Security research, case studies, and practical guidance from GK Data LLC.https://gkdata.io/en-ushttps://gkdata.io/articles/external-attack-surface-review-what-an-inventory-misses/https://gkdata.io/articles/external-attack-surface-review-what-an-inventory-misses/Why an external security review must connect reachable assets to ownership, identity, configuration, and realistic attack paths instead of stopping at discovery.Sat, 08 Aug 2026 00:00:00 GMTsmall-business-securityGarrett Kohlruschhttps://gkdata.io/articles/mobile-api-testing-where-trust-crosses-clients/https://gkdata.io/articles/mobile-api-testing-where-trust-crosses-clients/Why mobile application testing must follow identity, data, and authorization decisions from the device into the APIs and services behind it.Sat, 08 Aug 2026 00:00:00 GMTapplication-securityGarrett Kohlruschhttps://gkdata.io/articles/penetration-test-report-what-to-expect/https://gkdata.io/articles/penetration-test-report-what-to-expect/How a useful penetration test report connects scope, evidence, impact, severity, remediation, and retest status for both decision makers and engineers.Sat, 08 Aug 2026 00:00:00 GMTapplication-securityGarrett Kohlruschhttps://gkdata.io/articles/remediation-verification-what-a-retest-confirms/https://gkdata.io/articles/remediation-verification-what-a-retest-confirms/How a focused security retest distinguishes a fixed issue from a blocked proof, partial remediation, adjacent bypass, or changed environment.Sat, 08 Aug 2026 00:00:00 GMTapplication-securityGarrett Kohlruschhttps://gkdata.io/research/nasa-globe-observer-stored-xss/https://gkdata.io/research/nasa-globe-observer-stored-xss/How a mobile observation comment became stored XSS on a public NASA GLOBE web page, with verified impact, root cause, and remediation.Mon, 15 Jun 2026 00:00:00 GMTsecurity-researchGarrett Kohlruschhttps://gkdata.io/research/intigriti-0526-unintended-stored-xss-bypass/https://gkdata.io/research/intigriti-0526-unintended-stored-xss-bypass/An unintended stored XSS path in Intigriti Challenge 0526 involving unsafe innerHTML, observed SCA Shield bypass behavior, and sink-side remediation.Tue, 26 May 2026 00:00:00 GMTsecurity-researchGarrett Kohlruschhttps://gkdata.io/articles/ai-assisted-bug-bounty-manual-validation/https://gkdata.io/articles/ai-assisted-bug-bounty-manual-validation/How GK Data uses custom AI agents for reconnaissance and documentation while manually reproducing and validating every finding.Tue, 28 Apr 2026 00:00:00 GMTapplication-securityGarrett Kohlruschhttps://gkdata.io/articles/ai-voice-scam-prevention-small-business/https://gkdata.io/articles/ai-voice-scam-prevention-small-business/How small businesses can verify urgent voice, email, and video requests before impersonation becomes financial fraud.Tue, 28 Apr 2026 00:00:00 GMTsmall-business-securityGarrett Kohlruschhttps://gkdata.io/articles/api-security-testing-real-attack-paths/https://gkdata.io/articles/api-security-testing-real-attack-paths/How manual API testing finds authorization, authentication, data exposure, workflow abuse, and endpoint inventory gaps.Tue, 28 Apr 2026 00:00:00 GMTapplication-securityGarrett Kohlruschhttps://gkdata.io/articles/password-security-trust-boundaries/https://gkdata.io/articles/password-security-trust-boundaries/Passwords are only one part of account security. Recovery, MFA, sessions, and authorization define the trust boundaries attackers test.Tue, 28 Apr 2026 00:00:00 GMTapplication-securityGarrett Kohlruschhttps://gkdata.io/articles/ransomware-risk-before-encryption/https://gkdata.io/articles/ransomware-risk-before-encryption/Ransomware defense starts with identity, remote access, segmentation, monitoring, and recoverable backups before encryption begins.Tue, 28 Apr 2026 00:00:00 GMTsmall-business-securityGarrett Kohlruschhttps://gkdata.io/articles/small-business-website-security-checklist/https://gkdata.io/articles/small-business-website-security-checklist/A practical small business website security checklist covering ownership, updates, admin access, backups, monitoring, and recovery.Tue, 28 Apr 2026 00:00:00 GMTsmall-business-securityGarrett Kohlruschhttps://gkdata.io/research/blind-stored-xss-text-file-upload/https://gkdata.io/research/blind-stored-xss-text-file-upload/How an accepted text file rendered as HTML became blind stored XSS inside an internal review workflow.Tue, 28 Apr 2026 00:00:00 GMTsecurity-researchGarrett Kohlrusch