#tooling

From Checkov blocking PRs in CI to AI agents executing one-click fixes across code, cloud, and SOC — a vendor-by-vendor map of how cloud security moved from finding issues to fixing them, and where Palo Alto's Cortex Cloud platform sits in the race.

Goose by Block (now under Linux Foundation), Alibaba's Anolis AgenticOS, and the open source agentic AI stack shaping how agents run, deploy, and get secured.

Field note series on AI Guardrail Engineering — covering the 2026 trend landscape, 6-layer production defense, bypass techniques, and the open source agent OS ecosystem. For Cloud Security and AI engineers.

Field note series on Cloud Security Engineering — shifting skills, modern tooling, and how engineers navigate a landscape that has converged with AI and agentic systems.

Most teams install one or two guardrails and call it 'secured'. This is the complete 6-layer reference for LLM production — with tools, frameworks, and the false positive costs vendors never tell you about.

Cloud security has shifted to intent filtering. AI has become an agent. Agents have become an OS. Four trends Gen Z needs to understand now.

Cloud Security Baseline (CSB) is the minimum set of controls that must exist before the first workload deploys. Here's the practical breakdown — from CIS Benchmarks, drift detection, to automatically enforcing baseline.

The role of cloud security engineer has changed more in 2 years than in the 5 years before. Here's an honest breakdown: what's stayed the same, what's changed, and what new skills you need now.