From the bridge

RSS

Practical maritime compliance.

Plain-English writing for commercial operators — USCG rules, Sub M, STCW, cyber, and the free tools we built along the way. No regulatory fog. No SEO filler.

11 min read

We Left a Demo Backdoor Open in Production for 30 Days. Here's the Seven-Layer Fix.

On 2026-04-16 we shipped a demo login to production with a hard-coded test/test credential. We caught it on 2026-05-16. Anyone who guessed the URL had full admin access for thirty days. This is the timeline, the root cause, and the seven-layer fix — written for the engineers who'll inherit this codebase, not the lawyers.

#security#post-mortem#incident#engineering

Tool

Stuck on a compliance question?

The free 46 CFR compliance calculator turns 8 inputs into a real checklist with citations — same checks a USCG inspector runs through.

Try the free calculator →

Built for evaluation-grade trust