We had 5% buy-in and 95% resistance. A year later, AI-augmented auditors are finding 200 bugs a week on the right engagements. Here's the six-part operating system we built, open sourced, and are giving away.
A practical guide to protecting your most critical assets when budget, head-count, and political capital are tight.
Answers to additional audience questions from this BSidesSF 2025 panel on scaling security impact by building essential partnerships across teams
Strategy and Tactics for Protecting and Enabling Modern Software Organizations
A deep dive into what CISOs are actually complaining about
Let's hit RESET!
A call to action, with practical advice
A threat-informed roadmap for securing Kubernetes clusters
