BLOG
Notes, writeups, and security thinking
Short, readable posts that connect real controls to real outcomes, without the hype.
More posts
Recent
What to expect
Posts here stay practical: threat → control → verification. If a claim can’t be supported with evidence (public-safe), it doesn’t get published.
