Layerd AI Docs

Understand attacks. Build safer applications.

Practical, example-led guides to how web and API attacks work, how to test for them, and how to defend against them.

Explore web attacks Encryption & TLS

Learning paths

Start with a topic and work through it guide by guide.

Web Attacks SQL injection, XSS, SSRF, request smuggling and more. How each attack works, real-world breaches, and how to prevent it. 32 guides Encryption & TLS TLS handshakes, certificates, cipher suites, HSTS and forward secrecy, explained from first principles. 8 guides

Popular guides

Web Attacks SQL Injection Attacks How attackers inject SQL into queries to read, change or delete data, and how parameterised queries stop them. Web Attacks Cross-Site Scripting (XSS) How injected scripts run in other users' browsers to steal sessions and data, and how encoding and CSP prevent it. Web Attacks Server-Side Request Forgery (SSRF) How attackers make your server request internal systems and cloud metadata, and how to restrict outbound requests. Web Attacks Broken Access Control (IDOR) How changing an ID in a URL exposes other users' data, and how to enforce authorisation on every request. Web Attacks JWT (JSON Web Token) Attacks How weak signing, algorithm confusion and poor validation let attackers forge JSON Web Tokens. Web Attacks HTTP Request Smuggling How front-end and back-end servers disagree on request boundaries, and how attackers exploit the gap. Encryption TLS/SSL Basics How TLS encrypts and authenticates web traffic, from the handshake to choosing secure settings. Encryption Certificate Chain How browsers verify certificates through a chain of trust back to a root certificate authority.

Protect your applications with Layerd AI

Next-generation web and API security powered by intent-based detection and self-learning AI.

Cloud WAF Comprehensive cloud-native web application security. AI-Powered DDoS Protection Intelligent defence against volumetric attacks. Bot Protection Advanced bot detection and mitigation. Advanced L7 Firewall Application-layer security with precision control. Adaptive Rate Limiting Smart traffic management and abuse prevention. API Security Full-stack API discovery, detection and enforcement. Content Security Policy Deploy CSP without breaking your site. PCI DSS 4.0 ready.

Talk to the Layerd AI team

Questions about these guides, or about protecting your own applications? We'd like to hear from you.