Mercari Engineering Portal

Security

2025/12/02
LLM Key Server: Providing Secure and Convenient Access to Internal LLM APIs
AI
Security
Author: Hiroki Akamatsu
2025/12/01
Websocket XSS vulnerability discovery: My security journey at Mercari
Client side
Development
Security
Author: Patrick Klitzke
2025/11/06
Mercari’s Phishing-Resistant Accounts with Passkey
Development
Security
Author: KarinoTatsuya
2025/07/29
Locked Shields 2025 Event Report
Security
Author: Sana
2025/05/27
Removing GitHub PATs and Private Keys From Google Cloud: Extending Token Server to Google Cloud
Security
Author: Hiroki Akamatsu
2025/05/23
When Caching Hides the Truth: A VPC Service Controls & Artifact Registry Tale
Infrastructure
Security
Author: south
2025/04/25
gcp-sa-key-checker: A recon tool for GCP Service Account Keys
Infrastructure
Security
Author: Allan Wirth
2025/01/31
How to bypass GitHub’s Branch Protection
Security
Author: iso
2024/12/15
LLMs at Work: Outsourcing Vendor Assessment Toil to AI
AI
Security
Author: simon danny
2024/12/08
Streamlining Security Incident Response with Automation and Large Language Models
AI
Development
Security
Author: Florencio González

See more