Things I've written.
Short notes on ecommerce platforms, security patterns, and web development. Written when something is worth recording.
2026 · May
Reading the Magento security advisory feed without losing a weekend
A practical guide to triaging Adobe Commerce security advisories: severity decoding, version matching, hotfix vs patch decisions, and what changes when a PoC drops.
- magento
- security
- ecommerce
- adobe-commerce
2026 · May
Magento 2.4.x admin hardening checklist
A practical hardening checklist for Magento 2.4.x admin panels: URL randomisation, 2FA, IP allowlisting, session controls, and the config flags most installs skip.
- magento
- security
- ecommerce
- hardening
2026 · May
What an LLM-built SaaS audit actually finds
The recurring failure modes I see when auditing codebases built by LLM coding tools: auth gaps, exposed secrets, missing rate limits, and validation that was never wired up.
- ai
- security
- audit
- saas
- web-development