Application Security on Jorge Laurel

Part 4: Launch Day and the Lessons That Followed

Thu, 12 Jun 2025 18:00:00 +0000

Day 4 of a 5-part series: When Theory Meets Reality

Missed a part of the series? Here is Part 1, Part 2, and Part 3

You know that feeling when you’ve spent weeks, or just one, building something amazing, everything looks perfect in your development environment, security tests are all green, and you’re finally ready to show the world your creation?

And then you launch it, and the first user tries to do something completely logical that you never thought of, and suddenly you’re questioning every life choice that led to this moment?

Part 3: Fort Knox for Newsletters

Wed, 11 Jun 2025 18:00:00 +0000

Day 3 of a 5-part series: Building Security Into Every Layer

If you missed them, here are Part 1 and Part 2 of the series

Pop quiz: What’s the difference between a cybersecurity professional building a web app and a regular developer building a web app?

The cybersecurity professional assumes everything will be attacked, probably by someone smarter than them, definitely by someone with more time, and absolutely by someone who’s already figured out three ways to break the system before it’s even deployed.

Part 2: Code, Coffee, and Course Corrections

Tue, 10 Jun 2025 18:00:00 +0000

Day 2 of a 5-part series: The Development Sprint That Changed Everything

Did you miss Part 1? It’s available here.

Remember those ambitious PRD dreams from Part 1? Well, reality has a funny way of keeping your feet on the ground—even when you’re moving at AI speed.

What followed my planning phase was one of the most intense and educational weeks of development I’ve ever experienced (OK, my firs actually). Not because of long coding sessions (thank you, AI Agent), but because of how rapidly I could test ideas, hit walls, pivot, and try again.

Part 1: The Spark - When Vision Meets Digital Reality

Mon, 09 Jun 2025 18:00:00 +0000

Day 1 of a 5-part series: From Idea to Launch

Have you ever had one of those moments where you’re staring at your weekly routine and think, “There’s got to be a better way to do this”? That’s exactly what happened to me with my Friday Wrap Up newsletter.

For months, I’d been manually crafting my cybersecurity newsletters, juggling Google Docs, Feedly, Zapier, and Make. Although I had semi-perfected my process I wanted to find a way to expand beyond LinkedIn and Substack and see what potentials were possible outisde of these two platforms. As someone who preaches about efficiency in cybersecurity operations, I was ironically running my own newsletter like it was 2010.