The ShieldIngress Blog

Detailed guides on web security fundamentals, and how to get the most out of the free tools on this site.

Web Security

Your SSL Cert Works in Chrome. Here's Why It's Broken Everywhere Else.

Browsers quietly fix broken chains, missing intermediates, bad ordering, and absent OCSP stapling. curl, mobile clients, and corporate proxies don't -- here's how to check what your server actually sends.

7 min readRead article →
 Free Tools Guide

How to Read Your SSL Certificate Checker Results

A field-by-field guide to what our free SSL Certificate Checker reports -- expiry, issuer, trust, protocol support, and the certificate chain -- and what to actually do about each one.

9 min readRead guide →
 Free Tools Guide

Reading Your Security Headers Scan: What Each Header Actually Protects Against

A plain-language walkthrough of every header our free Security Headers Checker looks for -- what attack each one stops, what a missing one exposes, and where to start.

10 min readRead guide →
 Free Tools Guide

Writing a WAF Rule with the Rule Builder: What Each Field Actually Means

A field-by-field guide to our free Coraza/ModSecurity WAF Rule Builder -- variables, operators, exemptions, and the mistakes that break a hand-written SecRule.

11 min readRead guide →