Devblogs

How We Fixed 2k+ Security Issues

ABAC on SpiceDB: Enabling Netflix’s Complex Identity Types

Cybersecurity Incident Simulation @ Uber

Identifying vulnerabilities in GitHub Actions & AWS OIDC Configurations

Supporting Passkeys in Shop's Authentication Flows

Migrating from Role to Attribute-based Access Control

Securing GitOps pipelines

The New York Times

Making Reporting Effortless, Especially for Security Researchers

Employee-facing Mutual TLS

Automatically Rotating GitHub Tokens (So You Don’t Have To)

Zero trust with Kafka

Machine Learning for Fraud Detection in Streaming Services

Spotify’s Vulnerability Management Platform

How to Categorize and Prevent Risks of Sensitive Links in URLScan

How we built the Tinder API Gateway

Hubble: Our Tool for Encapsulating and Extending Security Tools

Finding Relationships Between Ruby’s Top 100 Packages and Their Dependencies

How We Maintain Security Testing within the Software Development Life Cycle

Hacking Around Safari's 7-day Cookie Limit

Airbnb’s Approach to Access Management at Scale