Technical Insights
Deep dives into ESLint security, JavaScript performance, and modern development practices.
The 30-Minute Security Audit: A Static Analysis Protocol for Onboarding
A data-driven protocol for assessing a new codebase in under 30 minutes. Use automated static analysis to generate immediate risk heatmaps for CTOs and VPs.
Ofri Peretz
Ofri PeretzI Let Claude Write 60 Functions. 65-75% Had Security Vulnerabilities.
AI coding assistants are incredible—until they introduce security holes. I ran an experiment asking Claude (Sonnet 4.5, Opus 4.5, Haiku 3.5) to generate 60 common Node.js functions with zero security context using my Claude Pro subscription. 65-75% had vulnerabilities. Then I tested if static analysis could help the models fix their own mistakes.
Ofri PeretzExploit Analysis: PostgreSQL COPY FROM Filesystem Access
A deep dive into PostgreSQL filesystem exploits. Learn how to engineer static analysis guards to prevent unauthorized database-level file access.
Ofri PeretzThe Performance Protocol: Solving PostgreSQL N+1 Loops via Static Analysis
Eliminate API performance bottlenecks at the commit level. A case study on detecting and fixing architectural N+1 patterns programmatically.
Ofri PeretzExploit Analysis: search_path Hijacking (The Hidden PostgreSQL Attack)
Engineering against architectural vulnerabilities. A professional analysis of search_path hijacking and the static analysis standard for prevention.
Ofri PeretzSecuring Middleware: The Express.js Static Analysis Standard
The professional standard for Express.js platform security. Automate protection for Node.js services through static middleware auditing.
Ofri PeretzArchitectural Security: The NestJS Static Analysis Standard
The engineering standard for modern NestJS applications. Detect injection points and architectural flaws automatically using static analysis.
Ofri PeretzServerless Security: The AWS Lambda Static Analysis Standard
Engineering safety into the serverless stack. Automated static analysis for AWS Lambda to prevent event injection and IAM misconfigurations.
Ofri PeretzFrontend Protection: The Browser Static Analysis Standard
Protect the frontend host. Use automated static analysis to detect localStorage leaks and XSS sinks in professional JS architectures.
Ofri PeretzZero-Trust Auth: The JWT Static Analysis Standard
Automated enforcement for bulletproof authentication. Use static analysis to detect algorithm confusion and weak secrets programmatically.