Practical Security, Plain Language
Short guides written by Mohammed Al-Faleh, a Riyadh-based penetration tester — for business owners and technical teams, with no jargon for the sake of it.
Choosing an assessment
Penetration Test vs Vulnerability Assessment: Which Do You Actually Need?
Vulnerability assessments find weaknesses; penetration tests prove what they mean. How to pick — and what each costs.
Read → Common vulnerabilityIDOR Explained: The Vulnerability That Leaks One Customer’s Data to Another
Predictable IDs, one missing check, and a data leak. What IDOR/BOLA is, why it's everywhere, and how it's fixed.
Read → Getting the mostHow to Read a Penetration Test Report (Without a Security Team)
What's inside a real report, how to work through it, and what good looks like — including where to start fixing.
Read →