Topic Hub

Security

Jul 10, 2026 / 3 min read

The Worst Time to Design Permissions Is After You Land an Enterprise Customer

Teams love postponing access-control design until a big customer forces the issue. By then the system already has assumptions baked into it that are painful to unwind.

Read article

Jun 29, 2026 / 3 min read

Your Admin Panel Is a Security Boundary

Teams keep treating admin interfaces like internal convenience tools when they are often the most powerful and dangerous surface in the whole product.

Read article

Apr 30, 2026 / 11 min read

IFrames, CORS, and postMessage: Why This Still Feels Broken

Most developers think CORS is the reason iframe communication fails. Usually it isn't. The real problem is that cross-origin embedding and cross-origin scripting are different things.

Read article