Mikhail Dorokhovich
HomeAboutExperienceProjectsCompetenciesBlogContact
Collaboration
Mikhail Dorokhovich

Senior Full Stack Developer with 9+ years of experience specializing in building robust, scalable applications with Ruby, JavaScript, Go, Python, and more.

Available for part-time work

Quick Links

  • Home
  • About
  • Projects
  • Blog
  • Contact
  • Terms of Use
  • Privacy Policy

Connect

GitHub ProfileLinkedIn ProfileTelegram Contact

Contact

mikhail@dorokhovich.com

All information provided on this website is for informational and portfolio purposes only and does not constitute a binding offer. Project descriptions are either hypothetical, anonymized, or published with client consent. Any resemblance to real companies or products is coincidental unless explicitly stated. All trademarks and logos remain the property of their respective owners.

The owner of this website disclaims all liability for any actions taken based on the information herein. The site and its contents are provided "as is" without warranties of any kind, either express or implied.

© 2025 Mikhail Dorokhovich. All rights reserved.
By using this website, you agree to our Terms of Use and Privacy Policy.
All blog posts and code samples on this site are licensed under the MIT License unless otherwise stated.
Language:

Blog

Thoughts, tutorials, and insights on web development

—
Security
Inside MCP: What an MCP Server Is Made Of
2026-08-0521

Take away the vocabulary and an MCP server is a list of tools, a description of each written to be read by a machine, and two ways of delivering a message. Plus authorization, and three ways of failing — the third of which no specification can catch, and it cost me twelve published articles.

MCP
API
Architecture
Security
Authentication
Spec
AI
Read Article
Blocking Unsafe Code: Security Audits in GitHub Actions
2025-09-017

Step-by-step guide to integrating bundler-audit, license_finder, and OSV Scanner into CI/CD pipelines — with YAML examples that block deployments until issues are fixed.

GitHub Actions
Ruby
Security
Supply Chain
DevSecOps
Read Article
How RubyGems Protects Us From Supply Chain Attacks (And Why Every Ruby Developer Should Care)
2025-09-016

What happens behind the scenes during gem install: automated scanning, risk scoring, retroactive scanning, incident response — and why companies should support RubyGems critical infrastructure.

Ruby
RubyGems
Security
Supply Chain
DevSecOps
Read Article
Keycloak and Identity Federation: A Comprehensive Guide
2024-09-0814

A comprehensive guide to Keycloak and identity federation, covering modern IAM, authentication functions, user experience, and security benefits.

Keycloak
Identity Federation
IAM
Authentication
Security
Read Article
Understanding Realms, Clients, and Roles in Keycloak
2024-07-185

A comprehensive guide to understanding the core concepts of Keycloak: Realms, Clients, and Roles for effective identity and access management in your applications.

Keycloak
Authentication
IAM
Security
Identity Management
Read Article