Security Engineering for Backend Engineers — Threats, Auth, Crypto and Shipping Securely
Most of us learned to build features first and think about security later…
Tag
#owasp
6 posts
API Security
Modern backends are mostly APIs — JSON over HTTP, consumed by web apps, mobile…
Securing AI Agents — Prompt Injection, Least Privilege, and Sandboxing
In security reviews for agents, I now start with one question: “If this agent…
XSS and CSRF Explained — The Complete Guide with Real Attack Examples and Defenses
XSS and CSRF have been in the OWASP Top 10 for over a decade. They’re among the…
OWASP Top 10 (2021) — Every Vulnerability Explained with Code
The OWASP Top 10 is the industry standard for web application security risks. If…
HTTP Cookies Security — Everything Developers Get Wrong
Cookies are the single most important mechanism for web authentication. Every…