DevSecOps
Adoption Is a Security Control: Notes from Paving a Road
A security control developers can route around is not a control. Field notes from rebuilding a cloud security model around making the secure path the easy...
Infrastructure. Security. Insight.
Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.
DevSecOps
A security control developers can route around is not a control. Field notes from rebuilding a cloud security model around making the secure path the easy...
A security control developers can route around is not a control. Field notes from rebuilding a cloud security model around making the secure path the easy path: 40% lower remediation time, 27% lower pipeline latency, and a four-month adoption stall I caused myself.