CraftRippleCraftRipple

Technical Insights

Deep dives into AI integration, architecture decisions, and lessons from rescue missions

Diagram showing three security scan surfaces, combining into one A-F security grade in Keelscan.
Security11 min read

One Toggle From a Breach: How We Built Keelscan to Scan Code, Live Apps, and Supabase in One Grade

Deals stall in security review, and the odds are against a team that shipped fast. We built Keelscan to answer "is your app secure?" across the three surfaces a reviewer actually checks: your code, your running app, and your cloud data config. This post walks through the engineering: catching a Supabase RLS leak with only the public anon key, scanning any URL without building an SSRF weapon, and why we made the grade less harsh to keep it honest.

Liban Abdullahi·
#hipaa#keelscan#application-security
A clean layered diagram: patient/clinician UI → API layer → PHI-isolated data store → audit log, with a "BAA boundary" callout. 1200×630
Security13 min read

HIPAA-Compliant Clinical Platform: The Architecture Decisions That Define What's Possible Later

Most healthcare founders build the feature first and bolt on compliance later. That order gets you a working demo and a rewrite six months in. Here's how we structure HIPAA-compliant clinical platforms from day one: data layer, auth, audit trail, AI integration, and which decisions close off future options if you get them wrong early.

Liban Abdullahi·
#security#hipaa#healthcare
Architecture diagram showing a cloud Wazuh agent connecting over a WireGuard tunnel to a self-hosted Wazuh manager on a private homelab LAN.
Security13 min read

Monitoring a Cloud Server with a Self-Hosted Wazuh SIEM: Without Exposing It to the Internet

Self-hosting a SIEM is great for cost and control, but how does a cloud server report to a Wazuh manager that has no public IP? Here's the full, reproducible path: a WireGuard tunnel to the manager's private LAN, a version-pinned Wazuh agent, the firewall gotcha that makes `ping` lie to you, plus what to do next: clearing Amazon Linux 2023 CVEs and hardening the host against the CIS benchmark.

Liban Abdullahi·
#wazuh#Siem#wireguard