Blog
Practical notes on website security for site owners and developers: what a finding means, why it matters and how to fix it. Each article is based on a check ZNIMOK actually runs.
Articles
-
PHP2Shell: how to check which PHP version your site runs
PHP2Shell (CVE-2026-109618, CVE-2026-109619): which PHP releases fix it, how to find the version your site runs, and what a version match proves.
-
What is DMARC? SPF, DKIM and DMARC in plain words
SPF, DKIM and DMARC in plain words: what each record does, why p=none only monitors, why scanners guess DKIM selectors, and what Gmail and Yahoo require.
-
Website security checklist for small business owners
A practical website security checklist for small business owners: updates, HTTPS and HSTS, admin access, backups, email records, headers and security.txt.
-
Passive and active website scanning: what is the difference
What a passive external check can and cannot see, what active scanning adds, why ZNIMOK runs it only on verified sites, and how to contact us about checks.
-
Common WordPress exposures and how to fix them
Typical publicly visible WordPress issues: xmlrpc.php, user enumeration, version leaks, debug.log, exposed backups and old plugins, with a fix for each.
Check your site
Free, no sign-up. Read-only checks, results in a few minutes.
Only check sites you own or are allowed to test. How our scanner works