Engineering deep dives, not tutorials.
System design, distributed systems, and production patterns for engineers who build at scale.
Latest Articles
Fresh deep dives into system design, security, and engineering.
AI Video Generation in 2025 — Models, Costs, and How to Build a Cost-Effective Pipeline
A guide to AI video models — Sora, Veo 2, Kling, Runway, Pika — per-second pricing, quality tradeoffs, and pipelines that cut costs by 80%.
AI Models in 2025 — Cost, Capabilities, and Which One to Use
A comparison of AI models from Anthropic, OpenAI, Google, Meta, Mistral, and DeepSeek — pricing, capabilities, and the best fit per use case.
AI Image Generation in 2025 — Models, Costs, and How to Optimize Spend
A guide to AI image generation models — DALL-E 3, Imagen 3, Stable Diffusion, FLUX, Midjourney — pricing, quality, and how to cut costs 10-20x.
AI Coding Assistants in 2025 — Every Tool Compared, and Which One to Actually Use
A deep comparison of AI coding assistants — Copilot, Cursor, Claude Code, Aider, Windsurf, and more — features, pricing, and which wins per workflow.
AI Agents Demystified — It's Just Automation With a Better Brain
A no-hype take on AI agents: the same automation patterns we've built for decades, except the if/else decision engine is replaced by an LLM.
Supply Chain Security — Protecting Your Software Pipeline
A guide to software supply chain security — the SLSA framework, dependency pinning, provenance verification, and lessons from the xz attack.
What I Write About
More Articles
Browse All arrow_forward
Secrets Management — Vault, SSM, and Secrets Manager
A practical guide to secrets management in the cloud — comparing HashiCorp Vault, AWS SSM, and Secrets Manager, with rotation strategies.
Security Ticketing and Incident Response
Build an effective security incident response process — incident classification, runbooks, ticketing workflows, and post-incident reviews.
OWASP Top 10 for Cloud Applications
The OWASP Top 10 through the lens of cloud-native apps — how each vulnerability manifests in AWS/GCP/Azure, with serverless-specific defenses.
Security Mindset for Engineers — Think Like an Attacker
How to adopt a security-first mindset as a software engineer — threat modeling, attack surfaces, defense in depth, and least privilege.
Penetration Testing Basics for Developers
A developer-friendly intro to penetration testing — reconnaissance, common attack vectors, tools like Burp Suite and OWASP ZAP, and test cases.
Container Security — Docker and Kubernetes Hardening
A hands-on guide to securing Docker and Kubernetes — image scanning, rootless containers, network policies, and runtime threat detection.
Dependency Vulnerability Detection at Scale
How to detect and manage vulnerable dependencies across hundreds of repos — SCA tools, SBOM generation, and automated remediation pipelines.
Compliance Automation — SOC2 and ISO 27001
Automate SOC2 and ISO 27001 compliance with infrastructure as code, continuous monitoring, and policy-as-code tools like AWS Config and OPA.
CloudTrail and Security Observability
How to build security observability in AWS using CloudTrail, CloudWatch, and Athena — audit logging, anomaly detection, and SIEM integration.
Ready to build something together?
I take on 1-2 projects at a time. Let's talk about your next challenge.
Hire Me