Book a Call
ServicesWorkAIResourcesWritingStackAboutBook a Call
Work

An auth layer rebuilt so it stops being a risk

A multi-tenant HR and payroll platform with authentication handled several ways.

0Auth incidents after redesign
IndustryHR tech
ProductMulti-tenant HRMS and payroll SaaS

Anonymised: client names and identifying details are left out. Outcomes are the measured results.

  1. Problem

    • Session handling differed between parts of the product.
    • No protection against brute force or credential stuffing.
    • Roles granted more access than people needed.

  2. What I did

    • OWASP-aligned auth redesign with JWT refresh rotation and revocation.
    • Rate limiting and lockout on credential endpoints.
    • Role-based access control built on least privilege.

  3. Outcome

    • Zero auth incidents after the redesign.
    • One auth model the whole team understands.
GoReactMongoDBRedis

More work

Releases that took days, shipped in hoursFintechAbout 40% off the cloud bill, with no new infrastructureClean energy

Three advisory clients at a time.

Ask about current availability. The first call is free and takes 30 minutes.

Book a Call