Academy Basic

Academy

Module 2 · TLS in Practice

TLS 1.2/1.3, cipher suites, handshake, certificate validation, HSTS, CT, common misconfigurations, testing with testssl.sh.

Apr 22, 2026 · 4 min read

Academy

Module 3 · PKI Architecture

CAs, cert types, ACME, lifecycle, revocation, internal PKI, service mesh PKI, code signing, lifetime trends.

Apr 22, 2026 · 5 min read

Academy

Module 4 · Secrets Management at Scale

Vault, dynamic secrets, rotation strategies, CI/CD secrets, leak detection, multi-environment isolation, audit.

Apr 22, 2026 · 5 min read

Academy

Module 2 · ISO 27001:2022 Implementation

Required documents, the SoA, 2022 control structure, implementation timeline, common gaps for Indian implementations.

Apr 22, 2026 · 4 min read

Academy

Module 3 · SOC 2 for Indian SaaS

Type 1 vs 2, Trust Services Criteria, audit lifecycle, critical controls, choosing an auditor, India-specific gotchas.

Apr 22, 2026 · 5 min read

Academy

Module 4 · Third-Party Risk Management

Vendor classification, assessment workflow, contractual provisions, continuous monitoring, India-specific regulations.

Apr 22, 2026 · 5 min read

Academy

Module 2 · API Authentication & Authorization Patterns

JWT pitfalls, OAuth flows for APIs, session management, mTLS, RBAC vs ABAC vs ReBAC, authz testing at scale.

Apr 22, 2026 · 5 min read

Academy

Module 3 · GraphQL Security

Introspection, depth/complexity attacks, aliasing brute force, mutation safety, persisted queries, subscriptions.

Apr 22, 2026 · 14 min read

Academy

Module 4 · Rate Limiting & API Abuse Prevention

Algorithms (token bucket, sliding window), enforcement layers, Redis Lua patterns, abuse patterns and defenses.

Apr 22, 2026 · 5 min read

Academy

Module 5 · API Gateways & Zero-Trust at Scale

Kong, Apigee, AWS API Gateway, service mesh (Istio, Linkerd), zero-trust architecture, observability stack.

Apr 22, 2026 · 5 min read