/SecurePermissionsModel
Close common security holes in a permissions and roles model — e.g. an app with only admin and user roles.
Backend & APIsadvanced#permissions#rbac
Security
24 commands
/EncryptLoginFlow
Add encryption for sensitive fields in a user login flow — e.g. a login flow storing passwords in plain text.
Backend & APIseasy#login#auth
/SecureRateLimitedService
Close common security holes in a service under load — e.g. a checkout service that falls over on flash sales.
Backend & APIsmedium#load#reliability
/EncryptSecretsManagement
Add encryption for sensitive fields in application secrets management — e.g. a repo with api keys committed to git history.
Backend & APIsadvanced#secrets#config
/SecureApiGateway
Close common security holes in an api gateway — e.g. a gateway routing to five backend services.
Backend & APIsadvanced#gateway#routing
/EncryptPaymentService
Add encryption for sensitive fields in a payment processing service — e.g. a service storing raw card numbers.
Backend & APIseasy#payments#pci
/SecureLoginFlow
Close common security holes in a user login flow — e.g. a login flow storing passwords in plain text.
Backend & APIseasy#login#auth
/EncryptCircuitBreaker
Add encryption for sensitive fields in a circuit-breaker pattern implementation — e.g. a service calling a flaky downstream dependency.
Backend & APIsadvanced#circuitbreaker#resilience
/SecureSecretsManagement
Close common security holes in application secrets management — e.g. a repo with api keys committed to git history.
Backend & APIsadvanced#secrets#config
/EncryptBackgroundJobQueue
Add encryption for sensitive fields in a background job queue — e.g. a job queue that silently drops failed jobs.
Backend & APIseasy#queue#jobs
/SecurePaymentService
Close common security holes in a payment processing service — e.g. a service storing raw card numbers.
Backend & APIseasy#payments#pci
/EncryptJWTHandling
Add encryption for sensitive fields in jwt token handling — e.g. an api issuing jwts with no expiry.
Backend & APIsmedium#jwt#tokens
/SecureCircuitBreaker
Close common security holes in a circuit-breaker pattern implementation — e.g. a service calling a flaky downstream dependency.
Backend & APIsadvanced#circuitbreaker#resilience
/EncryptSessionStore
Add encryption for sensitive fields in a user session store — e.g. a session store with no expiry or invalidation.
Backend & APIseasy#sessions#auth
/SecureBackgroundJobQueue
Close common security holes in a background job queue — e.g. a job queue that silently drops failed jobs.
Backend & APIseasy#queue#jobs
/EncryptPasswordReset
Add encryption for sensitive fields in a password reset flow — e.g. a reset flow using guessable tokens.
Backend & APIsmedium#password#reset
/SecureJWTHandling
Close common security holes in jwt token handling — e.g. an api issuing jwts with no expiry.
Backend & APIsmedium#jwt#tokens
/SecureSessionStore
Close common security holes in a user session store — e.g. a session store with no expiry or invalidation.
Backend & APIseasy#sessions#auth
/EncryptThirdPartyIntegration
Add encryption for sensitive fields in a third-party api integration — e.g. an integration that fails when the vendor api is slow.
Backend & APIsmedium#integration#external
/SecurePasswordReset
Close common security holes in a password reset flow — e.g. a reset flow using guessable tokens.
Backend & APIsmedium#password#reset
/EncryptPermissionsModel
Add encryption for sensitive fields in a permissions and roles model — e.g. an app with only admin and user roles.
Backend & APIsadvanced#permissions#rbac
/EncryptRateLimitedService
Add encryption for sensitive fields in a service under load — e.g. a checkout service that falls over on flash sales.
Backend & APIsmedium#load#reliability
/SecureThirdPartyIntegration
Close common security holes in a third-party api integration — e.g. an integration that fails when the vendor api is slow.
Backend & APIsmedium#integration#external
/EncryptApiGateway
Add encryption for sensitive fields in an api gateway — e.g. a gateway routing to five backend services.
Backend & APIsadvanced#gateway#routing