CMMC Compliance for Defense Contractors: What to Do First
A practical pillar hub on CMMC compliance for defense contractors: scoping CUI, mapping to NIST 800-171, building the SSP and POA&M, and passing assessment.
Dominion Cyber
Cybersecurity Articles & Insights
Practical security guides, threat deep-dives and hands-on how-tos for defenders, engineers and the security-curious.
Latest articles
88 articles
CMMC Compliance for Defense Contractors: A Working Guide
How CMMC Levels 1-3 map to DFARS clauses, what a Level 2 assessment actually tests, and the scoping, SSP, POA&M, and SPRS work that gets contractors…
CMMC Compliance for Defense Contractors: The Practical Hub
How defense contractors prove CMMC compliance: scope CUI, close the NIST SP 800-171 gaps, record a SPRS score, and pass a C3PAO assessment.
How to Audit Wireless Networks: A Practical Methodology
A phased methodology for auditing wireless networks: scoping, passive survey, capture, configuration and segmentation testing, reporting, and the defender controls that close each gap.
Best WiFi Adapter for Pentesting 2026: Buyer’s Guide
Which monitor-mode and injection adapters are actually worth buying in 2026, how to verify them before you trust them, and what defenders see when you use…
Active Directory Penetration Testing Guide: The Hub
A practical Active Directory penetration testing guide: engagement order, key concepts, a worked path from foothold to Domain Admin, and the defender's view of every step.
SQL Injection Testing Guide: A Practical sqlmap Workflow
A hands-on SQL injection testing workflow with sqlmap: manual confirmation, safe enumeration, result triage, and the fixes defenders should verify.
Burp Suite Tutorial: Your First Intercept to First Finding
A hands-on Burp Suite walkthrough: install it, intercept traffic, replay requests in Repeater, and turn one IDOR into a verified finding.
API Penetration Testing: A Practical Guide and Checklist
A practical, repeatable method for penetration testing REST, GraphQL and gRPC APIs — endpoint inventory, identity matrices, authorization testing, and fixes that hold.
OSINT Tools for Penetration Testing: A Practical Hub
A practical hub for OSINT tooling in penetration testing: which tool fits which reconnaissance phase, how to scope it lawfully, and what defenders should fix.