Engineering blog

SigV4 looks simple: sign a request, check the signature. Then you implement canonicalization, clock skew, and a cache that isn't allowed to hold your key.

Presigned URLs are replay attacks you commit on purpose. How SigV4 signs the clock, what a presigned URL grants on Tigris storage, and what it costs you.

Storage-protected Mastra agents: a reference implementation. Isolated session forks, validate before promoting, contain compromise at the storage layer.

LogSeam transforms log management with Tigris, achieving massive cost savings and performance improvements in their security data lake architecture.

We detected fake CAPTCHAs on our platform. Here's what we did to remove them and stay a step ahead of attackers.

Tigris has achieved SOC 2 Type II certification, signifying our high standard for security and operations.

Tigris is a globally available, S3 compatible object storage service. In the first post of the series we will share the details of how we have built the authentication and authorization support in Tigris.

Client-side encryption, a fortress of digital privacy, empowers users to safeguard their information with an impenetrable shield. By arming individuals with the cryptographic key to their data, this formidable approach ensures an unparalleled level of control, fortifying the sanctity of personal inf…

Evolution of how password based authentications evolved over time and how it led to Secure Remote Password.