(Tag)
Web product security: vulnerabilities, authentication, personal data and what to check before launch.
5 min read
The risks LLM applications face, why prompt injection cannot simply be forbidden and how to protect a product architecturally: least privilege, action checks and human confirmation.
5 min read
Where to store user files, how to accept uploads safely, how to serve public and private files, handle large uploads and keep storage costs down.
5 min read
How sessions, JWTs and OAuth differ, when to choose each, how to store tokens safely and which authentication mistakes are most common.
5 min read
How fintech development differs: double-entry money accounting, an immutable ledger, PCI DSS and regulatory requirements, resilience and change control.
6 min read
Any form with contact details makes your company a data controller. We cover GDPR, the 2025 changes to Russia's 152-FZ and a website compliance checklist.
6 min read
The ten main classes of web application vulnerabilities in the OWASP 2025 edition, with examples, questions for your vendor and a minimum set of process checks.