Insights
How we write
The articles on this site are written by the HafezSecure team, each to answer one real security question properly. This page explains how an article is made and what you can expect from it.
- Drafting and review
- Articles are drafted with the help of AI tools, then reviewed and corrected for technical accuracy by our specialists. That is why the company is the author. When one of our specialists has reviewed an article, their name appears under the title as the technical reviewer.
- Sources
- Every technical claim points to its primary source, such as OWASP or NIST standards or a tool vendor’s documentation, with its version or year. We do not publish statistics without a source.
- Examples
- Examples are written to illustrate the point unless the text says they come from a real engagement. Real engagements appear only anonymised, and we never name a client without written permission.
- Updates
- Security standards and tools change. We review and update articles, and the date of the last update is shown at the top of each one.
- Corrections
- If you find a mistake in an article, write to info@hafezsecure.ir. We review the correction and update the article’s date.
- Limits
- Articles are educational. They do not replace a security assessment of your own application or organisation.