· Amit Kothari
· Engineering
Designing API endpoints and headers to prevent abuse
After an attacker sent 10,000+ phishing emails through our system, we rebuilt how we think about API security. The patterns we learned: database-based rate limiting, tenant validation on every request, and why Redis alone is not enough.