Notes from
the file layer.
Engineering, security and product writing from the team building Uplint — what we learned handling other people’s files, and what we shipped because of it.
The Complete Guide to Secure File Uploads in 2026
File upload vulnerabilities rank among the most exploited attack vectors in web applications. This guide covers the modern approach to secure file uploads, from validation architecture to threat detection and compliance.
Bring Your Own Bucket, Now on Azure Too
From day one, your files have lived in your own cloud under your own credentials. Until now, that cloud had to be AWS. Today Uplint adds Azure Blob Storage as a first-class storage provider - so Azure-native teams get the same trust layer, storing straight into their own containers.
Three Clouds, One API: Uplint Now Stores Files in Google Cloud
Bring Your Own Bucket now covers Google Cloud Storage too. GCP-native teams get the same trust layer, storing straight into their own GCS buckets - and it took almost no new code, because GCS speaks S3.
One API, Many Buckets: Route Every File Context to Its Own S3
Real systems don't put everything in one bucket. Medical claims, avatars, and exports each want their own region, credentials, and lifecycle. Today, Uplint lets you register multiple S3 buckets per tenant and route each file context to the one that fits - with automatic fallback to a default.
What Is a File Trust Layer? (And Why Your App Needs One)
A file trust layer is infrastructure that validates and understands incoming files. It's becoming as essential as authentication. Here's why.
File Upload Security for Healthcare Apps: HIPAA Compliance Guide
HIPAA's security requirements for file uploads are strict. This guide covers PHI protection, audit logging, and the controls healthcare apps must implement.
The Hidden Cost of Accepting Every File Upload Without Validation
No validation sounds cheap until you count the real costs: corrupt data, false analytics, compliance failures, wasted storage, support burden. Here's the math.
How to Scan S3 Buckets for Blank and Corrupt Files (Free CLI Tool)
Your S3 bucket probably contains files you've never actually looked at. This guide shows how to scan them, detect problems, and clean up data corruption.
Building a File Upload Pipeline That Actually Protects Your Users
Most file upload pipelines fail silently. This guide shows how to architect one that detects problems, scales with trust, and maintains compliance at every layer.
Uplint vs Cloudinary: File Trust Layer vs Media CDN
Cloudinary optimizes media delivery. Uplint validates files before they enter your system. Different problems, different solutions, and why you might need both.
Uplint vs Filestack: Which One Do You Actually Need?
Filestack is a file handling service built for cloud storage and content delivery. Uplint is a file validation and trust layer. They solve different problems. Here's how to choose.
OWASP File Upload Security: A Developer's Implementation Guide
OWASP provides a comprehensive testing guide for file upload security. This post walks through each control, explains why it matters, and shows implementation patterns for production systems.
How to Detect Blank PDFs Before They Pollute Your Storage
Blank PDFs are a silent data quality crisis. They pass every standard validation check but contain zero meaningful content. Here's how to detect them before they corrupt your datasets.
Introducing Uplint: The Trust Layer Your Stack Is Missing
We've spent decades building infrastructure to protect what leaves our systems. We've built almost nothing to understand what enters them. That changes today.
Why File Extension Checks Are Not Enough
Your app checks .pdf and calls it done. But what about the blank PDFs, renamed executables, and corrupt files that pass every extension check? Here's what your validation is missing.
New dispatches, when there’s something worth saying.
No newsletter cadence, no filler. Follow on X or GitHub and we’ll post there when a new one lands.