4 articles published

How we expanded our web application firewall from 15 basic signatures to 34 detection rules across 9 OWASP categories, with multi-layer URL decoding, anomaly scoring, IP reputation tracking, and honeypot traps that instantly ban scanners.

How we migrated our WebAuthn Relying Party ID from control.boottify.com to the apex domain boottify.com, enabling biometric credentials to work across all subdomains with a dual RP ID verification strategy.

A comprehensive quality audit of our 275K-line codebase: generating loading skeletons for every page, adding error boundaries across route groups, migrating 3,796 hardcoded colors to CSS variables, and replacing console.log with structured logging.

How we implemented a 5-tier sliding window rate limiter across all 23 authentication endpoints, with IP-based tracking, standard response headers, and a custom ApiError.tooManyRequests() factory.