Books

Another Production Field Manual: protect APIs before overload becomes an outage with rate limiting, throttling, and tenant fairness.

Learn how to stop retry storms, contain dependency failures, and make resilient microservice calls observable, bounded, and production-ready.

Every web application has security headers, cookies, TLS configurations, and CORS policies that need to be correct. Most teams find out they're wrong only after a penetration test — or worse, after an incident. This book shows you how to build a scanner that catches these issues automatically. You'll create a Python CLI tool that uses Hurl (declarative HTTP testing) to assert security properties, SSLyze to validate TLS protocol versions, and AI to generate specific remediation for every failure it finds. The output: structured JSON reports, visual HTML dashboards, and AI-generated security posture assessments. **What you'll build:** - 9 declarative Hurl security test files (headers, cookies, CORS, HSTS, CSP, CSRF, redirects, TLS) - A preprocessor that handles domain substitution and authentication - An output parser with built-in remediation guidance for every test - A TLS scanner validating SSL 2.0/3.0 disabled and TLS 1.2/1.3 enabled - An AI analyzer that generates context-specific fixes using Ollama, OpenAI, or Bedrock - An HTML reporter with dark-themed visual dashboards - Docker multi-architecture deployment - CI/CD pipeline with GitHub Actions **Who this is for:** - Developers who want security checks before deploying - DevSecOps engineers building CI/CD security gates - Penetration testers who need quick baseline assessments - Security students learning web vulnerability concepts hands-on - Platform teams enforcing security standards across services Every failure includes: what was expected, what was received, why it matters, how to fix it, and a documentation link. AI adds domain-specific code examples on top.

Software and infrastructure only create value when they pull in the same direction as the business. This book shows IT leaders how to get there: from shaping IT strategy and the architecture roadmap to the daily discipline of IT and architecture governance, all built on a pattern-based approach that adapts to your organization rather than forcing it into a template.Grounded in established frameworks such as TOGAF, COBIT, and ITIL, it pairs solid fundamentals with numerous real-world examples — and gives growing weight to compliance and IT security, now central concerns of any IT management agenda.This English edition is based on the German standard work on the subject, fully revised in its 4th edition (late 2024). It is current with TOGAF 10 and reflects recent developments in business-oriented enterprise architecture — including the open-source tool EDGY and patterns for digital strategy — alongside the latest trends in IT risk management and cybersecurity architecture.

This Developer's Guide is the "Project #1" from the also included "Building Role-Playing Browser Games" workbook. It leads you through the development of the "St. George Battles the Dragons" Role-Playing Game in both Construct v3 & v2 encoding. It's perfect for novices, experienced web developers, and anyone wanting their own bespoke game, artwork, and features.

What you've got here is a hands-on walkthrough of Spring Boot 4.0, where we'll build a single application from start to finish, using the command line and then packaging it as a JAR at the end. Each chapter adds one real capability, like a REST endpoint, a database, an error handler, a security layer or a test suite. Each chapter gets straight into the code, and you can run, modify and break it to see what happens.There's even a dedicated troubleshooting chapter at the end that deals with the exact errors beginners actually encounter in practice, not just hypothetical ones.

As the author, I (Anshuman Mishra) have written this book with the spirit of mentorship — not just to explain how chatbots work, but to help you build one confidently and ethically. I have taught AI, programming, and computer science for nearly two decades, and I have seen countless students struggle to bridge the gap between theory and implementation.This book closes that gap. It teaches you what to do, why to do it, and how to do it right. It’s not just a manual — it’s a journey from curiosity to mastery.You are not just learning to build a chatbot; you are learning to create intelligence — responsibly, creatively, and with purpose.

A practical backend interview reference covering modern Python and Django development (397 manuscript pages).

Become a Job-Ready API Automation Engineer Using PlaywrightAPI testing is now a must-have skill for modern QA engineers. Companies expect testers to validate backend systems, automate workflows, and integrate tests into CI/CD pipelines.This practical guide teaches you how to master API Testing using Playwright and TypeScript from scratch — even if you are transitioning from manual testing.In this book, you will learn how to:✔ Understand APIs, HTTP, and JSON from a tester’s perspective ✔ Write real API automation tests using Playwright ✔ Handle authentication, dynamic data, and environments ✔ Design a scalable API test automation framework ✔ Integrate tests into CI/CD pipelines ✔ Combine API and UI testing for faster automation ✔ Prepare for API testing and Playwright interviewsBy the end of this book, you will have the knowledge and confidence to build professional API automation frameworks and advance your QA career.Perfect for: QA Engineers, Manual Testers, Automation Testers, SDET Aspirants

A practical backend interview reference covering modern Java and Spring Boot development (1363 manuscript pages).

We'll build an agent step-by-step, starting with a small loop that accepts input and produces structured output. As we go, we'll add tools, validation, model switching, runtime adapters, and packaging techniques that'll let the agent move from a simple script to a reusable application.

A step-by-step Playwright + TypeScript guide for manual testers or who wants to switch to becoming automation engineers.

Understanding “red–green–refactor” is easy; applying it effectively in real-world systems is not. This book bridges that gap by showing you how to practice Test Driven Development in the context of building robust, production-ready .NET Core microservices.

Value Stream Mapping for modern software teams. Learn how to measure lead time, expose bottlenecks, eliminate waste, and build a delivery system where value moves efficiently from idea to production.

Design resilient, production-ready microservices architectures with confidence. Learn how API gateways, service meshes, and observability tools work together to build scalable and secure distributed systems.