-
aws
Closing the Rate-Limit Bypass: A CloudFront + ALB Case Study
How we closed an `X-Forwarded-For` spoofing bypass on an AWS WAF rate-limit rule — CloudFront custom secret header, ALB origin verification, and a composite-key rate-based rule that actually counts real clients.
-
express
Replacing a Wildcard CORS Policy: An Express Allowlist Case Study
How we replaced a permissive Express `cors` regex with a strict allowlist — escaped-dot origin matching, `Vary: Origin` on every response, and no more CWE-942 finding on the pen-test report.
-
aws
Cutting the File-Upload Bill: A Cognito + S3 Case Study
How we replaced a hosted upload widget with native Cognito and S3, kept the browser uploading straight to the bucket, and brought the monthly invoice down.
-
aws
How a CloudFront Custom Error Page Leaked JWTs to S3: A Case Study
A pen-test curl found CloudFront forwarding `Authorization` headers to the S3 error-page bucket, where S3 reflected every JWT back in its XML error response. Two lines of Terraform closed it across sixteen distributions.
-
remote
Iftar at Apetit: The Sarajevo Team Picks a Menu
One evening in March the Sarajevo Clearviewers sat down for a Ramadan iftar dinner. The Slack thread that got us to the table is the honest picture of how the team actually organizes itself: informal, patient, and mostly saying 'svejedno.'
-
jwt
How a JWT Audience Map Saved a CORS Mistake: A Defense-in-Depth Case Study
On a client's API, a CORS wildcard looked like a HIGH severity finding — until we tried to actually exploit it. A second, independent JWT audience check turned a trivially exploitable bug into one that required a much harder prerequisite.
-
devsecops
From DevOps to DevSecOps: How I Became Clearview's In-House Pen-Tester
How we built an in-sprint pen-tester role into every engagement — the DevSecOps handoff, the two decades of DevOps that led to it, and the OWASP Top 10 categories that show up first in real client APIs.
-
application development
An Event-Driven Architecture Case Study: Lessons from a Real-World Application
A decade of Clearview engineering for a confidential awards group, and the event-driven AWS architecture that keeps it observable.
-
aws cost optimization
Migrating EC2 to AWS Graviton (ARM): A Cost-Reduction Case Study
How we cut Clearview client EC2 bills by up to 20% by migrating x86 workloads to AWS Graviton (ARM64) — the instance-family swap (M6g, C7gd, R7g), the AMI-selection step in Terraform, and the compatibility checks we ran first.
-
aws app runner
Deploying Node Containers on AWS App Runner with Terraform
Why AWS App Runner is our default for container workloads — the `aws_apprunner_service` Terraform resource, ECR wiring, and the auto-scaling defaults we actually keep in production.
-
budget
AWS Budgets and Alerts with Terraform: A Cost-Monitoring Case Study
How we set AWS budgets and Slack alerts with Terraform — the `aws_budgets_budget` notification block, its `subscriber_email_addresses`, and how to route a real breach into SNS before the invoice hits the CFO's inbox.
