Know Your Kontrabidas: A Developer’s Wake-Up Call from the Public Internet

Sharing a little blog I wrote about something I encountered this week while deploying my public site.

I’m used to working on internal corporate tools, where a lot of the security setup is already handled for you. But once I pushed something public, I quickly saw bots hitting my contact form endpoint.

The post is about that small wake-up call and the basic layers I added after: Cloudflare, Turnstile, a Worker in front of my API, header checks, and rate limiting.

Not expert-level security advice. Just sharing what I learned from getting humbled by the public internet.

Know Your Kontrabidas: A Developer’s Wake-Up Call from the Public Internet | jjosh