Blog
Field notes.
What we learn breaking AI products.
APIs
Multi-tenant APIs: five common mistakes
IDs in URLs, trusted headers, unchecked bulk endpoints.
APIs
Rate limits are security
Why we always test them, and what an LLM endpoint without one costs.