Kalenfy blog · section
Guides & checklists
All our guides & checklists guides
Guides & checklists
27 June 2026
Vulnerability Scan vs Penetration Test
A vulnerability scan is automated and broad; a penetration test is manual and deep. Here's the difference, when you need each, and how they work together to secure your site.
Guides & checklists
27 June 2026
What Is SQL Injection? (And How to Prevent It)
SQL injection lets attackers run their own database commands through your website's inputs — stealing or destroying data. Here's how it works and how to prevent it, in plain English.
Guides & checklists
27 June 2026
What Is Email Encryption? (TLS vs End-to-End)
Email isn't private by default. Here's how email encryption works — transport (TLS) vs end-to-end (PGP/S-MIME) — what each protects, and what most businesses actually need.
Guides & checklists
27 June 2026
What Is Two-Factor Authentication (2FA)?
Two-factor authentication (2FA) adds a second step beyond your password, so a stolen password isn't enough. Here's what 2FA is, the types ranked by safety, and the accounts to protect first.
Guides & checklists
27 June 2026
How to Spot a Phishing Email (Red Flags Checklist)
Phishing emails trick you into clicking, paying or handing over passwords. Here's a plain-English checklist of the red flags to look for — and exactly what to do when you see one.
Guides & checklists
27 June 2026
How to Warm Up a New Email Domain
A brand-new sending domain has no reputation, so mailbox providers distrust it. Here's how to warm up a new email domain — ramp volume, build engagement — so your mail reaches the inbox.
Guides & checklists
27 June 2026
What Is Business Email Compromise (BEC)?
Business email compromise (BEC) — CEO fraud and fake-invoice scams — costs companies billions. Here's how BEC attacks work and the layered defences that stop them. Free domain check.
Guides & checklists
27 June 2026
What Is an SSL Certificate? (And Do You Need One?)
An SSL/TLS certificate is what puts the padlock and HTTPS on your site, encrypting traffic and proving your identity. Here's what it is, the types, how to get one free, and common errors.
Guides & checklists
27 June 2026
What Is CSRF (Cross-Site Request Forgery)?
CSRF tricks a logged-in user's browser into making a request they didn't intend — changing a password or making a payment. Here's how it works and how to prevent it, in plain English.
Guides & checklists
27 June 2026
What Is Cross-Site Scripting (XSS)?
Cross-site scripting (XSS) lets attackers run malicious scripts on your site, stealing data from your visitors. Here's how it works and how to prevent it, in plain English.