Insights on local-first security, compliance, and secure secret management for SMBs.
Fuzzing proves the absence of crashes, not the absence of bugs. Inside OxidVault's cargo-fuzz setup for the vault file, SSH key, and audit log parsers — and what the numbers actually mean.
A SHA-256 hash chain makes an audit log tamper-evident against casual edits — not against forgery. How we found the gap in our own claim and fixed it with HMAC checkpoints in an offline-first password manager.
A practical comparison of local-first and cloud-based password managers for small and medium businesses, with a focus on data sovereignty and compliance.