Your kid will not come to you first. They will try to fix it alone, and that is when it gets worse.

By the time you find out, the part that mattered has already happened, and every article you have ever read on this says “set boundaries” and “keep talking”.

The Safe Screens Playbook is the other thing. 33 pages of what to actually do.

• The first 60 minutes after sextortion, grooming or a leaked image. What to capture before you block. Why paying never ends it. Who to report to in the US, UK, CA, AU or EU.

• Menu-by-menu lockdown for iPhone, Android, PS5, Xbox, Switch, your router, TikTok, Snapchat, Roblox, Discord and the AI chat apps.

• Seven conversation scripts, word for word, including the one sentence parents most often regret saying.

• 30+ apps rated Allow, Supervise or Block.

Not a spy app. No subscription. One PDF you read this weekend, so you already know what to do before they decide whether to tell you.

£27. Instant download. Ages 6-17.

https://whop.com/cyberarmoury/the-safe-screens-playbook-keep-your-kid-safe-online-in-one-weekend/

Just launched: The Safe Screens Playbook

Every parent I know has the same problem. They know their kid’s phone is a risk. They’ve read a dozen articles about it. And they still don’t know which setting to change.

Because the advice is always the same four things — set boundaries, stay involved, use parental controls, keep talking. Nobody ever says which toggle, on which screen. Nobody tells you what to actually say at 11pm when your 14-year-old comes to you because a stranger has a photo of them.

So I wrote the specific version.

33 pages. No theory.

— What actually goes wrong at 6-9, 10-12, 13-15 and 16+

— Menu-by-menu lockdown for iPhone, Android, Windows, PS5, Xbox, Switch and your router

— YouTube, TikTok, Instagram, Snapchat, Roblox, Discord and AI chat apps, one by one

— The seven conversations every parent eventually has, written word-for-word

— A printable red-flag checklist

— A first-60-minutes emergency protocol for sextortion, grooming or a leaked image

— A family tech agreement in three age tiers, with signature lines

— 30+ apps rated Allow / Supervise / Block

— A 30-day rollout so nobody gets ambushed

Three things it refuses to do:

It won’t tell you to spy. Covert monitoring of a teenager gets you one outcome — they get better at hiding and they stop telling you things.

It won’t pretend filters are enough. Page 2 says plainly where the technical stuff stops working.

It won’t make up statistics to scare you into buying. Everything in it is something you can act on.

Two hours this weekend and your house is sorted. Or do the 30-day version, one small thing a day, and nobody argues.

Instant PDF download. Print-ready. Ages 6-17.

Grab it here: https://whop.com/cyberarmoury/the-safe-screens-playbook-keep-your-kid-safe-online-in-one-weekend/

After years of pen testing and bug bounty hunting, if someone asked me "what should I learn to find first?" — here's my list, in order:

1. IDOR (Insecure Direct Object Reference)

Change a number in a URL, access someone else's data. It's embarrassingly simple and still everywhere. Most beginner-friendly bug class by far.

2. Reflected XSS

Inject a script tag into a search parameter. Not always high severity, but it teaches you how user input flows through an application — which is the foundation of everything else.

3. Broken Access Control

Can a regular user hit admin endpoints? Can you access features you shouldn't? Most apps mess this up. Test every role boundary.

4. SQL Injection (classic)

Yes, it still exists. Especially in older apps, internal tools, and anything with custom search/filter functionality. Learn to spot the error messages.

5. Authentication Bypass

Password reset flows, session handling, token leakage. There's almost always something wrong with how apps handle auth. Learn to think like someone trying to get in without credentials.

The pattern: start with logic bugs (IDOR, access control) before injection bugs (XSS, SQLi). Logic bugs require less tooling and more critical thinking — which is what actually makes a good hacker.

If you want a structured 90-day path to learn all of this and build a real portfolio, check out Modern Hacker Academy.