The HELX blog

Research, analysis & field notes

Our guides and analyses on offensive and defensive security, written by the HELX team.

All Advisory Pentest Web OWASP Guide Redteam Forensic

OWASP Top 10: 20 years of evolving web threats, cybersecurity visual with icons on a blue and purple digital background

Twenty Years of the OWASP Top 10: How Web Threats Evolved from 2003 to 2025

A look back at the history of the OWASP Top 10 to understand how web vulnerabilities have changed over twenty years, and to identify the key factors that will shape the security of tomorrow.

Simon Juhel·August 26, 2025

Illustration of cybersecurity threats split between external hacker attacks and web vulnerabilities such as XSS. On the left, a hacker with a firewall and a globe represents external attacks. On the right, a stylized head labeled XSS represents web threats such as cross-site scripting.

GuidePentest•4 min

Web application pentest or external pentest: how to choose the right approach for your business

Should you go for an external penetration test or an application pentest? This guide helps you make the right call based on your objectives, your attack surface and your constraints. Learn the differences, the typical use cases, the decision criteria and how to avoid spending your budget on the wrong test.

Simon Juhel·July 23, 2025

Tell us about your project.

Let us talk through your needs and expectations and build the right service for you.