Obsidian RidgeCategory
Plain-English hardening for the tools small businesses actually run. Workspace, Microsoft 365, connected SaaS, shared logins, offboarding.
Most small businesses do not get hit by exotic malware. They get hit by settings that were never turned on, accounts that were never cleaned up, and apps that were approved once and forgotten. A focused review can identify practical fixes using tools you already have. The scope and timing depend on the environment.
Filter and sort
Articles
Review AI browser access and actions at a small firm: Comet’s controls, what OpenAI says replaced the retired Atlas, and an approval checklist.
A permission-cleanup and rollout checklist for firms of 50 to 500 people preparing for Microsoft 365 Copilot, grounded in Microsoft documentation.
What an enterprise browser is, how download blocking really works, where the file goes instead, and what it does not cover on an iPhone or iPad.
Review what AI agents can read, change and send. Obsidian Ridge explains permissions, approval checks and how to start with an inventory.
Huntress and Cato report fake AI download campaigns. Obsidian Ridge explains the lures, safer installation checks and the limits of trusted domains.
Find the AI apps, extensions and agents staff use. Obsidian Ridge explains what to check and how its free assessment reviews access and risky actions.
Check AI-generated Terminal commands before running them. Obsidian Ridge explains poisoned shared chats, safe checks and what to do after a mistake.
Browser security figures for 2026 with the analyst, year, sample size and who paid for each one, plus a plain warning about where most of them come from.
A part-time bookkeeper on a home laptop does not need a VPN. What four companies report after cutting VPN use, and what a browser actually controls.
Two banks published their enterprise browser results: a spear-phish stopped at the password box, setup in about two days, and far less deployment effort.
FAQ
Small business owners, office managers, and the accidental IT lead in a ten-to-fifty-person shop who need a practical read on what to configure, what to review, and what to safely ignore at that size.
No. Every guide is written so a non-specialist owner can run the review with an admin login and a spare hour, and knows explicitly when a step genuinely needs outside help.
Compliance is written around regulator-driven programs (HIPAA, ABA, IRS Publication 4557, GLBA). Small Business Security is written around the day-to-day admin console and SaaS work that keeps a small business safe whether a regulator ever shows up or not.