Compass Security Blog - Offensive Defense

While the full implementation of the Cyber Resilience Act (CRA) won’t take effect until December 2027, another critical milestone is already…

Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I…

Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner…

Automation platforms such as n8n are often introduced as productivity tools: connect a few systems, automate repetitive work, maybe add some AI.…

In this second part, we demonstrate how a Cyber Resilience Act (CRA) assessment is performed in practice. Using a low-cost IP camera as an example, we…