Zero Trust, explained without the buzzwords
"Zero Trust" might be the most abused phrase in security. Every vendor slaps it on a box and charges you extra for it. Let me strip the marketing of…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
Cyber Resilience Implementation Guide: Zero Trust, AI Security and Ransomware Recovery
Cyber resilience has become a board-level operating capability, not a security slogan. The old goal was to prevent every incident. The realistic goa…
Building Enterprise SaaS Features: Audit Logs, Role-Based Access Control, and SSO
Introduction & Industry Context For product-led growth (PLG) startups and scaling mid-market Software-as-a-Service (SaaS) providers, moving upma…
Extending Zero Trust to Your Agents' Memory
Assume the agent is compromised. Then decide where its memory lives. I ended a piece two weeks ago with a claim: a catalog is where governed agent m…
Protecting a personal web app with Cloudflare Access and email OTP
This article is an English translation of the original Japanese article. I deployed a personal task management app to Cloudflare Workers, but I did…
Architecting Zero Trust for Enterprise AI Pipelines
Enterprise AI will never be truly secure if Zero Trust stops at the network boundary. It must extend across the entire AI pipeline, from data ingest…
Beyond the Playbook: Architecting Defenses Against Autonomous AI Threats
Beyond the Playbook: Architecting Defenses Against Autonomous AI Threats We used to build security systems assuming the attacker was human. That ass…
Securing the code that decides who Entra trusts: a Function App and a Logic App, end to end
Part 1 of this series, [[Entra-Extensibility-Is-Control-Plane]], made the case that every Microsoft Entra extension point hands a piece of the Entra…
Microsoft Entra extensibility is a gift. It is also Control Plane.
Microsoft Entra is the Zero Trust policy enforcement engine sitting at the intersection of identities, endpoints, AI agents, networks and data. Ever…
cfzt: как я обернул Zero Trust Cloudflare Tunnel в одну команду и зачем туда пришлось добавить вотчдог для QUIC
В домашней инфраструктуре у меня крутится десяток сервисов: Grafana, Zabbix, n8n, Navidrome, ollama, БД, пара дашбордов и тестовых API. Ка…
How to Secure Local LLM Model Files: A Zero Trust Guide
When you download a model file for your homelab, you aren't just grabbing data; you are importing an untrusted dependency with execution privileges.…