Defining the Security Outcome for Cryptographic Engineering
A practical security engineering field guide to cryptographic engineering, covering risk, implementation, evidence, and team leadership.
Nathan Berg
n8n Egress Controls for Security Automation
n8n often sits in the middle of security operations. It talks to email systems, ticketing, threat intel feeds, EDR, identity providers, chat tools, and sometimes internal admin APIs. That makes it ...
A Team Playbook for Improving OAuth and OpenID Connect
A practical security engineering field guide to oauth and openid connect, covering risk, implementation, evidence, and team leadership.
Operating OAuth and OpenID Connect: Ownership, Evidence, and Exceptions
A practical security engineering field guide to oauth and openid connect, covering risk, implementation, evidence, and team leadership.
Engineering OAuth and OpenID Connect into the Paved Road
A practical security engineering field guide to oauth and openid connect, covering risk, implementation, evidence, and team leadership.
Designing a Replayable Authorization Control Plane for Agentic Systems
Most teams start agent tooling with the wrong trust boundary. The model plans, the framework emits a tool call, and some thin executor turns that into a real API request. It works in demos. It also...
An Architecture Review Playbook for OAuth and OpenID Connect
A practical security engineering field guide to oauth and openid connect, covering risk, implementation, evidence, and team leadership.
OAuth and OpenID Connect: What the Team Must Decide Before Building
A practical security engineering field guide to oauth and openid connect, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Zero Trust for Applications
A practical security engineering field guide to zero trust for applications, covering risk, implementation, evidence, and team leadership.
Measuring Zero Trust for Applications Without Vanity Metrics
A practical security engineering field guide to zero trust for applications, covering risk, implementation, evidence, and team leadership.