CloudSecBurrito

Runtime Security in Kata: Less Visibility, Better Signal

Runtime Security in Kata: Less Visibility, Better Signal

Apr 2, 202611 min read

Kata Containers: When "Container Escape" Stops Working

Kata Containers: When "Container Escape" Stops Working

Mar 25, 202610 min read

What Changes When You Turn On mTLS

What Changes When You Turn On mTLS

A hands-on walkthrough with Linkerd and cert-manager, from open traffic to enforced identity

Apr 17, 202617 min read

Kafka on Kubernetes

Kafka on Kubernetes

Mar 16, 202611 min read

Seccomp in Kubernetes

Seccomp in Kubernetes

Feb 16, 20267 min read

Seccomp: The Syscall Firewall

Seccomp: The Syscall Firewall

How Linux Decides Which Syscalls Are Allowed to Exist

Feb 5, 202610 min read

Lima: Linux on macOS Without the Ceremony

Lima: Linux on macOS Without the Ceremony

Getting to real Linux, containers, and Kubernetes without a heavy lab setup

Jan 29, 20267 min read

Kubernetes securityContext

Kubernetes securityContext

Not Security. A Kernel Contract.

Jan 22, 20269 min read

CloudSec Burrito 2.0

CloudSec Burrito 2.0

Same Tortilla. Better Layers.

Jan 16, 20264 min read

Kubernetes Posture Made Simple With Polaris

Kubernetes Posture Made Simple With Polaris

An interesting choice for safer clusters

Nov 26, 202512 min read

Bubble Wrap for Containers

Bubble Wrap for Containers

gVisor in Kubernetes

Nov 23, 20258 min read

CloudSecBurrito