Security at a glance
Every system we put on the internet is probed by automated scanners within days. This
API security
The controls every API we build must have: sign-in, access checks, rate limits, input
Web security
The controls for websites, web apps and admin panels: headers, cookies, proxies, image
Mobile app security
How to treat mobile and desktop apps: as untrusted clients. What attestation gives us,
Infrastructure security
The account, network and server controls under every product: people's access,
Attacks we faced
4 items
Security checklist
The checklist every project fills in before launch and reviews every quarter. Copy it to