Blog
3 posts published
2026
September
The webhook that reads the cloud's metadata
SSRF isn't solved by cleaning up the input, it's solved by controlling the output, in order of effectiveness
26 min read
BOLA is not an authentication bug
Authentication is the door, object-level authorization is the lock on every drawer, most systems lock the door with great care and leave the drawers open
32 min read