Blog

Notes from the field.

Technical writing drawn from real engagements. Not marketing, just the details that matter.

All
Web Security
Compliance
Infrastructure

Web SecuritySeptember 12, 20267 min read

JWT signature verification flaws: up-to-date library, wrong configuration

We found a similar authentication weakness at three different clients. The problem wasn’t the library but the options it was given. What to watch for, and how to close it.

Elif Kaya

featured

ComplianceAugust 28, 20265 min read
KVKK data breach notification: the 72-hour rule and technical readiness
Under KVKK (Turkey’s personal data protection law), breach notification looks like a legal matter, but without logging and detection in place you won’t make the deadline.
Mert Aslan
InfrastructureAugust 14, 20266 min read
Security headers: ten vulnerabilities closed with five lines
HSTS, CSP, X-Frame-Options and more. What each header blocks, which configurations cause trouble in production, and how to roll them out gradually.
Deniz Arslan

Notes from the field.

JWT signature verification flaws: up-to-date library, wrong configuration

KVKK data breach notification: the 72-hour rule and technical readiness

Security headers: ten vulnerabilities closed with five lines