The intersection of identity, integration, API management, and application security.

The RCBJ.NET blog is run by Iya Cyber Security Solutions, LLC (IyaSec), a boutique cybersecurity consulting firm specializing in application security, API security, identity, and API management. We have worked in the financial services, retail, and insurance industries, designing and implementing secure solutions for large enterprise platforms that service a wide variety of applications, as well as product development for technology companies.

We advocate a security-first architecture design approach to applications and systems. Our solutions follow a specification-based, vendor-agnostic philosophy to the greatest extent possible to avoid vendor and product lock-in. We specialize in multi-vendor solutions that involve heavy integration while maintaining security.

What you will find here is the working notebook behind that practice: protocol walkthroughs, configuration recipes, troubleshooting write-ups, and the occasional opinion piece — some of it written the same week the specification landed, some of it now a useful record of how these systems used to work.