MANDATE / RESOURCES
Security, in practice.
Ideas, practical guides, and engineering notes for the actions that matter.
Featured / Engineering
Architecture
Why browser proof needs server state
A credential can be well formed and still be the wrong evidence for the next request. Freshness and replay are questions about state.
Read the noteEXPLORE THE LIBRARY
A closer look at protection.
Integration guide
Choose your first protected action
Start with one route, understand its callers, and place browser verification beside the checks your application already owns.
Read more
Operations
Observe before enforce
A proposed security decision is not an enforced decision. A careful rollout measures the action people are trying to complete.
Read more
Illustrative walkthrough
Keep a ticket reservation consistent through retries
An illustrative reservation flow that separates browser evidence, inventory allocation, and recovery from a lost response.
Read the walkthrough
Request integrity guide
Design for retries without confusing replay
Separate proof reuse from operation recovery, and test what happens when a successful response never arrives.
Read more
Illustrative walkthrough
Keep account access in the application’s hands
An illustrative sign-in flow that adds browser context while preserving authentication, recovery, and account ownership.
Read the walkthrough
Illustrative walkthrough
Review signup abuse without losing the signup
An illustrative SaaS signup that keeps account creation, verification evidence, and trial eligibility as separate decisions.
Read the walkthroughFind your next read.
FROM THE BLOG
Understand the wider picture.
Blog
Anti Bot Verification Explained Without CAPTCHAs
Where browser verification fits, and why the application still owns the decision.
Read more
Blog
What is a replay attack?
Why valid request bytes can still be the wrong evidence for the next action.
Read more
Blog
What Is Carding? How Card Fraud Testing Hits Checkouts
How automated card testing targets checkout flows.
Read moreKEEP IT HANDY