Koen M. Vermeulen

Dutch software architect. Built multi-tenant carrier middleware for 1k+ shippers; advocates idempotency and good logs.

Amsterdam
Koen M. Vermeulen
Sender-Constrained Tokens for Carrier Integration: Preventing Token Replay Attacks in Multi-Tenant Middleware

Sender-Constrained Tokens for Carrier Integration: Preventing Token Replay Attacks in Multi-Tenant Middleware

The Postman workspace breach exposed 30,000 workspaces containing live API keys and access tokens. Developers had been saving production secrets—live API keys, access tokens, even sensitive healthcare records—in their testing environments without proper access controls. Meanwhile, threat actors exploited OAuth tokens stolen from the Salesloft/Drift integration

By Koen M. Vermeulen
Specification-First Carrier Integration: Learning from Telecommunications API Standardization to End the Multi-Carrier Chaos

Specification-First Carrier Integration: Learning from Telecommunications API Standardization to End the Multi-Carrier Chaos

The telecommunications industry achieved something most logistics platforms consider impossible: standardized APIs that work consistently across operators, with CAMARA's Fall25 release now delivering 60 total APIs that replace fragmented, operator-specific approaches with a predictable, interoperable fabric. Meanwhile, carrier integration middleware continues wrestling with the same chaos that telecom

By Koen M. Vermeulen
Container Drift Detection for Multi-Tenant Carrier Integration: Adapting Runtime Security Patterns to Prevent API Compatibility Breaks

Container Drift Detection for Multi-Tenant Carrier Integration: Adapting Runtime Security Patterns to Prevent API Compatibility Breaks

Your carrier integration platforms are immutable until they're not. Container drift refers to unintended or unauthorized manual changes, updates, patches, or other modifications made during its runtime, and this concept extends naturally to multi-tenant carrier middleware where tenant-specific customizations, API adapter modifications, or dependency updates can alter your

By Koen M. Vermeulen
Coordination Patterns for Distributed Rate Limiting in Multi-Carrier Integration: Preventing Race Conditions Without Sacrificing Performance

Coordination Patterns for Distributed Rate Limiting in Multi-Carrier Integration: Preventing Race Conditions Without Sacrificing Performance

When your multi-carrier integration platform starts handling thousands of requests per second across FedEx, UPS, DHL, and regional carriers, traditional rate limiting breaks down. The culprit? In a distributed environment, the "read-and-then-write" behavior creates a race condition, which means the rate limiter can at times be too lenient.

By Koen M. Vermeulen