From the 2MNY engineering team

#headers

All security articles tagged "headers" — vulnerability deep-dives, scanner guides and hardening checklists from the 2MNY team.

← All articles

All AI & LLM Security 1 API Security 2 Attack Surface 4 DNS Security 3 HTTP Headers 2 Monitoring 3 OWASP 4 Product Updates 6 Small Business 2 SSL/TLS 1 Supply Chain Security 2 Threat Intelligence 4 Website Security 12 WordPress Security 1

HTTP Headers

Cookie Security Explained: HttpOnly, Secure, and SameSite

Three attributes on the Set-Cookie header decide whether a stolen cookie means a stolen account. Here is what HttpOnly, Secure, and SameSite actually protect against, how attackers bypass weak cookie configs, and how to audit your site in minutes.

Test Admin • Oct 20, 2026 • 7 min read

Website Security

The 30-Point Website Security Checklist (Launch-Ready in One Pass)

Thirty checks, one pass, zero fluff. This launch-ready checklist covers TLS, security headers, cookies, admin exposure, backups, DNS and email — each with the exact verification method.

Test Admin • Oct 17, 2026 • 9 min read

Put the reading to work

Run a free scan and see which of the issues we write about are live on your website right now.

Start Free Scan