Posts
All the articles I've posted.
-
Azure is insecure by default (by design)
Azure's defaults optimise for working in five minutes, not being safe in five minutes. The secure posture is opt-in — and closing that gap is your job.
-
Feature flags as an architectural tool
A feature flag looks like an if statement with a dashboard. It's really an architectural decision — you've split deploy from release and made it reversible.
-
The risk equation
A forty-year-old piece of security maths that tells you whether to fix a risk, insure it, avoid it, or live with it — and how to show your working.
-
How much security is too much
Nobody got fired for adding another control. But security you can't afford to run, or that everyone routes around, isn't security — it's theatre with a budget.