Certificates: the outage you can put in your calendar
Why certificate expiry is the most predictable outage there is, what automatic renewal does and does not cover, and what to monitor besides the end date.
10 min
Hardening
Four texts on security operations
Certificates, detection, prevention and process. Each text explains what a control does, where it fails, and what it does not replace.
Published texts
Scanning for compromise: what a scan can and cannot find
How scanners work, why a clean result is not proof of anything, what file integrity monitoring adds, and how often scanning is actually useful.
11 min
Filtering rules: blocking traffic without blocking customers
What a web application firewall actually does, why default rule sets produce false positives, and how to introduce rules without breaking the site.
11 min
Security reports nobody reads, and how to fix that
Why severity scores mislead when read alone, what a report has to contain to be actionable, and how to keep a monthly review from becoming a ritual.
10 min