DevSecOps
Adoption Is a Security Control: Notes from Paving a Road
A control developers route around isn't a control. Field notes on making the secure path the easy path: 40% less remediation time, 27% less pipeline latency.
RivasSec
Infrastructure. Security. Insight.
Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.
Start here
Latest posts
IAM Blast Radius Is an Architecture Problem, Not a Policy Problem
Most IAM reviews start too late, after the account structure and trust boundaries are set. Least privilege isn't fewer actions; it's smaller failure domains.
Continue reading
Adoption Is a Security Control: Notes from Paving a Road
A control developers route around isn't a control. Field notes on making the secure path the easy path: 40% less remediation time, 27% less pipeline latency.
Continue reading