security
Practical resources about security for software engineers.
109 results
Protecting Applications and Data
Security is not a checkbox — it is a mindset. From input validation and XSS prevention to secrets management and compliance frameworks, every layer of the stack needs defensive design.
Browse recipes for implementing Content Security Policy, encrypting data at rest and in transit, managing API keys, and conducting dependency audits. Guides also cover OWASP Top 10 mitigations and secure coding practices by language.
Prevent Cross-Site Scripting (XSS)
How to sanitize user input, escape output, and use Content Security Policy to prevent XSS attacks...
LLM Guardrails Pattern
Validate LLM inputs and outputs with rules, classifiers, and content filters. Prevent prompt...
Multi-Tenant Data Isolation Pattern
Isolate tenant data in shared infrastructure using row-level security, schema-per-tenant, or...
Federated Identity Pattern
Delegate authentication to external identity providers. A pattern for integrating OAuth2, OIDC,...
Voucher Pattern
Validate claims and delegate access using signed vouchers without exposing sensitive data. A...
Gatekeeper Pattern: Centralized Edge Security
Centralize authentication, rate limiting, and input sanitization at the system edge. Gatekeeper...
Access Control Review Template
A template for auditing user access rights, verifying least privilege, and documenting access...
CI/CD Pipeline Security Template
A template for securing build and deployment pipelines against credential leaks, tampering, supply...
Compliance Gap Analysis Template
A template for mapping current security controls to compliance frameworks like SOC 2, ISO 27001,...
Container Security Baseline Template
A baseline template for hardening container images, runtimes, and orchestration configurations...
Data Breach Response Playbook
A step-by-step playbook for responding to security incidents involving unauthorized data access,...
Data Retention Policy Template
A template to define how long data is kept, when it is archived, and when it must be deleted for...
Dependency Vulnerability Report Template
A template for documenting security findings in dependencies, including severity, impact, and...
Disaster Recovery Test Plan
A template for planning and executing disaster recovery tests including failover validation, data...
Encryption Key Lifecycle Template
A template for managing the creation, distribution, rotation, and destruction of encryption keys...
Endpoint Security Checklist Template
A checklist template for hardening laptops, workstations, and mobile devices that access corporate...
Network Segmentation Policy Template
A template for documenting network security zones, segmentation rules, and traffic controls between...
Penetration Test Scope Template
A template for defining the boundaries, targets, rules, and deliverables for a penetration testing...
RBAC Policy Template
A template for defining role-based access control policies, including roles, permissions,...
Secret Rotation Schedule Template
A template for tracking and scheduling the rotation of API keys, passwords, certificates, and other...
No results found.