The blog

Product updates, security research, and field notes from running Guard Core in production.

Subscribe via RSS →
15 min read

Beyond rate limiting: what application-layer security actually means in 2026

Most API security tutorials still teach the 2018 playbook - rate limit by IP, validate inputs, log to stdout. AI-coordinated attackers eat that for breakfast. Here's what modern application-layer security actually looks like, layer by layer.

securityapi-securityai-attacks
9 min read

I put Cloudflare and fail2ban in front of my FastAPI server. Here's what still got through.

Edge protection dropped my attack volume by 94%. Then I watched 748 Layer 7 attacks hit in a single hour anyway. This is the data, and it's a useful lesson about what application security actually protects against.

securityfastapicloudflare
5 min read

Who Guard Core is actually for

Not everyone runs a public API that wants to be found. If you're building in stealth, enforcing hard limits, running honeypots, or just don't want to stand up fail2ban and Cloudflare, this is for you.

announcementuse-casesfastapi