Blogs
API Security Best Practices for Modern Applications
Comprehensive guide to securing APIs and GraphQL endpoints based on real-world experience at Dream11 and Levo.ai.
1/15/202412 min read
Mobile Application Security: iOS & Android Testing
Essential techniques for securing mobile applications, from static analysis to runtime testing with tools like Frida and mobSF.
1/10/202410 min read
Bug Bounty Hunting: Strategies That Actually Work
Proven methodologies and techniques from finding 30+ vulnerabilities in companies like Dell, Ford, LinkedIn, and Zerodha.
1/5/202415 min read
Cloud Security: Securing AWS and GCP Infrastructure
Practical approaches to cloud security, including WAF configuration, Cloud Armor, and Infrastructure as Code security.
1/1/202414 min read
Integrating SAST Tools into CI/CD Pipelines
How to effectively integrate static application security testing into your development workflow for continuous security.
12/20/202311 min read
Building Effective Burp Suite Extensions
Guide to creating custom Burp Suite extensions for enhanced security testing, including lessons from building Re-inspector.
12/15/20239 min read