Security
Part 4: Five Red Runs Before a Single Container Shipped
The fail-closed pipeline every change clears before production, the day it went red five times, and signed artifacts verified at runtime.
Mohammed jawed · · 11 min read
Tag
#Devsecops
Security
Capstone: The Incident I Rehearse For
I have not been breached by a supply-chain attack. This is the drill I rehearse for anyway, in three acts: crisis, survival, advancement.
Mohammed jawed · · 13 min read
Security
Part 1: What a WAF Monitor Taught Me About the Real Cost of a Public IP
Three minutes after DNS resolved, the first bot arrived. What a live WAF monitor showed me, and the drift I found when I finally looked.
Mohammed jawed · · 13 min read
Security
Part 0: Security Without a Security Team
The whole posture behind live production systems, on one page. Four rings, six principles, and the disclosure discipline behind all of it.
Mohammed jawed · · 11 min read