audit trail and long-term validation.
Cyber Security: Effective Measures for Better Information Security
A comprehensive overview of the key measures organizations should implement to significantly improve their information security.
Maximum Cybersecurity: Phishing Simulations and Red Team Tests
Phishing simulations and red team tests together form a robust cybersecurity strategy that uncovers both technical and human vulnerabilities.
Pros and Cons of an External CISO: A Guide
External CISOs offer cost savings and objectivity, while internal CISOs provide deeper company knowledge and long-term perspective.
Welcome to the SecTepe Blog
Welcome to the SecTepe Blog for cyber security, information security, and forensics – with practical tips and expert insights.