Security Case Studies
Real-world Security case studies: what happened in production, the architecture behind it, the numbers and the lessons to take to your own team.
AWS Keys Leaked to GitHub: The First 60 Minutes and the Clean-Up
A developer accidentally committed long-lived AWS access keys to a public repo. This case walks through the detection, containment, and the permanent fix: short-lived credentials via IAM roles and automated secret scanning.
Security · beginner · 12 min read
How a 120-Engineer SaaS Company Replaced Its Corporate VPN with Zero-Trust Access
A mid-size B2B SaaS company eliminated its legacy VPN bottleneck by rolling out Cloudflare Access and WARP, cutting engineer connection failures by 94% and slashing lateral-movement risk.
Security · intermediate · 12 min read
How a B2B SaaS Team Contained Prompt Injection Across an AI Agent With Live Tool Access
An AI agent with database and API tool access was hijacked via prompt injection in user-supplied data, exfiltrating records. The team rebuilt the agent with layered defences and cut critical incidents to zero.
Security · advanced · 12 min read
How a B2B SaaS Team Cut Supply-Chain Risk by Enforcing SBOMs, Sigstore Signing, and OPA Admission Policies
A 120-engineer SaaS company rebuilt its CI/CD pipeline around Syft SBOMs, Cosign signatures, and OPA Gatekeeper to block unsigned or unverified images from ever reaching production.
Security · advanced · 12 min read
How a B2B SaaS Team Eliminated Plaintext Secrets and Cut Credential Exposure Risk by 94%
A 120-engineer SaaS company replaced .env files and static DB passwords with HashiCorp Vault dynamic credentials, cutting secret sprawl from 340 hardcoded values to under 20 long-lived secrets.
Security · intermediate · 12 min read