Partilhamos o que pensamos e aprendemos.

SAAS & ARCHITECTURE

How is customer data separated in multi-tenant SaaS architecture?

In systems serving multiple customers, what matters as much as scale is that one customer’s data is never visible to another.

03 October 202610 min read

Ler o artigo

CYBER SECURITY

What does Zero Trust mean for small teams?

Zero Trust is not a product label; it is a way of deciding that gives users, devices and services only as much trust as they need.

02 October 20268 min read

Ler o artigo

CURRENT / SUPPLY CHAIN

How does npm staged publishing strengthen the software supply chain?

Between publishing a package and everyone being able to install it, human approval and a more visible process are added.

02 October 20268 min read

Ler o artigo

CYBER SECURITY

Threat modeling: seeing security risks before the project starts

Security testing is not a late check; it is a way of thinking that makes data flows and abuse possibilities visible at design time.

02 October 20269 min read

Ler o artigo

API & INTEGRATION

10 checkpoints for API security from day one

APIs are the invisible doors of a product; identity, authorisation, data validation and rate limits must be considered together.

01 October 20269 min read

Ler o artigo

CURRENT / SUPPLY CHAIN

What changes when npm packages are scanned before publishing?

A few minutes of security checks enter between publishing and being installable; automations must account for it.

01 October 20266 min read

Ler o artigo

CYBER SECURITY

Web application security checklist with OWASP ASVS 5

Turning secure application development from an abstract goal into verifiable technical requirements.

01 October 202610 min read

Ler o artigo

INFRASTRUCTURE

Taking a backup is one thing, being able to restore is another

A backup existing is not enough; you must know how old it is, where it lives, and whether it truly restores.

30 September 20267 min read

Ler o artigo

CURRENT / INFRASTRUCTURE

As DDoS attacks grow, what should small systems protect?

DDoS defence is not only blocking a large traffic number; it is protecting DNS, the application, the origin and cost limits together.

30 September 20268 min read

Ler o artigo

SOFTWARE SUPPLY CHAIN

How to build safer CI/CD with SBOM and SLSA

Knowing which dependencies your software consists of and which process it went through to be published is the new baseline for security.

30 September 20269 min read

Ler o artigo