- Home
- Knowledge Center
- Cyber A to Z
Understand it all, from A to Z
21 chapters to understand cybersecurity without jargon, from the basics to the law. Each chapter is presented by Belinda or Nestor and ends with three questions to check what you have learned.
The basics
What is cybersecurity?
Confidentiality, integrity, availability, risk and defence in depth: the foundations of cybersecurity explained simply, backed by official 2025 figures.
Belinda 10 min read Free access Read
2Who attacks, and why?
Cybercriminals, access brokers, hacktivists, states, insiders and opportunists: who the attackers are, what they want and how to protect yourself.
Nestor 10 min read Free account Read
3Anatomy of an attack
The Cyber Kill Chain, MITRE ATT&CK and a ransomware attack told step by step: understand each stage and learn where it could be stopped.
Nestor 11 min read Free account Read
Everyday threats
Phishing, social engineering and physical intrusion
Email, text, phone call, QR code, fake bank details, deepfake or fake courier: how to spot social engineering, react, report it and protect your organisation.
Nestor 11 min read Free account Read
5Passwords, MFA and passkeys
Why passwords fail, what France’s CNIL and ANSSI recommend, password managers, MFA and passkeys: a practical action plan to protect a small business’s accounts.
Belinda 11 min read Free account Read
6Ransomware: before, during and after
How a ransomware attack unfolds, how to prepare, the first things to do, who to alert within 72 hours in France, and how to recover your business safely.
Belinda 10 min read Free account Read
Protecting your systems
Networks, firewalls and Zero Trust
What your network exposes to the internet, and how firewalls, segmentation, VPN, ZTNA and Zero Trust protect it: plain explanations and an action plan.
Belinda 9 min read Free account Read
8Encryption without the maths
Symmetric and asymmetric encryption, hashing, signatures, TLS, certificates, HTTPS and HSTS made simple, plus how to read a TLS grade from A+ to F.
Belinda 9 min read Free account Read
9Post-quantum: should you worry?
Quantum computers, Shor’s algorithm, “harvest now, decrypt later”, the NIST standards and the European timeline: what to do right now.
Belinda 9 min read Free account Read
10Cloud and SaaS: who protects what?
Shared responsibility, misconfigurations, identities and MFA, logging and sovereignty: how to secure your use of cloud and SaaS, with real cases.
Nestor 10 min read Free account Read
11Web application security
The OWASP Top 10 2025 told through real cases, security headers, what a WAF can and cannot do, DAST and penetration testing, and the OWASP ASVS.
Nestor 10 min read Free account Read
12Code and the software supply chain
Open source dependencies, CVEs, SCA and SAST, SBOMs, secrets, supply chain attacks, SLSA, Sigstore and the Cyber Resilience Act, explained simply.
Nestor 11 min read Free account Read
Test, detect, respond
Penetration testing from A to Z
Scans, pentests, red teams and bug bounties: how penetration testing works, its legal framework, steps, reports, costs and France’s PASSI scheme.
Nestor 11 min read Free account Read
14Monitoring and detection
Logs, SIEM, EDR, SOC, MITRE ATT&CK: why attacks go unnoticed for days on end, and how an SME can organise its threat detection in practice.
Belinda 9 min read Free account Read
15Handling an incident
First steps, crisis cell, evidence, communication, GDPR, NIS2, DORA and CRA notifications, and who to call in France: handling a cyber incident.
Belinda 9 min read Free account Read
Law and governance
Cyber law in France and Europe
GDPR, NIS2, DORA, the Cyber Resilience Act and the AI Act: who is covered, what to do, which deadlines and penalties apply, as of 2 October 2026.
Belinda 12 min read Free account Read
17Ethical hacking: what the law allows
Unauthorised access, hacking tools, written authorisation, bug bounties, reporting to ANSSI: what French law really allows a security researcher to do.
Nestor 11 min read Free account Read
18Governing security
Senior management, CISO, DPO, security policy, EBIOS RM risk analysis, ISO 27001, budget, KPIs, staff awareness and cyber insurance: steering security.
Belinda 10 min read Free account Read
19Securing an SME in 12 measures
Twelve concrete, prioritised measures to protect an SME: MFA, backups, updates, email, cyber insurance, with indicative costs and French public support schemes.
Nestor 12 min read Free account Read
Tomorrow
AI and cybersecurity
Deepfakes, AI-boosted phishing, prompt injection, the AI Act: how AI changes attack and defence, and the usage policy your organisation can adopt on Monday.
Belinda 11 min read Free account Read
21Building a career in cybersecurity
SOC analyst, penetration tester, CISO, GRC, forensics, DevSecOps: cyber jobs, the skills employers want, training routes and how to start out legally.
Nestor 10 min read Free account Read
So how does your system measure up?
Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.
Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.