Application security Articles — Developers Voice

Data Encryption at Rest and In Transit for .NET Applications | Practical Security Guide

Sudhir mangla
Application security , .Net architecture
29 Jan, 2026

1 The Modern .NET Security Landscape: Defense-in-Depth vs. Zero Trust Modern .NET applications rarely operate in isolated environments. They run in public clouds, communicate through APIs, and r

The Valet Key Pattern on Azure: Secure Direct Uploads with SAS and ASP.NET Core

1 The Scalability Wall: From Gatekeeper to Valet Key Large file uploads are one of the fastest ways to expose weaknesses in an API architecture. Uploading a 1GB or 5GB file through an ASP.NET Co

Building Secure Enterprise APIs with .NET, Azure API Management, and Entra ID (Azure AD)

1 Introduction: The Zero Trust Mandate for Modern APIs Modern enterprise systems depend on APIs to connect business processes, exchange data, and support distributed applications. These APIs ope

Privacy-by-Design in ASP.NET Core: PII Discovery, Consent, and DSAR Automation with Microsoft Purview & Azure Functions

Sudhir Mangla
.Net architecture , Application security
01 Oct, 2025

1 Introduction: Beyond Compliance - The Imperative for Proactive Privacy Privacy used to be framed as a compliance checkbox. Architects and developers built systems, and legal teams retrofitted di

Secure by Default: A Mobile DevSecOps Checklist for iOS & Android

1 Introduction: Beyond the Buzzword - Building "Secure by Default" Mobile Apps Every mobile developer has felt the tension between speed and security. Business stakeholders demand rapid releases,

Zero-Trust Architecture in Practice: Beyond the Buzzword with .NET and Azure

Sudhir mangla
Application security , .Net architecture
26 Aug, 2025

1 Introduction: Deconstructing the Buzzword Zero Trust has become one of the most frequently cited terms in security conversations, boardroom presentations, and vendor marketing collateral. Yet fo

Thinking Like an Attacker: A Practical Guide to Threat Modeling for .NET Architects with STRIDE

1 Introduction: The Imperative of Proactive Security Security has moved from being a specialized niche to a fundamental part of software architecture. Modern systems operate in a permanently hosti

Insecure Design: Unpacking the New #4 on the OWASP Top 10 List for Architects

Sudhir mangla
Application security , Design principles
04 Aug, 2025

Abstract The landscape of software security is evolving rapidly, with threats and vulnerabilities emerging faster than ever before. Among the most significant updates in recent years is the introd

Securing Your Software Supply Chain: A .NET Architect's Guide to SBOMs and NuGet Auditing

1 The New Battlefield: Securing the Software Supply Chain 1.1 Introduction: Beyond the Perimeter The classic notion of security once focused on fortifying your organization’s digital perimete

API Security Beyond REST: Hardening GraphQL and gRPC Endpoints in ASP.NET Core

Abstract The dominance of RESTful APIs is gradually giving way to more dynamic, high-performance paradigms such as GraphQL and gRPC. While REST brought clarity and standardization to web services,

Automated Security Testing on a Budget: A Practical Guide to OWASP ZAP for ASP.NET Core

1 Introduction: The Case for Proactive and Automated Security Security breaches are headline news. Software architects and senior developers know that a single vulnerability can expose an organiza

Introduction to DevSecOps: A Practical Guide for Integrating Security into Your .NET Pipeline

1 The DevSecOps Imperative for the Modern .NET Architect 1.1 Beyond "Bolted-On" Security: The Business Case for Shifting Left Traditionally, security has been treated as an afterthought—a box

Mastering API Security in ASP.NET Core: The Ultimate Checklist for a Hardened Endpoint

1 Introduction: The Imperative of API Security in the Modern Architectural Landscape APIs are the backbone of modern digital systems, powering everything from mobile applications to interconnected

The OWASP Top 10 for .NET Developers: A Practical Guide to Mitigating Critical Web App Risks

1 Introduction: Modern Security Landscape and the .NET Architect In the evolving digital landscape, securing web applications has become more critical—and more challenging—than ever. As a software

Managing Secrets in .NET Applications with Azure Key Vault & Managed Identitie

1 Introduction: The Unseen Risk in Modern Applications 1.1 The Elephant in the Codebase: Why hardcoded secrets, connection strings, and API keys are a critical vulnerability In every mod

Mastering Authentication & Authorization in ASP.NET Core: A Deep Dive into JWTs, OIDC, and IdentityServer

1 Introduction: The Modern Security Imperative The software landscape has transformed dramatically in the last decade. Where we once built monolithic web applications running on a single server, t