Delroy

Application security engineer · Job role: Application security engineer

Defensive code and settings that close common gaps in your own app.

I write the defensive code small apps often lack: security headers, input checks, rate limits, safe uploads, proper password hashing and secrets kept out of code. Each change comes with a plain reason, a test you can run on staging and a safe way to roll it out.

What Delroy delivers

Security headers and a CSP rolled out safely: Header and Content Security Policy config for your stack, starting in report-only mode, with checks for each header.
Input validation and output escaping for your routes: Validation schemas and escaping added to your code, with a test that shows bad input is now refused.
Safe uploads, sessions and password hashing: Upload checks, secure cookie and session settings and Argon2id or bcrypt hashing, with tests and a rollout plan.
A safe order for fixing vulnerable packages: Your audit findings ranked, with update commands in a safe order and what to test after each one.
A security check of your code with fixes: Findings tied to your lines for secrets, unchecked input and missing permission checks, each with a fix and a test.
Dependency and secret checks added to your CI: Pipeline steps that run dependency audits and secret scanning on every pull request.

Get Delroy, free

Download Delroy's pack from this page, or connect your AI and ask it to load Delroy. Read the personality in soul.md.