Writeups
The thinking behind each crack.
A demo proves it works. A writeup explains why the problem persists and how Cloudflare closes it. This is the evangelism half of the role, done in public.
The CAPTCHA Tax
We taught a generation to click traffic lights, and called it security.
The Free Buffet for Bots
AI crawlers strip-mine your content for free, and most sites never see them arrive.
The Data-Residency Fiction
"EU data stays in the EU" is usually a promise, not a control.
The Questionnaire Death March
Every B2B deal stalls on a security questionnaire emailed back and forth in a spreadsheet.
The Stampede
Login and checkout endpoints draw floods of bots, and most origins try to absorb the hit.
The Slowpoke
Every reader triggers a fresh render, so the slow path gets paid over and over.
The Hoarder
On a limited drop, a read-then-write race quietly oversells the stock you do not have.
The Midnight Caller
Blasting an outage alert to people who opted out, at 2 a.m., is a compliance incident waiting to happen.