Author
3 posts
Deploying application layer security in production can feel risky. Blocking rules, rate limits, and bot protections directly change how your system handles traffic and a misconfigured threshold does not just log an error, it can prevent rea
Security tooling has a habit of turning into infra work. You start with something simple like rate limiting or bot protection. Suddenly you are configuring a proxy, updating DNS, or introducing a new layer in front of your app. What should
At CascadiaJS last year, I gave a talk about a problem I’ve been running into while maintaining Arcjet’s docs: more developers are reading documentation through AI assistants instead of directly on the web. Tools like ChatGPT, Copilot, Curs