Engineering essays.
Deep-dives on AI code review, multi-agent architecture, and the craft of shipping reliable software at speed.
July 4, 2026SecuritySOC2 + ISO 27001 Compliance Checklist for AI Review Tools
SOC2 + ISO 27001 compliance checklist for AI code review tools — what to verify before procurement signs off.
9 min read· Mesrai Team
July 3, 2026SecurityHow AI Detects Hardcoded Secrets in Pull Requests
How AI tools detect hardcoded secrets in pull requests — pattern vs entropy vs context, and why semantic detection beats regex.
8 min read· Mesrai Team
July 3, 2026SecurityAI Code Review for the OWASP Top 10: A Complete Walkthrough
Complete walkthrough of how AI code review catches each OWASP Top 10 category in 2026 — concrete patterns, real catches, and where Mesrai fits.
8 min read· Mesrai Team
June 2, 2026SecurityThe SQL Injection Mesrai Caught in a Search Endpoint (Real Diff)
Real PR. Real diff. One missing parameterization in a search endpoint. Mesrai posted the review comment in three minutes — full walkthrough with the buggy code, the attack vector and the fix.
9 min read· Mesrai Team
January 25, 2026SecuritySecurity Code Review Best Practices: A Developer's Guide
You don't need to be a security engineer to catch critical vulnerabilities. Learn the top things to look for in every review.
2 min read· Mesrai Team