Editorial policy

Each guide answers one question a real person asks, such as “do I need a VPN” or “what do I do after a data breach”. It gives the short answer first, then the steps in the order to take them, with free options before paid ones.

We rely on, in roughly this order:

• Government guidance: the FTC, IdentityTheft.gov, the FBI and IC3, CISA, the IRS and the CFPB.
• Independent evidence: published security audits, and results from independent antivirus labs such as AV-TEST and AV-Comparatives.
• Vendor documentation, attributed to the vendor (“according to the company”).

We do not run lab tests of our own and never claim to. Where evidence is thin or disputed, the guide says so.

Affiliate relationships are described on how we make money. They never decide a recommendation, and no company reviews a guide before publication.

Every guide shows the date it was last reviewed. When a product changes, a law changes or a reader points out an error, we update the guide and the date. Send corrections through the contact form.

General information for individuals and small businesses. It is not legal, financial or professional incident-response advice. If you are dealing with a serious breach at a business, or a threat to your physical safety, contact a professional or law enforcement.