Research

Write-ups on specific security decisions and architecture questions. Each article separates locally tested evidence from design guidance and remaining limitations.

Cloud Security

• IAM at scale
• Kubernetes multi-tenancy
• Network segmentation
• Cloud detection and response

Application Security

• API and microservice trust boundaries
• OAuth 2.0 and OIDC
• SaaS multi-tenancy isolation
• AI-agent security

DevSecOps

• Secure CI/CD pipeline design
• IaC and policy as code
• Supply-chain evidence
• SecureObs architecture

Threat Intelligence

• Attack-path analysis
• Cloud breach case studies