• Tags
Agentic
Agentic Security
AI-DLC
AppSec
Automation
Automotive
Claude Code
Cloud
Detection
Detection Engineering
Governance
GuardDuty
Guardrails
Incident Response
Invariants
LLM Security
MAESTRO
Maintenance
Multi-Tenancy
OCSF
Open Source
Opinion
Pentest
Performance
Policy as Code
PostgreSQL
Python
Risk
Rust
Scanner
Secure by Design
Security Architecture
Security Operations
Sigma
SQLCipher
SQLite
Threat Modeling
Vulnerability Management

Governing AI-DLC, Part 1: Your Backlog Becomes a Queue of Human Decisions

Every tracker ever built assumes the expensive part of software is writing it. Agents broke that assumption, and it takes project management with it — the board, the metrics, the job titles, and the screen where somebody clicks approve forty times a day.

• AI-DLC
• Governance
• Agentic Security
• Secure by Design

Sunday, September 20, 2026 | 10 minutes Read

Governing AI-DLC, Part 2: Security Gaps in AI Delivery Platforms, and How to Close Them

AWS has shipped the most serious platform yet for running delivery with agents — approval gates, automatic checks, full traceability. Then it stores the thing that defines those gates as editable data in an admin panel, and nothing checks the change that removes a check.

• AI-DLC
• Governance
• Agentic Security
• Secure by Design
• Guardrails

Sunday, September 20, 2026 | 12 minutes Read

Governing AI-DLC, Part 3: How to Know Your AI-Assisted Delivery Is Actually Safe

Story points measured how much a team could build. Machines settled that question. The number worth watching now is how much safety you get per minute of human judgement — and the checks that produce it turn out to have a proper name, and a hundred years of theory behind them.

• AI-DLC
• Governance
• Agentic Security
• Secure by Design
• Guardrails

Sunday, September 20, 2026 | 12 minutes Read

Threat Modeling Agents with MAESTRO: The Danger Is in the Hops, Not the Boxes

STRIDE asks what can go wrong with an element. An agent is a process, a data store, a data flow and an actor at the same time, so the question stops parsing. A full seven-layer model of a system that clears supplier invoices — and the six-hop chain that paid one, with every control green.

• Agentic Security
• Threat Modeling
• MAESTRO
• Secure by Design
• Guardrails

Friday, September 11, 2026 | 22 minutes Read

Securing AI-DLC: Process Integrity Is Not Product Security

AI-DLC gives you the strongest process integrity I have seen in any methodology — approval gates, audit shards, element-level traceability. None of it tells you the code is safe. Those are different claims, and closing the gap phase by phase is the work.

• AI-DLC
• Agentic Security
• Secure by Design
• Threat Modeling
• Guardrails

Monday, August 31, 2026 | 10 minutes Read

The Security Coach for AI Agents

Every team debating whether to trust the model has already made the decision that matters: where the boundary lives. A prompt is a promise. A tool interface is a constraint. Four patterns for telling them apart.

• Agentic Security
• LLM Security
• Threat Modeling
• Guardrails

Tuesday, August 25, 2026 | 8 minutes Read

• ««
• «
• 1
• 2
• »
• »»