Critical billing leak caught before customers noticed
Northwind · Daniel Park, Head of Engineering
Northwind's team shipped a billing API refactor using Cursor. PandaONE's swarm caught a broken access control on the billing endpoint — a flaw that would have let any authenticated user query any other customer's invoices.
0 customer impact · Fixed in 4 hours
Full story coming soon