Nov 12, 2026A 403 Is Not Proof: What Building a CVE Toolkit Taught Me About EvidenceA 403 is a claim, not a verdict. What building the MockForge CVE toolkit taught me about judging at the layer where the truth lives, putting safety in the schema, and tools that say what they cannot prove.4 min
Nov 04, 2025TLS, mTLS, and Tunneling: Production-Ready Security for Mock ServersHow to support HTTPS, mTLS, and secure tunneling in mock servers for production-like integration testing.4 min
Nov 02, 2025OAuth2 and PKCE in Generated Clients: Building Production-Ready AuthenticationHow generated API clients can handle OAuth2 and PKCE securely instead of leaving auth as manual glue code.5 min
Jun 01, 2025Prompt security for enterprisesA practical guide to defending enterprise LLM systems against prompt injection, tool abuse, and secret leakage.6 min