Topics · Domain

Applied security

Security under production pressure: adversarial input, signal versus noise, and controls that operators can live with.

Includes
Agent identity, Cryptography, Isolation, Privacy, Provenance, WAF and traffic inspection
Pages
6
On the map 6 pages and the topics around it
Tap a dot to select it, tap again to open it.

Open in the full map →

  1. 2026

  2. articleAfter PHP Gate: A Blueprint for the Static Web

    Last week's PHP flaws reached every PHP installation serving web requests. My blueprint for sites and apps that run no code per request at all.

    Applied securityEdge systemsThe open webZolaWebAssemblyRustContext engineering

    27 min read · 10 chapters

  3. articleYour Agent Wants Root

    An agent with a shell tool is arbitrary code execution with a friendly face. A short tour of why Docker alone is not enough, what Firecracker, gVisor, and Kata actually solve, and a hardened sandbox you can wrap the post-one agent in today. Part two of The Agent Platform Handbook.

    AgentsIsolationApplied security

    16 min read · 9 chapters

  4. articleTraffic Replay as a Security Primitive

    WAF tuning is a guessing game because you cannot reproduce the traffic that triggered the rule. Deterministic replay changes that.

    Applied securityWAF and traffic inspectionEdge systemsReliabilityDeterminismDeveloper tooling

    12 min read · 8 chapters

  5. articleNotes from RSAC 2026

    Third time at RSA Conference, first time as a speaker. What I saw, what I heard, and what I am still processing.

    Applied securityAI for operationsAgentsPolicySovereigntySemiconductors

    23 min read · 11 chapters

  6. articleWhat Zentinel Is Really Optimizing For

    Every major proxy was a product of its time. Zentinel is built for this one: safety, operability, and the operator's ability to sleep.

    Edge systemsApplied securityWAF and traffic inspectionIsolationTrustObservabilityRustPingora

    18 min read · 8 chapters

  7. articleEdge Systems Are the New Backend

    Auth, policy, and business logic are migrating to the edge. The traditional backend is becoming a persistence layer.

    Edge systemsApplied securityDistributed systemsLocal-firstWAF and traffic inspectionRustPingora

    30 min read · 9 chapters

    Open the full search →