Attack surface: include the forgotten paths
Reviewing only the main application misses integrations.
Security architecture
Design decisions, trust boundaries and threat analysis.
Reading on this topic
Availability: budget expensive operations
Request counts can hide large differences in work.
Microservices: preserve decision context when delegating
Technical identity alone does not explain the user's request.
Secure design: defaults are product decisions
The easiest path often determines actual behavior.
Threat modeling: end with testable decisions
Useful diagrams connect threats to actions and owners.
Thiago Lima Soneti da Silva (Thiago Silva) — Cyber Architect and technical lead at Lima e Silva Tecnologia.