Security
Part 3: From Silent Servers to a Real-Time View
The disk filled at 4pm. I found out at 9pm. Going from a silent server to a real-time view of everything, without a per-seat SaaS bill.
Mohammed jawed · · 12 min read
Latest
Security
Part 4: Five Red Runs Before a Single Container Shipped
The fail-closed pipeline every change clears before production, the day it went red five times, and signed artifacts verified at runtime.
Mohammed jawed · · 11 min read
Security
Capstone: The Incident I Rehearse For
I have not been breached by a supply-chain attack. This is the drill I rehearse for anyway, in three acts: crisis, survival, advancement.
Mohammed jawed · · 13 min read
Security
Part 2: The Morning I Realized the Door Had No Lock
Short-lived tokens, rotating refresh, 2FA, email-match OAuth, and the one-call revocation I built the day I couldn't cleanly remove one person.
Mohammed jawed · · 14 min read
Security
Part 1: What a WAF Monitor Taught Me About the Real Cost of a Public IP
Three minutes after DNS resolved, the first bot arrived. What a live WAF monitor showed me, and the drift I found when I finally looked.
Mohammed jawed · · 13 min read
Security
Part 0: Security Without a Security Team
The whole posture behind live production systems, on one page. Four rings, six principles, and the disclosure discipline behind all of it.
Mohammed jawed · · 11 min read