security
Practical resources about security for software engineers.
105 results
Protecting Applications and Data
Security is not a checkbox — it is a mindset. From input validation and XSS prevention to secrets management and compliance frameworks, every layer of the stack needs defensive design.
Browse recipes for implementing Content Security Policy, encrypting data at rest and in transit, managing API keys, and conducting dependency audits. Guides also cover OWASP Top 10 mitigations and secure coding practices by language.
Multi-Tenant Data Isolation Pattern
Isolate tenant data in shared infrastructure using row-level security, schema-per-tenant, or...
Federated Identity Pattern
Delegate authentication to external identity providers. A pattern for integrating OAuth2, OIDC,...
Voucher Pattern
Validate claims and delegate access using signed vouchers without exposing sensitive data. A...
Gatekeeper Pattern
Place a validation and security boundary at the edge of a system to inspect, sanitize, and...
Access Control Review Template
A template for auditing user access rights, verifying least privilege, and documenting access...
CI/CD Pipeline Security Template
A template for securing build and deployment pipelines against credential leaks, tampering, supply...
Compliance Gap Analysis Template
A template for mapping current security controls to compliance frameworks like SOC 2, ISO 27001,...
Container Security Baseline Template
A baseline template for hardening container images, runtimes, and orchestration configurations...
Data Breach Response Playbook
A step-by-step playbook for responding to security incidents involving unauthorized data access,...
Data Retention Policy Template
A template to define how long data is kept, when it is archived, and when it must be deleted for...
Dependency Vulnerability Report Template
A template for documenting security findings in dependencies, including severity, impact, and...
Disaster Recovery Test Plan
A template for planning and executing disaster recovery tests including failover validation, data...
Encryption Key Lifecycle Template
A template for managing the creation, distribution, rotation, and destruction of encryption keys...
Endpoint Security Checklist Template
A checklist template for hardening laptops, workstations, and mobile devices that access corporate...
Network Segmentation Policy Template
A template for documenting network security zones, segmentation rules, and traffic controls between...
Penetration Test Scope Template
A template for defining the boundaries, targets, rules, and deliverables for a penetration testing...
RBAC Policy Template
A template for defining role-based access control policies, including roles, permissions,...
Secret Rotation Schedule Template
A template for tracking and scheduling the rotation of API keys, passwords, certificates, and other...
SSL Certificate Management Template
A template for tracking TLS/SSL certificate inventory, renewals, deployments, and expiration risks...
Third-Party Vendor Assessment Template
A structured template for evaluating the security, compliance, and operational posture of...
No results found.