DevSecOps
9 essays tagged DevSecOps.
Controls Your Agent Cannot Rewrite
Three kinds of control shape what an agent can do, and they are not equally strong. One is advice the model may ignore, one is enforced by the tool, and one is enforced somewhere the agent cannot reach. Knowing which you have written is the whole game.
AI Security, Made Simple: Defence in Depth for Agents
Treat an AI agent like an eager developer: capable, fast, well-meaning, and guaranteed to occasionally overreach. Give it its own machine, its own accounts, and the least privilege it needs.
The Panic Dividend of AI Security
Mythos did not create a new cybersecurity risk. It exposed one that has been building for years. Be sceptical of anyone now selling you a solution to the panic.
Software Delivery for a Changing System
A practical guide to separating developer concerns, CI, Continuous Delivery, and Deployment, how release manifests work as a master SBOM, and why domain-driven library design holds it all together.
Securing Your JavaScript Dependencies: What Every Organisation Needs to Know
In November 2025, attackers compromised popular npm packages. The attack didn't exploit a bug. It exploited trust. What happened, why traditional defences fall short, and what you can do.
Enterprise Security Tools Without Breaking The Bank
When building a new security tool, we faced a problem. How do you convince security-conscious users to install software that requires system-level permissions?
Deploying Logic App Standard Workflows
Standard mode Logic Apps behave quite differently when deploying resources. It took much research to find a stable way to deploy workflows and, especially, workflow connections. Here is a walkthrough of the deployment steps.
From Proof-of-Concept to Controlled Deployment of Azure Resources using Pulumi
Previously, we looked into deploying Azure resources uing infrastructure-as-code using Pulumi. In this post, I am walking you through creating the C# (or TypeScript etc) code from manual prototyping and proof-of-concept deployments in Azure to making them using Pulumi.
Automating Deployments using Infrastructure as Code with Pulumi
To handle Infrastructure-as-Code workflows, I use a product called Pulumi. It is built on top of the open-source platform Terraform. Pulumi handles versioning and recreation of cloud resources, handles state and shows a preview of what changes will occur.