Writing on backend architecture, Laravel, API security, and engineering practices. Free to read here — also available on Medium.
More articles available on Medium — 200+ posts on backend development, security, and engineering.
View all on Medium77 of 220 posts
The client audit arrived as a 40+ page PDF document. Somewhere around those pages was a section titled“Secure Software Development Lifecycle Compliance.”Under it, a checklist. Twelve items. Each on...
If you’ve built a Laravel application with Livewire, you know the appeal. Write server-side PHP components, bind them to the frontend, and let the framework handle synchronizing state between clien...
Part 4 closes the series. But before the final ten, a word on what most scaling technique lists get wrong.
Laravel 13 shipped on March 17, 2026. If you have been following Laravel news, you’ve seen the announcements about the first-party AI SDK, passkey authentication and JSON:API resources. The write-u...
There is a pattern in how systems fail. It is rarely one dramatic event. It is usually a chain: a downstream service slows down, threads pile up waiting for it, the thread pool exhausts, requests t...
Your login form has rate limiting. Your password reset endpoint has rate limiting. Your API has rate limiting. So why does your 2FA endpoint treat OTP verification like it’s unhackable? It’s not, a...