Field Notes · 5 min
Field NotesGuardrail, Not Roadblock.
Getting a security tool adopted without becoming the thing that stalls the sprint.
Read →Articles
“The playbook I wish I’d had.”
Implementation-level guides for securing cloud, data, and agents.
Security Automation · 7 min
Security AutomationThe Alert Is Attacker-Controlled
Adding an LLM to your triage workflow means the attacker gets a vote.
Read →Agent Security · 7 min
Agent SecurityNo Last Day
Every employee who leaves gets an offboarding. The agent your team stood up in March never will. Protection that depends on where data sits can't keep up with something whose job is to move it.
Read →Field Notes · 8 min
Field NotesThe Package Doesn't Exist Yet
Coding assistants invent software names. Attackers can claim them first. The fix is a policy and architecture decision, not a coding one.
Read →Agent Security · 11 min
Agent SecurityAssume Your Agent Is Fooled
Prompt injection matters because of what the agent is allowed to do next. Tool permissions, output channels, and agent identity are where that gets decided — or doesn't.
Read →Cloud Security · 9 min
Cloud SecurityOwner Means Root
Owner and User Access Administrator are root for everything beneath them, and Global Administrator is one setting from both. The fix is removing standing access: PIM for people, tighter controls for the identities PIM can't cover.
Read →Cloud Security · 8 min
Cloud SecurityThe Deny Is the Perimeter
SCPs set the ceiling that still holds when an IAM policy is wrong. Paired with resource control policies, they're how you draw a real boundary around your data.
Read →Agent Security · 5 min
Agent SecurityMemory Is a Data Store
When an agent remembers what matters to you, it can also remember what an attacker told it. Persistent memory needs the same governance as any other place sensitive data lives.
Read →Data Security · 8 min
Data SecurityThe Paste Is the Leak
Running DSPM and DLP to hunt for shadow assistants taught me two things: the leaks are bigger than you expect, and much of the noise comes from the assistants you already approved.
Read →Data Security · 5 min
Data SecurityFind It Before You Label It
Shadow data isn't a tooling gap. It's an inventory gap.
Read →Security Automation · 5 min
Security AutomationWho Gets to Say Yes
Security automation that doesn't become another thing to babysit.
Read →