Defining the Security Outcome for Security Champions
A practical security engineering field guide to security champions, covering risk, implementation, evidence, and team leadership.
Nathan Berg
A Team Playbook for Improving Application Security Metrics
A practical security engineering field guide to application security metrics, covering risk, implementation, evidence, and team leadership.
Operating Application Security Metrics: Ownership, Evidence, and Exceptions
A practical security engineering field guide to application security metrics, covering risk, implementation, evidence, and team leadership.
Engineering Application Security Metrics into the Paved Road
A practical security engineering field guide to application security metrics, covering risk, implementation, evidence, and team leadership.
Log Clustering and Triage with LMStudio, Python, and SQLite
When logs are noisy, clustering is more useful than reading line by line. A small clustering pipeline can group similar messages, let you triage the rare clusters, and then use a local LLM to summa...
An Architecture Review Playbook for Application Security Metrics
A practical security engineering field guide to application security metrics, covering risk, implementation, evidence, and team leadership.
Application Security Metrics: What the Team Must Decide Before Building
A practical security engineering field guide to application security metrics, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Risk-Based Remediation
A practical security engineering field guide to risk-based remediation, covering risk, implementation, evidence, and team leadership.
Measuring Risk-Based Remediation Without Vanity Metrics
A practical security engineering field guide to risk-based remediation, covering risk, implementation, evidence, and team leadership.
Turning Requirements for Risk-Based Remediation into Delivery Guardrails
A practical security engineering field guide to risk-based remediation, covering risk, implementation, evidence, and team leadership.