security-hardening

---
name: security-hardening
description: Application security covering input validation, auth, headers, secrets management, and dependency auditing
---

# Security Hardening

## Input Validation

Validate all input at the boundary. Never trust client-side validation alone.

```typescript
import { z } from 'zod';

const CreateUserSchema = z.object({
  email: z.string().email().max(255),
  name: z.string().min(1).max(100).regex(/^[a-zA-Z\s'-]+$/),
  age: z.number().int().min(13).max(150),
});

fu