Threat Modeling

Reputation Risk Is Dead — I Went Looking For The Body

Reputational damage is scored High in every threat model I review. The chain it depends on breaks at the first link, and low churn turns out to measure switching costs rather than goodwill. Then I checked whether the cost had simply moved somewhere else, and it hadn’t.

Thursday, October 8, 2026 | 14 minutes Read

Threat Modeling Agents with MAESTRO: The Danger Is in the Hops, Not the Boxes

STRIDE asks what can go wrong with an element. An agent is a process, a data store, a data flow and an actor at the same time, so the question stops parsing. A full seven-layer model of a system that clears supplier invoices — and the six-hop chain that paid one, with every control green.

Friday, September 11, 2026 | 22 minutes Read

Securing AI-DLC: Process Integrity Is Not Product Security

AI-DLC gives you the strongest process integrity I have seen in any methodology — approval gates, audit shards, element-level traceability. None of it tells you the code is safe. Those are different claims, and closing the gap phase by phase is the work.

Monday, August 31, 2026 | 10 minutes Read

The Security Coach for AI Agents

Every team debating whether to trust the model has already made the decision that matters: where the boundary lives. A prompt is a promise. A tool interface is a constraint. Four patterns for telling them apart.

Tuesday, August 25, 2026 | 8 minutes Read

From 40 Hours to 8: Designing Security Into the AI Development Lifecycle

Not every deferred decision is an option. Some are debt whose strike price rises with the calendar — and security spends most of its budget servicing that debt rather than doing security.

Tuesday, June 16, 2026 | 6 minutes Read