Blog
Notes on cybersecurity, DevSecOps, and shipping secure software.
-
Describe your app, not your scanners
Security tooling breaks down at scale because teams wire up scanners instead of describing software. A declarative descriptor flips the model — and fixes the noise, the toil, and the cost.