Read what ships.

21Cloudflare · practice

Localizing compliance at scale: achieving South Korea’s ISMS certification

To achieve South Korea's ISMS certification, Cloudflare had to modify its account sign-up flow to itemize required consents and disable third-party social logins that bypassed the form. By combining IP geolocation with user country selection, the team ensured localized compliance without breaking global functionality. The resulting certification provides a localized assurance benchmark for Korean users.

DEPTH ■■■■■8 min read3 days ago

Security

Sign in to save and rate

22Sentry · tooling

Measuring the back/forward cache with Application Metrics

Engineering teams often lack visibility into back/forward cache performance because successful cache hits leave no telemetry traces and browser heuristics frequently change. To solve this blind spot, the team introduced an opt-in application metrics integration in their JavaScript SDK that models browser bfcache signals into hits, specific miss reasons, and reload durations. As a result, developers can track, query, and fix silent navigation regressions using customizable dashboards.

DEPTH ■■■■■6 min read4 weeks ago

Sign in to save and rate

23Cloudflare · architecture

Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

Recent major vulnerabilities in Citrix NetScaler exposed public-facing authentication gateways to unauthenticated remote code execution. To prevent similar emergency patches, the team recommends placing an independent Zero Trust access layer, web application firewall, and strict origin connection controls in front of the application server. Implementing these defense-in-depth measures reduces exposure and ensures a single software flaw does not result in total system compromise.

DEPTH ■■■■■9 min read6 days ago

Security

Sign in to save and rate

24Sentry · architecture

Building Sentry's Laravel AI Integration

The Sentry team built a Laravel AI integration to support Agent Tracing during an internal hackweek. Because Laravel AI lacked events for individual LLM invocations, the integration correlates outgoing HTTP requests with active invocations using provider URL prefixes. The resulting zero-config feature is available in sentry-laravel 4.27 and automatically traces agents, LLM requests, and tool calls.

DEPTH ■■■■■4 min read4 weeks ago

Sign in to save and rate

25Sentry · tooling

Debugging our AI search assistant with agent tracing

The Sentry team developed a Search Query Assistant to convert natural language prompts into search syntax, which initially failed on custom numerical attributes due to incorrect field formatting in the system prompt. By utilizing their own AI Conversation view and agent tracing, they identified the root cause in the tool call results and system prompt generation. This observability workflow enabled them to reproduce, fix, and verify the issue both locally and in production.

DEPTH ■■■■■4 min read6 weeks ago

Sign in to save and rate