https://aftermarket.dev/tags/afterguard/ Recent content in afterguard on Aftermarket.dev Hugo -- gohugo.io en-us Wed, 21 Oct 2026 00:00:00 +0000 https://aftermarket.dev/afterguard-released-to-put-a-lock-on-old-apps-that-have-none/ Wed, 21 Oct 2026 00:00:00 +0000 https://aftermarket.dev/afterguard-released-to-put-a-lock-on-old-apps-that-have-none/ Aftermarket 0.6.0 adds AfterGuard, run as aftermarket guard. It’s for the app that was never meant to face anyone: an admin panel from 2014 with no login, an internal API with no rate limit, a debug page someone forgot to switch off. Rewriting those apps rarely happens. The usual fix is a few lines of nginx config that nobody tests, or an IP allow list that stops working the day someone moves offices. https://aftermarket.dev/case-study-putting-an-old-admin-panel-behind-afterguard/ Wed, 21 Oct 2026 00:00:00 +0000 https://aftermarket.dev/case-study-putting-an-old-admin-panel-behind-afterguard/ This case uses the examples/legacy-admin folder from the code repository: a small stand-in for a real old admin panel, and the guard.yaml and fixture that ship in every download archive. The commands and output below come from a real run of the downloaded aftermarket 0.6.0 in front of that panel. The situation The panel was written years ago for one office. It has no login. It lists and adds users under /admin/, serves a daily CSV under /reports/ that the billing system pulls, and has a debug page nobody remembers adding. https://aftermarket.dev/how-afterguard-was-tested-to-let-nothing-ambiguous-through/ Wed, 21 Oct 2026 00:00:00 +0000 https://aftermarket.dev/how-afterguard-was-tested-to-let-nothing-ambiguous-through/ A security gateway is only as good as its worst gap, so AfterGuard got a written threat model before any code, and every promise in it got a test. Six promises: nothing ambiguous gets through, a denied request never reaches the app, allowed traffic passes byte for byte, limits hold and memory stays bounded, a client can’t choose its identity or address, and no secret reaches a log. Nothing ambiguous This is the one that matters most.