Build things that work.Explain how they actually work.
I'm Mohit, a software engineer at Abnormal AI, building AI detection systems for email threats. Interested in backend systems, architecture, and performance at scale, and share notes about what I learn along the way.
Evidence over adjectives.
Advanced detection at Abnormal
Leading attachment-based threat detection for email security — catching QR, link, OCR, and brand-impersonation attacks across 15+ file types with ML models and AI agents.
professionalRent and education payments
Owned CRED Max rent payments end-to-end - rebuilt the journey, scaled it, and added KYC, fraud controls, OMS migration, and multi-pricing.
professionalPay Tab
Built the bill management and discovery experience on CRED Pay Tab - ranking, search, reminders, reward loops, and the re-architecture behind it.
Notes from the workbench.
SecurityFile Attack Deep Dives: Office Documents as an Attack Surface
Every way an Office document attacks: macros, remote templates, embedded objects, hyperlinks, QR handoffs and invoice fraud, plus the signals that catch each.
SecurityFile Attack Deep Dives: HTML as an Attack Surface
Every way an HTML page attacks: smuggling, external fetches, QR handoffs, phone callbacks, credential phishing, job scams, and AI prompt injection.
SecurityHow File-Based Attacks Land: A Detection Engineer's Field Guide
A practical taxonomy of how malware and phishing arrive as files, why classic controls miss them, and how detection should think.
GolangUltimate Makefile for Golang
Boost your productivity and save time with ultimate Makefile for Golang projects.
LifeWhat I Use: Products and Softwares
List of what I use in my day to day life ranging from terminal, editors, softwares, devices to accessories
GolangIn-Memory Cache in Go with TTL
Build an in-memory cache in Go: map plus RWMutex, TTL expiry, and a generics version with a typed key and value.
GitSecuring Git: Remove Sensitive Information
Protect your code from security breaches by using BFG tool to remove sensitive information from Git history. Learn how to do it in this comprehensive guide.
GitPull Request Templates (GitHub, Bitbucket)
A PR template that gets used: the sections worth keeping, plus where the file lives on GitHub, GitLab and Bitbucket.
GolangGo Naming Conventions: A Practical Guide
Package, interface, function and variable naming in Go, with the rules that matter and the habits worth dropping.