4d ago · 5 min read · The problem I was solving I needed a fast, repeatable way to audit HTTP security headers on live sites. Not a full penetration test — just a focused check that tells me what's missing, what's weak, an
Join discussionMay 19 · 17 min read · Looking back, it's rarely a surprise when a WordPress site gets hacked. When you do the forensic work, when you actually dig through the logs, the modified files, the injected code, there's almost alw
Join discussion
May 16 · 4 min read · A 40 KB file shouldn’t be able to stress a server. But a zip bomb is exactly the kind of edge case that makes that assumption dangerous. A concept that sounds almost like a meme… until you realize how
Join discussion
May 16 · 8 min read · CSP Headers in Practice: Lessons From a Real Security Audit Pass The first time I deployed a strict Content Security Policy in production, the application broke in three places nobody had ever thought
Join discussion
