Environment Separation Is a Claim Until Someone Reads the Config
A production service that answered every check was reading development tables and publishing an index with no version history in it at all.
Security Architecture
Reference architectures, zero trust, architecture reviews, and decision records that survive contact with delivery.
21 articles
What Dies First When You Retire a Service
Retiring a service is an ordered operation with a preservation gate that has to be verified before anything is destroyed, and a list of consumers that no inventory holds.
Your Automation Is a Guest on Someone Else's Origin
A scheduled worker was reading a Cloudflare bot challenge as a rate limit. Classifying it correctly was the right fix, and the first version of that fix doubled the traffic the worker sent.
Fail Closed on the Server, Fail Open at the Client
Two commits a day apart set opposite failure defaults in the same backend, and what decided each one was not the sensitivity of the asset but who gets refused when the control is wrong.
The Cheapest Control Is the One That Deletes the Exposure
A chat integration appeared to require a public webhook endpoint into a machine I own, and the transport that removed the endpoint entirely cost less than any control I would have put in front of it.
Two Platforms Need Two App Clients, Not a Looser Audience Check
Adding Android to a backend built for iOS forced a choice between relaxing JWT audience validation and issuing a second client identity, and the cheaper-looking option was the one that destroyed information.
What Automating a Zero Trust Assessment Taught Me About Maturity Scores
Writing a maturity score down as a function forces you to answer the scoring questions a consultant never has to say out loud, starting with what an unanswered question is worth.
How to Run Security Architecture Reviews That Change Outcomes
Architecture reviews should reduce downstream risk, not become documentation theatre.
Identity-First Security Operations at Enterprise Scale
At enterprise scale, identity telemetry is often the fastest signal for active compromise. Operations need to be built around that reality.
Security Architecture Decision Records That Scale
Architecture quality improves when decisions are recorded with context, tradeoffs, and accountable ownership.
Security Architecture in an AI-Accelerated World
As AI capabilities accelerate, security architecture has to evolve from static reviews to faster, risk-informed design guardrails.
Security Consolidation: Doing More with Less
Tool sprawl raises cost and complexity without guaranteed risk reduction. Here's a practical model for consolidating controls without losing coverage.
Zero Trust for Healthcare: Balancing Security and Care
Healthcare security decisions affect patient care in real time. A workable Zero Trust model must protect systems without disrupting clinical operations.
Security Architecture Reviews: A Consultant's Playbook
Security architecture reviews should drive decisions, not generate shelfware. Here's a practical playbook that works in enterprise environments.
Securing 30,000 Locations: IoT Security at Scale
IoT security doesn't fail because of devices alone. It fails when architecture, ownership, and operational controls don't scale with deployment speed.
Cloud Security Architecture: Lessons from 50+ Migrations
Cloud migration doesn't fail because of technology. It fails because architecture and security decisions are made in the wrong order.
Threat Modeling for Non-Security Teams: A Practical Guide
Threat modeling isn't just for security specialists. Here's a practical framework product and engineering teams can use without slowing delivery.
Identity Is the New Perimeter: IAM in a Post-COVID World
Remote work made one thing clear: perimeter controls are no longer enough. Identity has become the control plane for enterprise security.
Building a Zero Trust Roadmap That Actually Works
Most Zero Trust programs fail because they start with tools instead of outcomes. Here's a practical roadmap that works in real enterprises.
Remote Work Security: What Enterprises Get Wrong
The shift to remote work exposed security gaps most enterprises didn't know they had. Here are the mistakes I'm seeing — and how to fix them fast.
Why Your Firewall Strategy Needs a Rethink in 2020
The traditional firewall-centric security model is showing its age. Here's what enterprise security architects should be rethinking heading into 2020.