SaaS & multi-tenant security
Threat briefs and remediation for B2B SaaS: tenant isolation, API access control, IDOR/BOLA, and data exposure risks. Tied to real engagements and OWASP guidance.
Threat Research Series
Curated multi-post series on threat areas and defensive guidance. Each series groups blog posts and case-study themes for faster scanning and deeper reading.
Series
Cloud IAM & privilege escalation
AWS/GCP IAM misuse, permission boundaries, and how to find and fix privilege escalation paths. Aligned with case studies on IAM and S3 exposure.
API abuse & OWASP API Top 10
Testing and hardening APIs: BOLA, auth flaws, injection, and rate limiting for SaaS and fintech. Links to API security testing service and case studies.