Search for a command to run...
I’ve been running lightweight security posture checks on Nigerian B2B platforms using publicly available HTTP response headers only. No logins. No intrusive scanning. No exploitation. Just reading wha
Cloud Identity Security Engineering · #002Enterprise Reference Note The Core Question What is the precise evaluation order and interaction model between identity-based policies and resource-based pol
Parsing IAM Policies in Go Building the foundation for graph-based authorization analysis.
Cloud identity has become the control plane of modern infrastructure.
Most people learn AWS IAM backwards. They start with: “Users, roles, and permissions” But real attackers and real security engineers think in a different model: AWS IAM is not a permission system —
Modern fintech systems are evolving faster than their security baselines. As products scale across payments, identity, payroll, and embedded financial infrastructure, the browser becomes one of the mo
I Built a Security Header Scanner That Actually Understands Redirects Most header scanners check only the final response and call it a day. I built one that inspects the full redirect chain, calibrates severity based on confidence, and produces audit-grade reports. Here's what I found scanning Vercel.
Why One “Smart” Feature Almost Became a Dangerous One
