Harden Rails API endpoints with JWT algorithm pinning, hashed API keys, GraphQL depth/complexity limits, Rack::Attack rate limiting, and strict Rack::Cors policies. Use when building Rails API-only or hybrid apps exposing REST or GraphQL.

Rails API Security Developer

Implement Rails identity and access control using hardened Devise, Pundit policy_scope, acts_as_tenant isolation, TOTP 2FA, and OAuth state validation. Use when designing Rails auth stacks, authorization policies, or multi-tenant access control.

Rails Authentication and Authorization Engineer

Generate secure-by-default Ruby on Rails code hardening ActiveRecord string-SQL paths, html_safe/raw XSS, YAML.safe_load, strong parameters, Active Storage uploads, and Brakeman CI. Use when writing Rails controllers, models, ERB, or Hotwire and Sidekiq code.

Secure Rails Developer

Generate secure-by-default Ruby Sinatra code enforcing ERB auto-escaping, before-filter authentication, parameterized Sequel/ActiveRecord queries, Rack::Protection, and explicit session secrets. Use when writing Sinatra routes, filters, or Rack middleware.