Concept Guides
Security
The mistakes that make software exploitable, and the habits that prevent them.
Secure Coding Fundamentals
Writing code that fails safely instead of exploitably, by default.
Authentication vs Authorization
Proving who you are is a different problem from deciding what you're allowed to do.
Common Web Vulnerabilities
How SQL injection, XSS and CSRF actually work, and the standard defenses against each.
Encryption Basics
How data is kept unreadable to everyone except the people meant to read it.
Secrets and Credential Management
Keeping passwords, API keys and certificates out of the places they leak from.
Dependency and Supply Chain Security
The code you didn't write is still your risk, and where it comes from matters.