A working notebook
Questions from
the field.
Short, practical explorations of cybersecurity disciplines and the decisions that make the work responsible.
- 01Read
Offensive security
A responsible test begins before the first request
Authorization, scope, and communication make security testing useful and safe.
- 02Read
Threat intelligence
Frameworks create a vocabulary, not a verdict
Use threat frameworks to organize questions while keeping evidence and uncertainty visible.
- 03Read
Blue-team practice
Small signals become clearer in context
Monitoring starts with a question about what a system normally does and who depends on it.
- 04Read
Cloud security
Cloud security is a shared responsibility
Understand which controls belong to the provider and which remain with the organization.
- 05Read
Data protection
Privacy belongs in the design conversation
Bring data protection questions forward while a system is being planned and built.
- 06Read
DevSecOps
Make security part of the build conversation
Connect development and security teams through early, specific, constructive questions.