MirahLabs Engineering Blog
Technical insights, architectural deep-dives, and system designs authored by our product engineers and AI research leads.
Infrastructure Drift Detection with Terraform and Driftctl
Manual console changes bypass Terraform states, creating security risks. Learn how to use driftctl to scan your cloud accounts and detect infrastructure drift automatically.
Hybrid Cloud in Banking: Connecting Core Trade Systems via AWS Direct Connect
Connect your on-premises datacenter to AWS securely. Compare the cost, latency, throughput, and reliability of AWS Site-to-Site VPN and Direct Connect.
Implementing OAuth 2.0 and OpenID Connect from Scratch in Flask
OAuth 2.0 and OIDC are the standards powering 'Sign in with Google/GitHub.' This guide explains the flows and implements a complete authorization code flow with PKCE in Flask.
Secrets Management in CI/CD: HashiCorp Vault and GitHub Actions
Hardcoded secrets in code or CI logs are a leading cause of security breaches. Learn how to use HashiCorp Vault and GitHub's secrets engine to manage credentials securely.
Zero Trust Security Architecture for Cloud-Native Applications
Zero Trust replaces the 'trust but verify' perimeter model with 'never trust, always verify.' Learn how to implement Zero Trust principles using mTLS, identity-aware proxies, and micro-segmentation.
OWASP Top 10 2024: What's Changed and How to Fix Each Vulnerability
The OWASP Top 10 is the definitive guide to web application security. This article covers the 2024 edition's changes, real-world attack examples, and practical mitigations for each vulnerability.