Best Practices
16 articles in this category.
Link Nextcloud Files Directly in Six Applications
The SecTepe platform adds a ☁ Nextcloud button to Vikunja, Redmine, Wiki.js, Moodle, TheHive, and Zammad. It works same-origin via OAuth2 ForwardAuth and is strictly read-only. No upstream plugin system is needed.
Supply-Chain Hardening: Digest Pinning and 334 Verified Image Pins
The SecTepe platform makes its supply chain verifiable. 123 of 128 base images are pinned by SHA-256 and GitHub Actions by commit SHA. All 334 image pins are reconciled, the concrete answer to the NIS2/ISO 27001 supply-chain question.
CTEM in SecTepe SnapScan: Continuous Attack-Surface Validation & Passive OSINT
SnapScan closes a Continuous Threat Exposure Management loop with scheduled repeat scans. A purely passive OSINT footprint engine complements it. It can also scan .onion targets over Tor.
Wazuh SIEM, OpenBao Vault, and Coraza WAF: The Defensive Stack in SecTepe.Comm
Wazuh as SIEM, OpenBao as secrets vault, and Coraza as WAF together form a full defense-in-depth stack. It is self-hosted and auditable.
Identity & Access Management with Keycloak and an AD Connector
A central Keycloak identity provider with OIDC, SAML, MFA, and an AD connector unifies hybrid environments. The result is real single sign-on without vendor lock-in.
Matrix and Jitsi: End-to-End Encrypted Team Communication Without a Cloud Gateway
Matrix/Synapse with the Element client and Jitsi Meet together replace the Slack/Teams/Zoom stack. The setup runs federated or isolated, with real end-to-end encryption.
Multi-Domain Mail Security: One Gateway, Many Domains
A central mail security gateway protects multiple domains in parallel. Each domain gets individual policies and a separate quarantine. Mailcow provisioning is automated.
GRC TCO and ROI: In-House Platform vs. Vanta/Drata Over 3 Years
An honest 3-year math for SaaS GRC versus an EU-native in-house platform. We compare license costs, internal effort, migration risk, and exit costs.
Digital Sovereignty: Why Self-Hosted Cyber Security Is a Strategy Again in 2026
Cloud Act, Schrems II, NIS-2, and the SaaS cost explosion are driving a shift in 2026. More and more mid-market businesses are pulling their security stacks back to the EU and in-house. Here is why.
SecTepe.Comm: The Sovereign Cyber Security Platform for Mid-Market Businesses
Learn what SecTepe.Comm is and which building blocks the platform integrates. We also explain why self-hosted cyber security increasingly pays off in regulated mid-market environments.
White-Label Trust Center: A Compliance Portal Under Your Own Domain
A white-label trust center under your own domain makes compliance evidence, status pages, and certificates public. It serves as proof of trust for customers, partners, and auditors.
eIDAS-Compliant Digital Signatures with PGP/GPG Integration
eIDAS-compliant digital signatures combined with PGP/GPG replace the classical print-sign-scan workflow. An audit trail and long-term validation are included.
Cyber Security: Effective Measures for Better Information Security
This overview covers the key measures organizations should implement to significantly improve their information security.
Maximum Cybersecurity: Phishing Simulations and Red Team Tests
Phishing simulations and red team tests together form a solid cybersecurity strategy. They uncover both technical and human vulnerabilities.
Pros and Cons of an External CISO: A Guide
External CISOs offer cost savings and objectivity. Internal CISOs bring deeper company knowledge and a long-term perspective.
Welcome to the SecTepe Blog
Welcome to the SecTepe Blog for cyber security, information security, and forensics. Here you get practical tips and expert insights.