The Bare Metal Bet That Made Our Multiplayer Platform Hum

The cloud may be fast…but it nearly slowed us down.  When we launched Hathora in 2022, we knew the infrastructure behind multiplayer games was long overdue for reinvention. Studios like EA and Blizzard had built their own complex systems to host game servers, but for most multiplayer game studios, that approach was out of reach.

Serverless IAM: Implementing IAM in Serverless Architectures with Lessons from the Security Trenches

When I first began working with serverless architectures in 2018, I quickly discovered that my traditional security playbook wasn’t going to cut it. The ephemeral nature of functions, the distributed service architecture, and the multiplicity of entry points created a fundamentally different security landscape. After several years of implementing IAM strategies for serverless applications across

Secure IaC With a Shift-Left Approach

Imagine you’re building a skyscraper—not just quickly, but with precision. You rely on blueprints to make sure every beam and every bolt is exactly where it should be. That’s what Infrastructure as Code (IaC) is for today’s cloud-native organizations—a blueprint for the cloud. As businesses race to innovate faster, IaC helps them automate and standardize

The Synergy of Security and Development: Integrating Threat Models With DevOps

In our digital-first world, security isn’t just important — it’s non-negotiable, especially within DevOps environments. Yes, DevOps brilliantly accelerates development by bridging the gap between development and operations teams. But here’s the catch: that impressive speed sometimes races past essential security checkpoints. That’s why weaving threat modeling directly into your DevOps workflow isn’t just smart

Enhancing SQL Server Security With AI-Driven Anomaly Detection

As SQL Server databases become increasingly targeted by cybercriminals, it’s crucial to adopt proactive security measures. Traditional database security mechanisms, such as access controls, role-based permissions, and firewalls, are important but may not be sufficient to detect advanced threats or malicious insider activities.  In this tutorial, we’ll show you how to integrate AI-powered anomaly detection

The Rise of Vibe Coding: Innovation at the Cost of Security

Software development teams and professionals are increasingly adopting vibe coding as their preferred approach. Vibe coding involves creating software through instinctual coding methods and minimal planning to achieve quick prototyping or making solutions work immediately. While vibe coding can spark creativity and speed up early development, it usually comes at the cost of security, maintainability,

Privacy-Preserving AI: How Multimodal Models Are Changing Data Security

Ever had that feeling that your phone is listening to you? You mention something random in conversation, and suddenly you’re bombarded with ads about it. Creepy, right? Privacy concerns surrounding AI have always been there. But something fascinating is happening that most techies aren’t talking about yet: multimodal AI models are actually starting to improve

Enterprise Data Loss Prevention (DLP) Security Policies and Tuning

I’ve worked with a lot of enterprise customers over the years—big ones, too—and a common struggle I see is with their Data Loss Prevention (DLP) policies. Even though they’ve had the product for years, they often face one of two issues: either the policies are too weak and don’t flag anything, or they’re too strict,

Security by Design: Building Full-Stack Applications With DevSecOps

Building a full-stack application with Angular (frontend) and Node.js (backend) demands a holistic security approach. Security by design means baking in security from the architecture stage and throughout development, rather than as an afterthought. DevSecOps extends DevOps by integrating security into every phase of the software lifecycle – developers, operations, and security teams share responsibility