Events & courses that shape my work

Shipping software is one thing. Shipping it without leaking customer data is another. A non-exhaustive list of what I apply by default:

• OWASP Top 10 — input validation, output encoding, parameterized queries
• Authentication & sessions — JWT, refresh rotation, secure cookies, OAuth 2.0 / OIDC
• Row-Level Security in Postgres / Supabase — tenant isolation by default
• Secrets management — env-scoped, never in client bundles or git history
• Security headers — CSP, HSTS, Referrer-Policy, X-Content-Type-Options
• Dependency hygiene — automated audits, pinned versions, supply-chain awareness
• GDPR-aware data handling for EU clients (consent, retention, export, deletion)

A site that nobody finds is a brochure in a drawer. What I implement so your pages actually rank and get shared:

• Per-route titles, descriptions, OpenGraph and Twitter cards (SSR-rendered)
• JSON-LD structured data — Organization, Product, Article, BreadcrumbList
• XML sitemaps + robots.txt generated server-side and submitted to Search Console
• Canonical URLs, hreflang and clean URL structure (no hash routing for content)
• Core Web Vitals: LCP, INP, CLS — image optimization, font preloading, code-split bundles
• Semantic HTML, single H1 per page, descriptive alt text, accessible landmarks
• Internal linking strategy and crawl-depth control for content sites