Security

Protect your applications with security guides on authentication, authorisation, and common vulnerabilities, with practical defences at every layer.

A long wall of sealed panels with particles pooling behind each one, and a single open door with a bright stream flowing through

Server-Side Development, Web Development, Backend, Security, API Design 7 min read

Server-Side Security: Authorisation Is the Weak Point

Injection grabs attention, and authorisation causes breaches. Broken access control has been the top web application risk for four consecutive editions, and it's found in essentially every application tested.

Abstract visualisation of a protective barrier deflecting incoming threats

Front-End Development, Web Development, Security, JavaScript 8 min read

Front-End Security: What Actually Protects Your Users

Most front-end security advice is really server advice wearing a different hat. These practices live in the browser, where your code actually runs.