The latest articles on DEV Community by Martin Castillo (@martin_castillo_8292742ea). https://dev.to/martin_castillo_8292742ea https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4219784%2F11f27cc0-74ad-4e65-842a-9a4dbbd023a0.jpg https://dev.to/martin_castillo_8292742ea en Martin Castillo Sun, 01 Nov 2026 00:40:36 +0000 https://dev.to/martin_castillo_8292742ea/httpssecurity-score-sevenvercelapp-505i https://dev.to/martin_castillo_8292742ea/httpssecurity-score-sevenvercelapp-505i <p>🚀 Just built and deployed to production «DEFENSA TI»: an automated perimeter security auditing and compliance engine.</p> <p>Many organizations still rely solely on having an active SSL certificate, overlooking critical transport headers and TCP socket exposure that leave web perimeters vulnerable under OWASP guidelines.</p> <p>I engineered this platform using Next.js (App Router), TypeScript, and Node.js network sockets, solving core security and networking challenges:</p> <p>🔒 Strict Anti-SSRF Defense: Deterministic filtering of RFC 1918 private ranges and loopback interfaces to prevent backend proxy misuse.<br> ⚡ Socket Timeouts &amp; Redirect Handling: Enforcing manual redirect inspection and AbortSignal timeouts to prevent process blocking from hanging ports.<br> 📋 OWASP Header Validation &amp; Forensic Reports: Automated assessment of HSTS, CSP, and framing policies, exporting clean, print-ready A4 forensic PDF reports.<br> 🤖 Automated Remediation Engine: Immediate deployment of mitigation snippets (Nginx, Apache, Cloudflare) with local deterministic fallback logic.</p> <p>🔗 Live Demo: <a href="https://security-score-seven.vercel.app" rel="noopener noreferrer">https://security-score-seven.vercel.app</a><br> 📂 GitHub Repo: <a href="https://github.com/martincastillo1996/security-score" rel="noopener noreferrer">https://github.com/martincastillo1996/security-score</a></p> <p>Currently open to technical discussions, security posture consulting, and opportunities in L3 Support, Cloud Infrastructure, and Full-Stack Engineering. Feedback is appreciated!</p> <h1> CyberSecurity #NextJS #TypeScript #OWASP #DevSecOps #CloudArchitecture #SoftwareEngineering </h1> ai webdev productivity programming Martin Castillo Sun, 01 Nov 2026 00:08:26 +0000 https://dev.to/martin_castillo_8292742ea/just-built-and-deployed-to-production-an-automated-perimeter-security-auditing-and-o8g https://dev.to/martin_castillo_8292742ea/just-built-and-deployed-to-production-an-automated-perimeter-security-auditing-and-o8g <div class="crayons-card c-embed text-styles text-styles--secondary"> <div class="c-embed__content"> <div class="c-embed__body flex items-center justify-between"> <a href="https://security-score-seven.vercel.app/" rel="noopener noreferrer" class="c-link fw-bold flex items-center"> <span class="mr-2">security-score-seven.vercel.app</span> </a> </div> </div> </div> automation security webdev