AI Agents Demystified — It's Just Automation With a Better Brain
A no-hype take on AI agents: the same automation patterns we've built for decades, except the if/else decision engine is replaced by an LLM.
The Archive of
Intentional Thought
Technical essays, architectural deep-dives, and practical guides at the intersection of code and design.
Page 4 of 30
Supply Chain Security — Protecting Your Software Pipeline
A guide to software supply chain security — the SLSA framework, dependency pinning, provenance verification, and lessons from the xz attack.
Security Ticketing and Incident Response
Build an effective security incident response process — incident classification, runbooks, ticketing workflows, and post-incident reviews.
Security Mindset for Engineers — Think Like an Attacker
How to adopt a security-first mindset as a software engineer — threat modeling, attack surfaces, defense in depth, and least privilege.
Secrets Management — Vault, SSM, and Secrets Manager
A practical guide to secrets management in the cloud — comparing HashiCorp Vault, AWS SSM, and Secrets Manager, with rotation strategies.
Penetration Testing Basics for Developers
A developer-friendly intro to penetration testing — reconnaissance, common attack vectors, tools like Burp Suite and OWASP ZAP, and test cases.
OWASP Top 10 for Cloud Applications
The OWASP Top 10 through the lens of cloud-native apps — how each vulnerability manifests in AWS/GCP/Azure, with serverless-specific defenses.
Container Security — Docker and Kubernetes Hardening
A hands-on guide to securing Docker and Kubernetes — image scanning, rootless containers, network policies, and runtime threat detection.
Dependency Vulnerability Detection at Scale
How to detect and manage vulnerable dependencies across hundreds of repos — SCA tools, SBOM generation, and automated remediation pipelines.
CloudTrail and Security Observability
How to build security observability in AWS using CloudTrail, CloudWatch, and Athena — audit logging, anomaly detection, and SIEM integration.
Code Signing — Why and How
Why code signing matters and how to implement it — signing Git commits, Docker images with cosign, and building a chain of trust to production.
Build a Cloud Security Scanner — Hands-On Project
Build a real cloud security scanner from scratch with Python and AWS APIs — scan for open security groups, public S3 buckets, and bad IAM policies.