Posts

Notes on security engineering, vulnerability management, cloud security, application security, and building tools that solve real problems.

Why Vulnerability Management Collapses After 10,000 Findings — February 2026
Why I Built SecPortal — February 2026
What Quantitative Trading Taught Me About Security Engineering — January 2026
Building a Vulnerability Triage Pipeline That Actually Scales — January 2026
Cloud Security as Code: Moving Beyond Checkbox Compliance — December 2025
Embedding AppSec Into CI/CD Without Becoming the Bottleneck — November 2025