leastprivilege
Latest
Vaultwarden and HashiCorp Vault: Different Jobs in the Same Secrets Architecture
Yesterday I wrote about moving autonomous-agent secrets out of a flat .env file. Why I kept Vaultwarden for people and recovery, added HashiCorp Vault for workloads, and treated identity, audit, PKI, and tested recovery as part of the deployment rather than follow-up work.
The Map and the Floor
After years of working, teaching, writing in this field, the pattern I see most in newcomers is not lack of ability. It is freezing...
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
The Innermost Ring: Hands-On Identity and Encryption Labs from the Cybersecurity Architect's Handbook, Second Edition
Every control we design as architects ultimately serves one of two questions. Who is allowed to do what — and is the data still protected ... Access control answers the first. Data protection answers the second. Together they form the innermost ring of a defense-in-depth architecture...
books
·
You made It Possible - Coming Soon: Cybersecurity Architect's Handbook, Second Edition — Bigger, Bolder, and Battle-Tested
When the first edition of Cybersecurity Architect's Handbook: An End-to-End Guide to Implementing and Maintaining Robust Security Architecture hit shelves, the goal was ambitious but clear...
books
·
SALE - Packt's e-book Sale Ends 6/30
Packt's $9.99 eBook sale, which runs only until Monday, June 30. This is your chance to get my book, Cybersecurity Architect's Handbook, at a reduced price. They only do this at certain times of the year...
AI
·
Insights and Reflections "Deep Dive"
This "Deep Dive," generated through AI in a podcast style, provides a review of the main themes and important ideas presented in the "Cybersecurity Architect's Handbook."