CloudSecBurrito

From Capabilities to AppArmor: Layering Linux Runtime Security

From Capabilities to AppArmor: Layering Linux Runtime Security

Apr 27, 202610 min read

Distroless Removes the Shell, Not the Risk

Distroless Removes the Shell, Not the Risk

Apr 20, 202612 min read

Building an OSS Kubernetes Security Console with MCP

Building an OSS Kubernetes Security Console with MCP

Turning open source security signals into an agent-ready investigation layer

May 28, 202612 min read

What Changes When You Turn On mTLS

What Changes When You Turn On mTLS

Apr 17, 202617 min read

Runtime Security in Kata: Less Visibility, Better Signal

Runtime Security in Kata: Less Visibility, Better Signal

Apr 2, 202611 min read

Kata Containers: When "Container Escape" Stops Working

Kata Containers: When "Container Escape" Stops Working

A hands-on look at what actually changes when your pods run inside a VM instead of sharing the host

Mar 25, 202610 min read

Kafka on Kubernetes

Kafka on Kubernetes

When Network Policy Stops Being Theoretical

Mar 16, 202611 min read

Seccomp in Kubernetes

Seccomp in Kubernetes

From Pod Spec to Syscall Boundary

Feb 16, 20267 min read

Seccomp: The Syscall Firewall

Seccomp: The Syscall Firewall

How Linux Decides Which Syscalls Are Allowed to Exist

Feb 5, 202610 min read

Lima: Linux on macOS Without the Ceremony

Lima: Linux on macOS Without the Ceremony

Getting to real Linux, containers, and Kubernetes without a heavy lab setup

Jan 29, 20267 min read

Kubernetes securityContext

Kubernetes securityContext

Not Security. A Kernel Contract.

Jan 22, 20269 min read