Practical security for
the tools you already use.
Step-by-step implementation guides. Each one is framework-specific, copy-paste ready, and written by engineers for engineers.
Available now
Secure Next.js
Security headers, CSP configuration, cookie hardening, and CORS setup for Next.js applications.
Secure Express.js
Helmet.js setup, rate limiting, input validation, and common middleware security patterns for Express.
Secure GitHub Actions
Pinning actions by commit hash, restricting permissions, secret management, and supply chain attack prevention.
Secure Docker
Minimal base images, non-root users, read-only filesystems, and scanning images in CI.
Coming soon
Secure FastAPI
Authentication patterns, CORS configuration, input validation with Pydantic, and rate limiting.
Secure Supabase
Row-level security, service role key hygiene, storage bucket permissions, and auth configuration.
Secure Firebase
Firestore security rules, Firebase Auth hardening, storage rules, and API key restrictions.
Secure Kubernetes
Pod security standards, network policies, RBAC, secrets management, and admission controllers.