#WAF firewall
27 related articles
·4 min
Guide to Securely Exposing Self-Hosted Services: From Tailscale to Defense in Depth
Complete guide to securely exposing self-hosted services: Tailscale zero-exposure, reverse proxy setup, Cloudflare Tunnel, Authelia auth gateway, server hardening, and 3-2-1 backup strategy.
Read more →
·4 min
Multi-Purpose Home Server Build Guide: Streaming + AI Inference + App Hosting on One Machine
How to build a $500 multi-purpose home server for Jellyfin streaming, Ollama local AI inference, web app hosting, and Pi-hole ad blocking with dual RTX 3060 GPUs.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·4 min
Mysterious URL Requests in NGINX Logs? Unmasking Automated Scanning Attacks and How to Defend Against Them
Seeing strange 404 requests and bizarre URLs in your NGINX access logs? Learn what automated scanning attacks are, where they come from, and how to defend with Fail2ban, CrowdSec, and other practical solutions.
Read more →
·4 min
Strange URL Requests in Your NGINX Logs? Demystifying Automated Scanning Attacks and Defense Methods
Seeing unfamiliar 404 requests and strange URLs in your NGINX logs? This article explains automated scanning attacks—their origins, intent—and provides practical defenses using Fail2ban, CrowdSec, and more.
Read more →
·2 min
Noisegate: Adding Differential Privacy Guardrails for Untrusted AI Agents
Noisegate is a differential privacy gateway for untrusted AI agents that injects calibrated noise into data flows, providing mathematically proven privacy guarantees when AI Agents process sensitive data.
Read more →
·2 min
Noisegate: Adding Differential Privacy Guardrails for Untrusted AI Agents
Noisegate is a differential-privacy gateway for untrusted AI agents, injecting calibrated noise into data flows to provide mathematically guaranteed privacy protection for sensitive data processed by AI Agents.
Read more →
·5 min
Home Network Device Isolation: A Complete Guide to Safely Exposing Self-Hosted Services to the Internet
Learn how to safely expose self-hosted services to the internet using DMZ, VLAN isolation, and VM approaches while protecting your home network from attacks.
Read more →
·3 min
Numbat Open Source: A Cross-Framework AI Agent Security Detection and Response Solution Explained
Numbat is an open-source AI Agent security detection and response tool supporting cross-framework deployment with Agent behavior visibility and pre-execution interception capabilities.
Read more →
·3 min
Small Site Besieged by AI Crawlers: Under 100 Images, 266K Crawl Requests
A Piwigo gallery with under 100 images received 266K AI crawler requests in 24 hours. Analysis of why gallery CMS becomes a bot trap and how to defend against it.
Read more →
·4 min
Foundry VTT Public Access Guide: The Right Way to Securely Expose Self-Hosted Services
Learn how to securely expose Foundry VTT to the public internet. Compare port forwarding, Cloudflare Tunnel, and reverse proxy solutions with practical advice on network isolation and layered defense.
Read more →
·4 min
Self-Hosted Service Domain Resolution in Practice: A Deep Dive into Split DNS and Tailscale Solutions
A deep dive into domain resolution challenges for self-hosted home servers, covering Split DNS concepts and how Tailscale App Connector enables unified domain access across internal and external networks.
Read more →
Smart Proxy: The Key Architecture for …
·3 min
Smart Proxy: The Key Architecture for Running AI Coding Agents Safely and Autonomously
Too much AI permission is risky; too little kills productivity. A smart proxy acts as a controllable middleware layer — intercepting, auditing, and policy-gating AI agent actions in tools like Claude Code and Cursor for safe autonomous operation.
Read more →
·4 min
AI Coding Tool Security Governance: How Policy Enforcement Guardrails Ensure Enterprise Compliance
As Claude Code, Cursor, and Codex enter enterprises at scale, policy enforcement guardrails are becoming critical. A deep dive into AI coding tool security governance, cross-platform compliance, and enforcement mechanisms.
Read more →
·3 min
Building an Automated Penetration Testing System with Claude: A Deep Dive into Memory, Skills, and Agent Architecture
A security researcher demonstrates how to customize Claude into an automated penetration testing system with memory, skills, and a knowledge base — successfully compromising CTF targets and finding real Bug Bounty vulnerabilities.
Read more →
·3 min
Complete Guide to Alibaba Cloud Website Architecture: The Full Request Path from DNS to Auto Scaling
A systematic guide to Alibaba Cloud website architecture covering DNS, CDN, WAF, CLB/ALB, ECS, Redis, NAS/OSS, and auto scaling along the full user request path.
Read more →
·4 min
Claude + Trae IDE with Yakit: Automated Penetration Testing via MCP in Practice
Learn how to use Claude LLM with Trae IDE and MCP protocol to orchestrate Chrome browser and Yakit for automated penetration testing, covering setup, agents, and vulnerability detection.
Read more →
·2 min
OpenAI Content Moderation API Upgrade: Technical Analysis of Unified Generation and Moderation
OpenAI's Responses API and Completions API now support built-in moderation scores. Developers can get generation results and safety signals in one call. Here's what it means for AI security architecture.
Read more →
Tutorials·3 min
AI Penetration Testing in Practice: Comparing Three Agent Tools with DeepSeek for Vulnerability Discovery
Hands-on comparison of Claude Code, Codex, and DeepSeek TUI for AI-assisted penetration testing with DeepSeek V4 Pro, covering vulnerability discovery, WebShell upload, and intranet penetration.
Read more →
Tutorials·4 min
New API in Practice: Complete Tutorial for Building Your Own AI API Relay Station
Complete tutorial on building an AI API relay station using the New API open-source project, covering Docker deployment, server configuration, channel management, token distribution, and client verification.
Read more →