Skip to content

Posts tagged

#tooling

9posts

September 2026
  1. Cloud SecurityField Note

    ASPM: What Actually Changes When You Merge SAST, DAST, and SCA Into One Risk View

    Three vendors independently ship ASPM in 2026, converging on one idea: stop treating scanner output as separate alerts, rank by what's actually reachable and exploitable. What's verified, what's vendor framing, and one vendor's bet on AI-written code.

    4 min read
July 2026
  1. Cloud SecurityField Note

    Shift-Left → Auto-Remediation → Agentic Remediation: The 2026 Vendor Landscape and a Palo Alto Cortex Cloud Deep Dive

    From Checkov blocking PRs in CI to AI agents executing one-click fixes across code, cloud, and SOC — a vendor-by-vendor map of how cloud security moved from finding issues to fixing them, and where Palo Alto's Cortex Cloud platform sits in the race.

    9 min read
  2. AI GuardrailField Note

    Open source AI agent OS — Goose and the 2026 agentic ecosystem

    Goose by Block (now under Linux Foundation), Alibaba's Anolis AgenticOS, and the open source agentic AI stack shaping how agents run, deploy, and get secured.

    6 min read
  3. AI Guardrail

    AI Guardrail Engineering

    Field note series on AI Guardrail Engineering — covering the 2026 trend landscape, 6-layer production defense, bypass techniques, and the open source agent OS ecosystem. For Cloud Security and AI engineers.

    1 min read
  4. Cloud Security

    Cloud Security Engineering 2026

    Field note series on Cloud Security Engineering — shifting skills, modern tooling, and how engineers navigate a landscape that has converged with AI and agentic systems.

    1 min read
  5. AI GuardrailField Note

    AI guardrails — 6 layers you must have in production

    Most teams install one or two guardrails and call it 'secured'. This is the complete 6-layer reference for LLM production — with tools, frameworks, and the false positive costs vendors never tell you about.

    5 min read
  6. AI GuardrailField Note

    Cloud, AI, agentic OS — 2026 trends for Gen Z

    Cloud security has shifted to intent filtering. AI has become an agent. Agents have become an OS. Four trends Gen Z needs to understand now.

    12 min read
  7. Cloud SecurityField Note

    Cloud security baseline — the foundation that needs to be right from day one

    Cloud Security Baseline (CSB) is the minimum set of controls that must exist before the first workload deploys. Here's the practical breakdown — from CIS Benchmarks, drift detection, to automatically enforcing baseline.

    5 min read
  8. Cloud SecurityField Note

    Becoming a cloud security engineer in 2026 — skills that have shifted

    The role of cloud security engineer has changed more in 2 years than in the 5 years before. Here's an honest breakdown: what's stayed the same, what's changed, and what new skills you need now.

    7 min read