.NET · Cloud · DevOps
Hi, I'm Imran Emon.
I build production .NET backends and the infrastructure they run on — from EF Core and Hangfire inside the application, to Docker, Kubernetes and Terraform underneath it. Most of what I write here comes from real systems I shipped and real incidents that taught me something.
Currently building VettifyNG, a legal case management SaaS serving four portals from a single .NET 10 API.
Recent posts
- 2026-10-11
A Feature Flag Is Not a Security Precondition — So We Made the Build Check Its Own Version
A flag was the only thing gating a data-disclosure fix. We replaced documentation with a runtime version gate that fails closed, then spent five review rounds removing its own bypasses.
dotnetsecurityarchitecturetesting - 2026-10-10
The Exception Table That Fails Open
A crash-handling middleware that looks rigorous but silently routes every unlisted error to a 500 — and why the default branch is the whole security posture.
securitydotneterror-handlingarchitecture - 2026-10-10
Ten OpenAI Model IDs Die on October 23rd
A pile of model ids I inherited from config files stop serving on a fixed date, and the only error you get is a bare 404. How to find every model id your repo references before the date lands.
aillmoperationsdotnet - 2026-09-28
AWS vs Azure vs GCP for a .NET SaaS: The Limits That Actually Decide It
Not another pros-and-cons list. The documented numbers that decide architecture for a Postgres + containers + background-jobs stack: serverless timeouts, the 230-second Azure wall, Cloud Run's CPU billing model, and who patches your database.
awsazuregcpdotnetarchitecture - 2026-09-28
EF Core Lessons From a Multi-Tenant SaaS: Provider Drift, Migration Holes, and the Review Gate That Prevents Them
Six months of EF Core in production produced a written checklist we now enforce on every migration PR. This is the checklist, and the incidents that made each line necessary.
dotnetef-corepostgresqlarchitecture
Things I work with
Projects
VettifyNG
Legal case management SaaS — four portals (user, lawyer, corporate, admin) on one API. Case intake with document virus scanning, payment flows, lawyer matching and opinion workflows, Hangfire background jobs, OAuth (Google/Facebook) with deauthorize & data-deletion callbacks, Telegram bot integration, deployed on hardened VPS via GitHub Actions CI/CD.
Visit app.vettify.site →