https://nathanberg.github.io/posts/building-your-home-lab/ 2025-01-02T00:00:00-05:00 https://nathanberg.github.io/posts/network-scanning-basics/ 2025-01-07T00:00:00-05:00 https://nathanberg.github.io/posts/essential-linux-commands-for-security/ 2025-01-14T00:00:00-05:00 https://nathanberg.github.io/posts/intro-to-virtualization/ 2025-01-21T00:00:00-05:00 https://nathanberg.github.io/posts/owasp-top-10-overview/ 2025-01-28T00:00:00-05:00 https://nathanberg.github.io/posts/packet-sniffing-with-wireshark/ 2025-02-11T00:00:00-05:00 https://nathanberg.github.io/posts/why-password-strength-matters/ 2025-02-18T00:00:00-05:00 https://nathanberg.github.io/posts/slowloris/ 2025-02-27T00:00:00-05:00 https://nathanberg.github.io/posts/ivanti-connect-rce/ 2025-03-05T00:00:00-05:00 https://nathanberg.github.io/posts/running-a-successful-tabletop-exercise/ 2025-03-11T00:00:00-04:00 https://nathanberg.github.io/posts/mastering-autorecon/ 2025-03-14T00:00:00-04:00 https://nathanberg.github.io/posts/python-for-security-professionals/ 2025-03-18T00:00:00-04:00 https://nathanberg.github.io/posts/linux-syscalls/ 2025-03-25T00:00:00-04:00 https://nathanberg.github.io/posts/hardening-windows-systems/ 2025-04-01T00:00:00-04:00 https://nathanberg.github.io/posts/understanding-tls-and-ssl/ 2025-04-08T00:00:00-04:00 https://nathanberg.github.io/posts/cryptography-fundamentals/ 2025-04-15T00:00:00-04:00 https://nathanberg.github.io/posts/basics-of-file-system-forensics/ 2025-04-22T00:00:00-04:00 https://nathanberg.github.io/posts/incident-response-essentials/ 2025-04-29T00:00:00-04:00 https://nathanberg.github.io/posts/automating-tasks-with-bash/ 2025-05-06T00:00:00-04:00 https://nathanberg.github.io/posts/introduction-to-threat-hunting/ 2025-05-13T00:00:00-04:00 https://nathanberg.github.io/posts/social-engineering-awareness/ 2025-05-20T00:00:00-04:00 https://nathanberg.github.io/posts/building-a-home-lab-firewall/ 2025-05-27T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-security-first-product-engineering-into-delivery-guardrails/ 2025-05-28T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-security-first-product-engineering-without-vanity-metrics/ 2025-05-29T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-security-first-product-engineering/ 2025-05-30T00:00:00-04:00 https://nathanberg.github.io/posts/threat-modeling-what-the-team-must-decide-before-building/ 2025-06-02T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-threat-modeling/ 2025-06-03T00:00:00-04:00 https://nathanberg.github.io/posts/attck-framework-intro/ 2025-06-04T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-threat-modeling-into-the-paved-road/ 2025-06-04T00:00:00-04:00 https://nathanberg.github.io/posts/operating-threat-modeling-ownership-evidence-and-exceptions/ 2025-06-05T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-threat-modeling/ 2025-06-06T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-authentication/ 2025-06-09T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-authentication-a-design-level-analysis/ 2025-06-10T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-authentication-without-slowing-delivery/ 2025-06-11T00:00:00-04:00 https://nathanberg.github.io/posts/authentication-in-production-signals-that-show-the-control-works/ 2025-06-12T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-authentication/ 2025-06-13T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-authorization/ 2025-06-16T00:00:00-04:00 https://nathanberg.github.io/posts/designing-authorization-trust-boundaries-failure-modes-and-tradeoffs/ 2025-06-17T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-authorization-into-delivery-guardrails/ 2025-06-18T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-authorization-without-vanity-metrics/ 2025-06-19T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-authorization/ 2025-06-20T00:00:00-04:00 https://nathanberg.github.io/posts/session-security-what-the-team-must-decide-before-building/ 2025-06-23T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-session-security/ 2025-06-24T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-session-security-into-the-paved-road/ 2025-06-25T00:00:00-04:00 https://nathanberg.github.io/posts/operating-session-security-ownership-evidence-and-exceptions/ 2025-06-26T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-session-security/ 2025-06-27T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-input-validation-and-injection-prevention/ 2025-06-30T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-input-validation-and-injection-prevention-a-design-level-analysis/ 2025-07-01T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-input-validation-and-injection-prevention-without-slowing-delivery/ 2025-07-02T00:00:00-04:00 https://nathanberg.github.io/posts/input-validation-and-injection-prevention-in-production-signals-that-show-the-control-works/ 2025-07-03T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-input-validation-and-injection-prevention/ 2025-07-04T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-output-encoding-and-browser-security/ 2025-07-07T00:00:00-04:00 https://nathanberg.github.io/posts/designing-output-encoding-and-browser-security-trust-boundaries-failure-modes-and-tradeoffs/ 2025-07-08T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-output-encoding-and-browser-security-into-delivery-guardrails/ 2025-07-09T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-output-encoding-and-browser-security-without-vanity-metrics/ 2025-07-10T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-output-encoding-and-browser-security/ 2025-07-11T00:00:00-04:00 https://nathanberg.github.io/posts/api-security-what-the-team-must-decide-before-building/ 2025-07-14T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-api-security/ 2025-07-15T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-api-security-into-the-paved-road/ 2025-07-16T00:00:00-04:00 https://nathanberg.github.io/posts/operating-api-security-ownership-evidence-and-exceptions/ 2025-07-17T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-api-security/ 2025-07-18T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-secure-architecture/ 2025-07-21T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-secure-architecture-a-design-level-analysis/ 2025-07-22T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-secure-architecture-without-slowing-delivery/ 2025-07-23T00:00:00-04:00 https://nathanberg.github.io/posts/secure-architecture-in-production-signals-that-show-the-control-works/ 2025-07-24T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-secure-architecture/ 2025-07-25T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-security-design-review-programs/ 2025-07-28T00:00:00-04:00 https://nathanberg.github.io/posts/designing-security-design-review-programs-trust-boundaries-failure-modes-and-tradeoffs/ 2025-07-29T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-security-design-review-programs-into-delivery-guardrails/ 2025-07-30T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-security-design-review-programs-without-vanity-metrics/ 2025-07-31T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-security-design-review-programs/ 2025-08-01T00:00:00-04:00 https://nathanberg.github.io/posts/secure-software-development-lifecycle-what-the-team-must-decide-before-building/ 2025-08-04T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-secure-software-development-lifecycle/ 2025-08-05T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-secure-software-development-lifecycle-into-the-paved-road/ 2025-08-06T00:00:00-04:00 https://nathanberg.github.io/posts/cross-site-scripting/ 2025-08-07T00:00:00-04:00 https://nathanberg.github.io/posts/operating-secure-software-development-lifecycle-ownership-evidence-and-exceptions/ 2025-08-07T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-secure-software-development-lifecycle/ 2025-08-08T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-security-requirements/ 2025-08-11T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-security-requirements-a-design-level-analysis/ 2025-08-12T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-security-requirements-without-slowing-delivery/ 2025-08-13T00:00:00-04:00 https://nathanberg.github.io/posts/security-requirements-in-production-signals-that-show-the-control-works/ 2025-08-14T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-security-requirements/ 2025-08-15T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-static-application-security-testing/ 2025-08-18T00:00:00-04:00 https://nathanberg.github.io/posts/build-a-command-line-llm-with-python/ 2025-08-19T00:00:00-04:00 https://nathanberg.github.io/posts/designing-static-application-security-testing-trust-boundaries-failure-modes-and-tradeoffs/ 2025-08-19T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-static-application-security-testing-into-delivery-guardrails/ 2025-08-20T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-static-application-security-testing-without-vanity-metrics/ 2025-08-21T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-static-application-security-testing/ 2025-08-22T00:00:00-04:00 https://nathanberg.github.io/posts/dynamic-application-security-testing-what-the-team-must-decide-before-building/ 2025-08-25T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-dynamic-application-security-testing/ 2025-08-26T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-dynamic-application-security-testing-into-the-paved-road/ 2025-08-27T00:00:00-04:00 https://nathanberg.github.io/posts/building-a-zeek-and-suricata-dual-sensor-for-a-home-lab/ 2025-08-28T12:00:00-04:00 https://nathanberg.github.io/posts/operating-dynamic-application-security-testing-ownership-evidence-and-exceptions/ 2025-08-28T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-dynamic-application-security-testing/ 2025-08-29T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-dependency-risk-management/ 2025-09-01T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-dependency-risk-management-a-design-level-analysis/ 2025-09-02T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-dependency-risk-management-without-slowing-delivery/ 2025-09-03T00:00:00-04:00 https://nathanberg.github.io/posts/dependency-risk-management-in-production-signals-that-show-the-control-works/ 2025-09-04T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-dependency-risk-management/ 2025-09-05T00:00:00-04:00 https://nathanberg.github.io/posts/detecting-dns-tunneling-with-zeek-and-python/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-secrets-management/ 2025-09-08T00:00:00-04:00 https://nathanberg.github.io/posts/designing-secrets-management-trust-boundaries-failure-modes-and-tradeoffs/ 2025-09-09T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-secrets-management-into-delivery-guardrails/ 2025-09-10T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-secrets-management-without-vanity-metrics/ 2025-09-11T00:00:00-04:00 https://nathanberg.github.io/posts/windows-telemetry-sysmon-wef-lab/ 2025-09-11T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-secrets-management/ 2025-09-12T00:00:00-04:00 https://nathanberg.github.io/posts/infrastructure-as-code-security-what-the-team-must-decide-before-building/ 2025-09-15T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-infrastructure-as-code-security/ 2025-09-16T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-infrastructure-as-code-security-into-the-paved-road/ 2025-09-17T00:00:00-04:00 https://nathanberg.github.io/posts/operating-infrastructure-as-code-security-ownership-evidence-and-exceptions/ 2025-09-18T00:00:00-04:00 https://nathanberg.github.io/posts/practical-yara-engineering-malware-triage/ 2025-09-18T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-infrastructure-as-code-security/ 2025-09-19T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-container-security/ 2025-09-22T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-container-security-a-design-level-analysis/ 2025-09-23T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-container-security-without-slowing-delivery/ 2025-09-24T00:00:00-04:00 https://nathanberg.github.io/posts/container-security-in-production-signals-that-show-the-control-works/ 2025-09-25T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-container-security/ 2025-09-26T00:00:00-04:00 https://nathanberg.github.io/posts/home-siem-architecture-wazuh-opensearch-zeek/ 2025-09-26T12:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-kubernetes-security/ 2025-09-29T00:00:00-04:00 https://nathanberg.github.io/posts/designing-kubernetes-security-trust-boundaries-failure-modes-and-tradeoffs/ 2025-09-30T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-kubernetes-security-into-delivery-guardrails/ 2025-10-01T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-kubernetes-security-without-vanity-metrics/ 2025-10-02T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-kubernetes-security/ 2025-10-03T00:00:00-04:00 https://nathanberg.github.io/posts/tls-1-3-handshake-analysis-openssl-wireshark/ 2025-10-03T00:00:00-04:00 https://nathanberg.github.io/posts/ci-cd-pipeline-security-what-the-team-must-decide-before-building/ 2025-10-06T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-ci-cd-pipeline-security/ 2025-10-07T00:00:00-04:00 https://nathanberg.github.io/posts/detecting-lateral-movement-smb-winrm-telemetry/ 2025-10-07T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-ci-cd-pipeline-security-into-the-paved-road/ 2025-10-08T00:00:00-04:00 https://nathanberg.github.io/posts/operating-ci-cd-pipeline-security-ownership-evidence-and-exceptions/ 2025-10-09T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-ci-cd-pipeline-security/ 2025-10-10T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-software-supply-chain-security/ 2025-10-13T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-software-supply-chain-security-a-design-level-analysis/ 2025-10-14T00:00:00-04:00 https://nathanberg.github.io/posts/hardening-ssh-modern-ciphers-mfa-audit/ 2025-10-14T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-software-supply-chain-security-without-slowing-delivery/ 2025-10-15T00:00:00-04:00 https://nathanberg.github.io/posts/software-supply-chain-security-in-production-signals-that-show-the-control-works/ 2025-10-16T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-software-supply-chain-security/ 2025-10-17T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-sboms-and-build-provenance/ 2025-10-20T00:00:00-04:00 https://nathanberg.github.io/posts/designing-sboms-and-build-provenance-trust-boundaries-failure-modes-and-tradeoffs/ 2025-10-21T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-sboms-and-build-provenance-into-delivery-guardrails/ 2025-10-22T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-sboms-and-build-provenance-without-vanity-metrics/ 2025-10-23T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-sboms-and-build-provenance/ 2025-10-24T00:00:00-04:00 https://nathanberg.github.io/posts/local-llm-log-summaries-lmstudio-python/ 2025-10-24T00:00:00-04:00 https://nathanberg.github.io/posts/cloud-identity-and-access-management-what-the-team-must-decide-before-building/ 2025-10-27T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-cloud-identity-and-access-management/ 2025-10-28T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-cloud-identity-and-access-management-into-the-paved-road/ 2025-10-29T00:00:00-04:00 https://nathanberg.github.io/posts/operating-cloud-identity-and-access-management-ownership-evidence-and-exceptions/ 2025-10-30T00:00:00-04:00 https://nathanberg.github.io/posts/threat-intel-enrichment-stix-taxii-python/ 2025-10-30T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-cloud-identity-and-access-management/ 2025-10-31T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-cloud-network-security/ 2025-11-03T00:00:00-05:00 https://nathanberg.github.io/posts/failure-modes-in-cloud-network-security-a-design-level-analysis/ 2025-11-04T00:00:00-05:00 https://nathanberg.github.io/posts/implementing-cloud-network-security-without-slowing-delivery/ 2025-11-05T00:00:00-05:00 https://nathanberg.github.io/posts/cloud-network-security-in-production-signals-that-show-the-control-works/ 2025-11-06T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-cloud-network-security/ 2025-11-07T00:00:00-05:00 https://nathanberg.github.io/posts/container-breakout-detection-ebpf-tracee/ 2025-11-07T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-cloud-detection-and-logging/ 2025-11-10T00:00:00-05:00 https://nathanberg.github.io/posts/designing-cloud-detection-and-logging-trust-boundaries-failure-modes-and-tradeoffs/ 2025-11-11T00:00:00-05:00 https://nathanberg.github.io/posts/kerberos-attack-lab-asrep-roasting-detection/ 2025-11-11T00:00:00-05:00 https://nathanberg.github.io/posts/turning-requirements-for-cloud-detection-and-logging-into-delivery-guardrails/ 2025-11-12T00:00:00-05:00 https://nathanberg.github.io/posts/measuring-cloud-detection-and-logging-without-vanity-metrics/ 2025-11-13T00:00:00-05:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-cloud-detection-and-logging/ 2025-11-14T00:00:00-05:00 https://nathanberg.github.io/posts/cloud-data-protection-what-the-team-must-decide-before-building/ 2025-11-17T00:00:00-05:00 https://nathanberg.github.io/posts/linux-binary-hardening-relro-pie-nx-cet/ 2025-11-17T00:00:00-05:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-cloud-data-protection/ 2025-11-18T00:00:00-05:00 https://nathanberg.github.io/posts/engineering-cloud-data-protection-into-the-paved-road/ 2025-11-19T00:00:00-05:00 https://nathanberg.github.io/posts/operating-cloud-data-protection-ownership-evidence-and-exceptions/ 2025-11-20T00:00:00-05:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-cloud-data-protection/ 2025-11-21T00:00:00-05:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-vulnerability-management/ 2025-11-24T00:00:00-05:00 https://nathanberg.github.io/posts/failure-modes-in-vulnerability-management-a-design-level-analysis/ 2025-11-25T00:00:00-05:00 https://nathanberg.github.io/posts/implementing-vulnerability-management-without-slowing-delivery/ 2025-11-26T00:00:00-05:00 https://nathanberg.github.io/posts/reverse-proxy-waf-nginx-modsecurity/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/vulnerability-management-in-production-signals-that-show-the-control-works/ 2025-11-27T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-vulnerability-management/ 2025-11-28T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-risk-based-remediation/ 2025-12-01T00:00:00-05:00 https://nathanberg.github.io/posts/designing-risk-based-remediation-trust-boundaries-failure-modes-and-tradeoffs/ 2025-12-02T00:00:00-05:00 https://nathanberg.github.io/posts/ransomware-recovery-lab-immutable-backups-restore/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/turning-requirements-for-risk-based-remediation-into-delivery-guardrails/ 2025-12-03T00:00:00-05:00 https://nathanberg.github.io/posts/measuring-risk-based-remediation-without-vanity-metrics/ 2025-12-04T00:00:00-05:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-risk-based-remediation/ 2025-12-05T00:00:00-05:00 https://nathanberg.github.io/posts/application-security-metrics-what-the-team-must-decide-before-building/ 2025-12-08T00:00:00-05:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-application-security-metrics/ 2025-12-09T00:00:00-05:00 https://nathanberg.github.io/posts/log-clustering-triage-lmstudio-python-sqlite/ 2025-12-09T00:00:00-05:00 https://nathanberg.github.io/posts/engineering-application-security-metrics-into-the-paved-road/ 2025-12-10T00:00:00-05:00 https://nathanberg.github.io/posts/operating-application-security-metrics-ownership-evidence-and-exceptions/ 2025-12-11T00:00:00-05:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-application-security-metrics/ 2025-12-12T00:00:00-05:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-security-champions/ 2025-12-15T00:00:00-05:00 https://nathanberg.github.io/posts/supply-chain-security-ci-sbom-slsa-sigstore/ 2025-12-15T12:00:00-05:00 https://nathanberg.github.io/posts/failure-modes-in-security-champions-a-design-level-analysis/ 2025-12-16T00:00:00-05:00 https://nathanberg.github.io/posts/implementing-security-champions-without-slowing-delivery/ 2025-12-17T00:00:00-05:00 https://nathanberg.github.io/posts/security-champions-in-production-signals-that-show-the-control-works/ 2025-12-18T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-security-champions/ 2025-12-19T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-developer-security-education/ 2025-12-22T00:00:00-05:00 https://nathanberg.github.io/posts/vulnerability-management-cadence-home-lab/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/designing-developer-security-education-trust-boundaries-failure-modes-and-tradeoffs/ 2025-12-23T00:00:00-05:00 https://nathanberg.github.io/posts/turning-requirements-for-developer-security-education-into-delivery-guardrails/ 2025-12-24T00:00:00-05:00 https://nathanberg.github.io/posts/measuring-developer-security-education-without-vanity-metrics/ 2025-12-25T00:00:00-05:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-developer-security-education/ 2025-12-26T00:00:00-05:00 https://nathanberg.github.io/posts/email-authentication-spf-dkim-dmarc/ 2025-12-29T00:00:00-05:00 https://nathanberg.github.io/posts/security-guardrails-and-paved-roads-what-the-team-must-decide-before-building/ 2025-12-29T00:00:00-05:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-security-guardrails-and-paved-roads/ 2025-12-30T00:00:00-05:00 https://nathanberg.github.io/posts/engineering-security-guardrails-and-paved-roads-into-the-paved-road/ 2025-12-31T00:00:00-05:00 https://nathanberg.github.io/posts/operating-security-guardrails-and-paved-roads-ownership-evidence-and-exceptions/ 2026-01-01T00:00:00-05:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-security-guardrails-and-paved-roads/ 2026-01-02T00:00:00-05:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-security-exceptions/ 2026-01-05T00:00:00-05:00 https://nathanberg.github.io/posts/secrets-management-aws-secrets-manager-ci/ 2026-01-05T12:00:00-05:00 https://nathanberg.github.io/posts/failure-modes-in-security-exceptions-a-design-level-analysis/ 2026-01-06T00:00:00-05:00 https://nathanberg.github.io/posts/implementing-security-exceptions-without-slowing-delivery/ 2026-01-07T00:00:00-05:00 https://nathanberg.github.io/posts/security-exceptions-in-production-signals-that-show-the-control-works/ 2026-01-08T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-security-exceptions/ 2026-01-09T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-product-security-incident-response/ 2026-01-12T00:00:00-05:00 https://nathanberg.github.io/posts/linux-auditd-privilege-escalation-detection/ 2026-01-12T00:00:00-05:00 https://nathanberg.github.io/posts/designing-product-security-incident-response-trust-boundaries-failure-modes-and-tradeoffs/ 2026-01-13T00:00:00-05:00 https://nathanberg.github.io/posts/turning-requirements-for-product-security-incident-response-into-delivery-guardrails/ 2026-01-14T00:00:00-05:00 https://nathanberg.github.io/posts/measuring-product-security-incident-response-without-vanity-metrics/ 2026-01-15T00:00:00-05:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-product-security-incident-response/ 2026-01-16T00:00:00-05:00 https://nathanberg.github.io/posts/incident-readiness-what-the-team-must-decide-before-building/ 2026-01-19T00:00:00-05:00 https://nathanberg.github.io/posts/security-metrics-that-help-engineering-teams/ 2026-01-19T12:00:00-05:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-incident-readiness/ 2026-01-20T00:00:00-05:00 https://nathanberg.github.io/posts/engineering-incident-readiness-into-the-paved-road/ 2026-01-21T00:00:00-05:00 https://nathanberg.github.io/posts/n8n-credential-hygiene-security-automation/ 2026-01-22T00:00:00-05:00 https://nathanberg.github.io/posts/operating-incident-readiness-ownership-evidence-and-exceptions/ 2026-01-22T00:00:00-05:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-incident-readiness/ 2026-01-23T00:00:00-05:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-detection-engineering/ 2026-01-26T00:00:00-05:00 https://nathanberg.github.io/posts/failure-modes-in-detection-engineering-a-design-level-analysis/ 2026-01-27T00:00:00-05:00 https://nathanberg.github.io/posts/securing-n8n-webhooks-replay-abuse/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/implementing-detection-engineering-without-slowing-delivery/ 2026-01-28T00:00:00-05:00 https://nathanberg.github.io/posts/detection-engineering-in-production-signals-that-show-the-control-works/ 2026-01-29T00:00:00-05:00 https://nathanberg.github.io/posts/rag-threat-modeling-prompt-injection-exfiltration/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-detection-engineering/ 2026-01-30T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-security-logging-and-telemetry/ 2026-02-02T00:00:00-05:00 https://nathanberg.github.io/posts/defending-rag-pipelines-from-data-poisoning/ 2026-02-03T00:00:00-05:00 https://nathanberg.github.io/posts/designing-security-logging-and-telemetry-trust-boundaries-failure-modes-and-tradeoffs/ 2026-02-03T00:00:00-05:00 https://nathanberg.github.io/posts/turning-requirements-for-security-logging-and-telemetry-into-delivery-guardrails/ 2026-02-04T00:00:00-05:00 https://nathanberg.github.io/posts/measuring-security-logging-and-telemetry-without-vanity-metrics/ 2026-02-05T00:00:00-05:00 https://nathanberg.github.io/posts/vector-database-isolation-multi-tenant-ai/ 2026-02-05T00:00:00-05:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-security-logging-and-telemetry/ 2026-02-06T00:00:00-05:00 https://nathanberg.github.io/posts/threat-hunting-what-the-team-must-decide-before-building/ 2026-02-09T00:00:00-05:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-threat-hunting/ 2026-02-10T00:00:00-05:00 https://nathanberg.github.io/posts/human-approval-gates-n8n-security-workflows/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/engineering-threat-hunting-into-the-paved-road/ 2026-02-11T00:00:00-05:00 https://nathanberg.github.io/posts/operating-threat-hunting-ownership-evidence-and-exceptions/ 2026-02-12T00:00:00-05:00 https://nathanberg.github.io/posts/secure-tool-calling-llm-agents/ 2026-02-12T00:00:00-05:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-threat-hunting/ 2026-02-13T00:00:00-05:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-siem-architecture/ 2026-02-16T00:00:00-05:00 https://nathanberg.github.io/posts/ai-security-logging-baseline/ 2026-02-17T00:00:00-05:00 https://nathanberg.github.io/posts/failure-modes-in-siem-architecture-a-design-level-analysis/ 2026-02-17T00:00:00-05:00 https://nathanberg.github.io/posts/implementing-siem-architecture-without-slowing-delivery/ 2026-02-18T00:00:00-05:00 https://nathanberg.github.io/posts/canary-tokens-rag-exfiltration-detection/ 2026-02-19T00:00:00-05:00 https://nathanberg.github.io/posts/siem-architecture-in-production-signals-that-show-the-control-works/ 2026-02-19T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-siem-architecture/ 2026-02-20T00:00:00-05:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-network-detection-engineering/ 2026-02-23T00:00:00-05:00 https://nathanberg.github.io/posts/designing-network-detection-engineering-trust-boundaries-failure-modes-and-tradeoffs/ 2026-02-24T00:00:00-05:00 https://nathanberg.github.io/posts/policy-as-code-llm-prompts-n8n-flows/ 2026-02-24T00:00:00-05:00 https://nathanberg.github.io/posts/turning-requirements-for-network-detection-engineering-into-delivery-guardrails/ 2026-02-25T00:00:00-05:00 https://nathanberg.github.io/posts/measuring-network-detection-engineering-without-vanity-metrics/ 2026-02-26T00:00:00-05:00 https://nathanberg.github.io/posts/rag-access-control-attribute-based-authorization/ 2026-02-26T00:00:00-05:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-network-detection-engineering/ 2026-02-27T00:00:00-05:00 https://nathanberg.github.io/posts/ransomware-resilience-what-the-team-must-decide-before-building/ 2026-03-02T00:00:00-05:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-ransomware-resilience/ 2026-03-03T00:00:00-05:00 https://nathanberg.github.io/posts/model-supply-chain-security-self-hosted-ai/ 2026-03-03T00:00:00-05:00 https://nathanberg.github.io/posts/engineering-ransomware-resilience-into-the-paved-road/ 2026-03-04T00:00:00-05:00 https://nathanberg.github.io/posts/automating-phishing-triage-n8n-guardrailed-llms/ 2026-03-05T00:00:00-05:00 https://nathanberg.github.io/posts/operating-ransomware-resilience-ownership-evidence-and-exceptions/ 2026-03-05T00:00:00-05:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-ransomware-resilience/ 2026-03-06T00:00:00-05:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-forensic-readiness/ 2026-03-09T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-forensic-readiness-a-design-level-analysis/ 2026-03-10T00:00:00-04:00 https://nathanberg.github.io/posts/red-teaming-rag-applications-home-lab/ 2026-03-10T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-forensic-readiness-without-slowing-delivery/ 2026-03-11T00:00:00-04:00 https://nathanberg.github.io/posts/forensic-readiness-in-production-signals-that-show-the-control-works/ 2026-03-12T00:00:00-04:00 https://nathanberg.github.io/posts/pii-redaction-ai-pipelines-before-retrieval-logging/ 2026-03-12T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-forensic-readiness/ 2026-03-13T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-third-party-component-security/ 2026-03-16T00:00:00-04:00 https://nathanberg.github.io/posts/designing-third-party-component-security-trust-boundaries-failure-modes-and-tradeoffs/ 2026-03-17T00:00:00-04:00 https://nathanberg.github.io/posts/detecting-token-abuse-api-key-theft-llm-platforms/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/turning-requirements-for-third-party-component-security-into-delivery-guardrails/ 2026-03-18T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-third-party-component-security-without-vanity-metrics/ 2026-03-19T00:00:00-04:00 https://nathanberg.github.io/posts/secure-mcp-tool-server-patterns-agentic-systems/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-third-party-component-security/ 2026-03-20T00:00:00-04:00 https://nathanberg.github.io/posts/saas-and-integration-security-what-the-team-must-decide-before-building/ 2026-03-23T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-saas-and-integration-security/ 2026-03-24T00:00:00-04:00 https://nathanberg.github.io/posts/incident-response-ai-workflow-failures/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/engineering-saas-and-integration-security-into-the-paved-road/ 2026-03-25T00:00:00-04:00 https://nathanberg.github.io/posts/eval-driven-security-testing-llm-apps/ 2026-03-26T00:00:00-04:00 https://nathanberg.github.io/posts/operating-saas-and-integration-security-ownership-evidence-and-exceptions/ 2026-03-26T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-saas-and-integration-security/ 2026-03-27T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-microservice-trust/ 2026-03-30T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-microservice-trust-a-design-level-analysis/ 2026-03-31T00:00:00-04:00 https://nathanberg.github.io/posts/n8n-change-management-workflow-provenance/ 2026-03-31T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-microservice-trust-without-slowing-delivery/ 2026-04-01T00:00:00-04:00 https://nathanberg.github.io/posts/microservice-trust-in-production-signals-that-show-the-control-works/ 2026-04-02T00:00:00-04:00 https://nathanberg.github.io/posts/rag-retention-data-lifecycle-controls/ 2026-04-02T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-microservice-trust/ 2026-04-03T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-zero-trust-for-applications/ 2026-04-06T00:00:00-04:00 https://nathanberg.github.io/posts/building-soc-copilot-safe-retrieval-boundaries/ 2026-04-07T00:00:00-04:00 https://nathanberg.github.io/posts/designing-zero-trust-for-applications-trust-boundaries-failure-modes-and-tradeoffs/ 2026-04-07T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-zero-trust-for-applications-into-delivery-guardrails/ 2026-04-08T00:00:00-04:00 https://nathanberg.github.io/posts/ai-security-scorecard-engineering-teams/ 2026-04-09T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-zero-trust-for-applications-without-vanity-metrics/ 2026-04-09T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-zero-trust-for-applications/ 2026-04-10T00:00:00-04:00 https://nathanberg.github.io/posts/oauth-and-openid-connect-what-the-team-must-decide-before-building/ 2026-04-13T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-oauth-and-openid-connect/ 2026-04-14T00:00:00-04:00 https://nathanberg.github.io/posts/replayable-authorization-control-plane-agentic-systems/ 2026-04-14T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-oauth-and-openid-connect-into-the-paved-road/ 2026-04-15T00:00:00-04:00 https://nathanberg.github.io/posts/operating-oauth-and-openid-connect-ownership-evidence-and-exceptions/ 2026-04-16T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-oauth-and-openid-connect/ 2026-04-17T00:00:00-04:00 https://nathanberg.github.io/posts/n8n-egress-controls-security-automation/ 2026-04-17T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-cryptographic-engineering/ 2026-04-20T00:00:00-04:00 https://nathanberg.github.io/posts/deploying-n8n-on-aws-ecs-fargate/ 2026-04-21T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-cryptographic-engineering-a-design-level-analysis/ 2026-04-21T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-cryptographic-engineering-without-slowing-delivery/ 2026-04-22T00:00:00-04:00 https://nathanberg.github.io/posts/cryptographic-engineering-in-production-signals-that-show-the-control-works/ 2026-04-23T00:00:00-04:00 https://nathanberg.github.io/posts/hardening-n8n-webhooks-behind-alb-and-waf/ 2026-04-23T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-cryptographic-engineering/ 2026-04-24T00:00:00-04:00 https://nathanberg.github.io/posts/blue-team-ecs-log-baseline-for-n8n/ 2026-04-25T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-webhooks-jobs-and-file-processing/ 2026-04-27T00:00:00-04:00 https://nathanberg.github.io/posts/designing-webhooks-jobs-and-file-processing-trust-boundaries-failure-modes-and-tradeoffs/ 2026-04-28T00:00:00-04:00 https://nathanberg.github.io/posts/running-n8n-queue-mode-on-ecs-with-redis/ 2026-04-28T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-webhooks-jobs-and-file-processing-into-delivery-guardrails/ 2026-04-29T00:00:00-04:00 https://nathanberg.github.io/posts/managing-n8n-secrets-with-aws-secrets-manager/ 2026-04-30T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-webhooks-jobs-and-file-processing-without-vanity-metrics/ 2026-04-30T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-webhooks-jobs-and-file-processing/ 2026-05-01T00:00:00-04:00 https://nathanberg.github.io/posts/ecs-deployment-circuit-breakers-for-n8n/ 2026-05-02T00:00:00-04:00 https://nathanberg.github.io/posts/ruby-on-rails-security-what-the-team-must-decide-before-building/ 2026-05-04T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-ruby-on-rails-security/ 2026-05-05T00:00:00-04:00 https://nathanberg.github.io/posts/private-subnet-design-for-n8n-on-ecs/ 2026-05-05T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-ruby-on-rails-security-into-the-paved-road/ 2026-05-06T00:00:00-04:00 https://nathanberg.github.io/posts/cloudwatch-dashboards-for-n8n-worker-health/ 2026-05-07T00:00:00-04:00 https://nathanberg.github.io/posts/operating-ruby-on-rails-security-ownership-evidence-and-exceptions/ 2026-05-07T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-ruby-on-rails-security/ 2026-05-08T00:00:00-04:00 https://nathanberg.github.io/posts/detecting-suspicious-n8n-workflow-changes/ 2026-05-09T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-python-security-automation/ 2026-05-11T00:00:00-04:00 https://nathanberg.github.io/posts/blue-green-releases-for-n8n-on-ecs/ 2026-05-12T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-python-security-automation-a-design-level-analysis/ 2026-05-12T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-python-security-automation-without-slowing-delivery/ 2026-05-13T00:00:00-04:00 https://nathanberg.github.io/posts/python-security-automation-in-production-signals-that-show-the-control-works/ 2026-05-14T00:00:00-04:00 https://nathanberg.github.io/posts/scaling-case-enrichment-workflows-with-ecs/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-python-security-automation/ 2026-05-15T00:00:00-04:00 https://nathanberg.github.io/posts/guardduty-triage-for-ecs-hosted-automation/ 2026-05-16T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-aws-security-engineering/ 2026-05-18T00:00:00-04:00 https://nathanberg.github.io/posts/backing-up-n8n-workflows-and-state-on-aws/ 2026-05-19T00:00:00-04:00 https://nathanberg.github.io/posts/designing-aws-security-engineering-trust-boundaries-failure-modes-and-tradeoffs/ 2026-05-19T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-aws-security-engineering-into-delivery-guardrails/ 2026-05-20T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-aws-security-engineering-without-vanity-metrics/ 2026-05-21T00:00:00-04:00 https://nathanberg.github.io/posts/tenant-aware-automation-boundaries-in-n8n/ 2026-05-21T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-aws-security-engineering/ 2026-05-22T00:00:00-04:00 https://nathanberg.github.io/posts/ecs-task-iam-least-privilege-for-n8n/ 2026-05-23T00:00:00-04:00 https://nathanberg.github.io/posts/secure-legacy-modernization-what-the-team-must-decide-before-building/ 2026-05-25T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-secure-legacy-modernization/ 2026-05-26T00:00:00-04:00 https://nathanberg.github.io/posts/cicd-promotion-for-n8n-workflow-bundles/ 2026-05-26T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-secure-legacy-modernization-into-the-paved-road/ 2026-05-27T00:00:00-04:00 https://nathanberg.github.io/posts/operating-secure-legacy-modernization-ownership-evidence-and-exceptions/ 2026-05-28T00:00:00-04:00 https://nathanberg.github.io/posts/synthetic-checks-for-n8n-webhook-and-worker-slas/ 2026-05-28T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-secure-legacy-modernization/ 2026-05-29T00:00:00-04:00 https://nathanberg.github.io/posts/incident-response-runbooks-as-n8n-workflows/ 2026-08-20T12:21:15-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-security-focused-code-review/ 2026-06-01T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-security-focused-code-review-a-design-level-analysis/ 2026-06-02T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-security-focused-code-review-without-slowing-delivery/ 2026-06-03T00:00:00-04:00 https://nathanberg.github.io/posts/cost-and-reliability-guardrails-for-n8n-on-fargate/ 2026-06-04T00:00:00-04:00 https://nathanberg.github.io/posts/security-focused-code-review-in-production-signals-that-show-the-control-works/ 2026-06-04T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-security-focused-code-review/ 2026-06-05T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-penetration-testing-as-an-engineering-input/ 2026-06-08T00:00:00-04:00 https://nathanberg.github.io/posts/designing-penetration-testing-as-an-engineering-input-trust-boundaries-failure-modes-and-tradeoffs/ 2026-06-09T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-penetration-testing-as-an-engineering-input-into-delivery-guardrails/ 2026-06-10T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-penetration-testing-as-an-engineering-input-without-vanity-metrics/ 2026-06-11T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-penetration-testing-as-an-engineering-input/ 2026-06-12T00:00:00-04:00 https://nathanberg.github.io/posts/red-and-blue-team-collaboration-what-the-team-must-decide-before-building/ 2026-06-15T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-red-and-blue-team-collaboration/ 2026-06-16T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-red-and-blue-team-collaboration-into-the-paved-road/ 2026-06-17T00:00:00-04:00 https://nathanberg.github.io/posts/operating-red-and-blue-team-collaboration-ownership-evidence-and-exceptions/ 2026-06-18T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-red-and-blue-team-collaboration/ 2026-06-19T00:00:00-04:00 https://nathanberg.github.io/posts/defining-the-security-outcome-for-abuse-cases-and-fraud-resistance/ 2026-06-22T00:00:00-04:00 https://nathanberg.github.io/posts/failure-modes-in-abuse-cases-and-fraud-resistance-a-design-level-analysis/ 2026-06-23T00:00:00-04:00 https://nathanberg.github.io/posts/implementing-abuse-cases-and-fraud-resistance-without-slowing-delivery/ 2026-06-24T00:00:00-04:00 https://nathanberg.github.io/posts/abuse-cases-and-fraud-resistance-in-production-signals-that-show-the-control-works/ 2026-06-25T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-failure-exercise-for-abuse-cases-and-fraud-resistance/ 2026-06-26T00:00:00-04:00 https://nathanberg.github.io/posts/a-practical-risk-model-for-privacy-engineering/ 2026-06-29T00:00:00-04:00 https://nathanberg.github.io/posts/designing-privacy-engineering-trust-boundaries-failure-modes-and-tradeoffs/ 2026-06-30T00:00:00-04:00 https://nathanberg.github.io/posts/turning-requirements-for-privacy-engineering-into-delivery-guardrails/ 2026-07-01T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-privacy-engineering-without-vanity-metrics/ 2026-07-02T00:00:00-04:00 https://nathanberg.github.io/posts/how-to-lead-a-review-of-privacy-engineering/ 2026-07-03T00:00:00-04:00 https://nathanberg.github.io/posts/ai-enabled-application-security-what-the-team-must-decide-before-building/ 2026-07-06T00:00:00-04:00 https://nathanberg.github.io/posts/an-architecture-review-playbook-for-ai-enabled-application-security/ 2026-07-07T00:00:00-04:00 https://nathanberg.github.io/posts/engineering-ai-enabled-application-security-into-the-paved-road/ 2026-07-08T00:00:00-04:00 https://nathanberg.github.io/posts/operating-ai-enabled-application-security-ownership-evidence-and-exceptions/ 2026-07-09T00:00:00-04:00 https://nathanberg.github.io/posts/a-team-playbook-for-improving-ai-enabled-application-security/ 2026-07-10T00:00:00-04:00 https://nathanberg.github.io/posts/choosing-a-security-engineering-operating-model-that-can-scale/ 2026-07-13T00:00:00-04:00 https://nathanberg.github.io/posts/centralized-embedded-or-platform-led-security-designing-the-interfaces/ 2026-07-14T00:00:00-04:00 https://nathanberg.github.io/posts/building-a-security-service-catalog-that-engineering-teams-can-use/ 2026-07-15T00:00:00-04:00 https://nathanberg.github.io/posts/operating-a-security-engineering-program-capacity-escalation-and-feedback/ 2026-07-16T00:00:00-04:00 https://nathanberg.github.io/posts/leading-the-shift-from-security-gatekeeper-to-engineering-partner/ 2026-07-17T00:00:00-04:00 https://nathanberg.github.io/posts/how-i-would-structure-a-team-of-security-analysts-and-developers/ 2026-07-20T00:00:00-04:00 https://nathanberg.github.io/posts/designing-the-interface-between-security-analysis-and-engineering/ 2026-07-21T00:00:00-04:00 https://nathanberg.github.io/posts/turning-analyst-findings-into-durable-engineering-improvements/ 2026-07-22T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-a-mixed-security-and-development-team/ 2026-07-23T00:00:00-04:00 https://nathanberg.github.io/posts/a-leadership-playbook-for-security-analysts-and-developers/ 2026-07-24T00:00:00-04:00 https://nathanberg.github.io/posts/writing-security-decision-memos-executives-can-act-on/ 2026-07-27T00:00:00-04:00 https://nathanberg.github.io/posts/translating-technical-exposure-into-business-risk-without-losing-precision/ 2026-07-28T00:00:00-04:00 https://nathanberg.github.io/posts/building-a-security-narrative-from-evidence-options-and-tradeoffs/ 2026-07-29T00:00:00-04:00 https://nathanberg.github.io/posts/security-metrics-for-executives-what-belongs-in-the-room/ 2026-07-30T00:00:00-04:00 https://nathanberg.github.io/posts/leading-a-difficult-security-risk-conversation/ 2026-07-31T00:00:00-04:00 https://nathanberg.github.io/posts/building-a-security-roadmap-around-outcomes-instead-of-tools/ 2026-08-03T00:00:00-04:00 https://nathanberg.github.io/posts/sequencing-security-foundations-guardrails-and-product-adoption/ 2026-08-04T00:00:00-04:00 https://nathanberg.github.io/posts/making-the-investment-case-for-security-engineering-platforms/ 2026-08-05T00:00:00-04:00 https://nathanberg.github.io/posts/operating-a-security-roadmap-as-a-learning-system/ 2026-08-06T00:00:00-04:00 https://nathanberg.github.io/posts/a-leadership-review-for-security-priorities-and-tradeoffs/ 2026-08-07T00:00:00-04:00 https://nathanberg.github.io/posts/designing-tabletop-exercises-around-decisions-that-matter/ 2026-08-10T00:00:00-04:00 https://nathanberg.github.io/posts/building-a-cybersecurity-scenario-that-tests-authority-and-coordination/ 2026-08-11T00:00:00-04:00 https://nathanberg.github.io/posts/turning-tabletop-findings-into-owned-engineering-work/ 2026-08-12T00:00:00-04:00 https://nathanberg.github.io/posts/measuring-whether-a-tabletop-exercise-improved-readiness/ 2026-08-13T00:00:00-04:00 https://nathanberg.github.io/posts/how-i-facilitate-a-cybersecurity-tabletop-exercise/ 2026-08-14T00:00:00-04:00 https://nathanberg.github.io/posts/how-i-approach-principal-level-security-engineering/ 2026-08-17T00:00:00-04:00 https://nathanberg.github.io/posts/from-one-off-reviews-to-reusable-security-architecture/ 2026-08-18T00:00:00-04:00 https://nathanberg.github.io/posts/scaling-security-through-paved-roads-guardrails-and-team-growth/ 2026-08-19T00:00:00-04:00 https://nathanberg.github.io/posts/how-i-would-lead-a-security-engineering-team-outcomes-evidence-and-trust/ 2026-08-20T00:00:00-04:00 https://nathanberg.github.io/security/ 2026-08-20T12:29:17-04:00 https://nathanberg.github.io/selected-work/ 2026-08-20T12:29:17-04:00 https://nathanberg.github.io/categories/ 2026-08-20T12:29:17-04:00 https://nathanberg.github.io/tags/ 2026-08-20T12:29:17-04:00 https://nathanberg.github.io/archives/ 2026-08-20T12:29:17-04:00 https://nathanberg.github.io/about/ 2026-08-20T12:29:17-04:00 https://nathanberg.github.io/ https://nathanberg.github.io/tags/lab/ https://nathanberg.github.io/tags/setup/ https://nathanberg.github.io/tags/scanning/ https://nathanberg.github.io/tags/nmap/ https://nathanberg.github.io/tags/linux/ https://nathanberg.github.io/tags/cli/ https://nathanberg.github.io/tags/virtualization/ https://nathanberg.github.io/tags/vm/ https://nathanberg.github.io/tags/owasp/ https://nathanberg.github.io/tags/web/ https://nathanberg.github.io/tags/wireshark/ https://nathanberg.github.io/tags/networking/ https://nathanberg.github.io/tags/passwords/ https://nathanberg.github.io/tags/authentication/ https://nathanberg.github.io/tags/slowloris/ https://nathanberg.github.io/tags/dos/ https://nathanberg.github.io/tags/security/ https://nathanberg.github.io/tags/rce/ https://nathanberg.github.io/tags/ivanti/ https://nathanberg.github.io/tags/vulnerability/ https://nathanberg.github.io/tags/exploitation/ https://nathanberg.github.io/tags/cybersecurity-tabletop-exercise/ https://nathanberg.github.io/tags/security-training/ https://nathanberg.github.io/tags/tabletop-exercise-cybersecurity/ https://nathanberg.github.io/tags/autorecon/ https://nathanberg.github.io/tags/reconaissance/ https://nathanberg.github.io/tags/python/ https://nathanberg.github.io/tags/scripting/ https://nathanberg.github.io/tags/syscalls/ https://nathanberg.github.io/tags/programming/ https://nathanberg.github.io/tags/kernel/ https://nathanberg.github.io/tags/c/ https://nathanberg.github.io/tags/assembly/ https://nathanberg.github.io/tags/windows/ https://nathanberg.github.io/tags/hardening/ https://nathanberg.github.io/tags/tls/ https://nathanberg.github.io/tags/encryption/ https://nathanberg.github.io/tags/crypto/ https://nathanberg.github.io/tags/forensics/ https://nathanberg.github.io/tags/filesystem/ https://nathanberg.github.io/tags/incident-response/ https://nathanberg.github.io/tags/security-operations/ https://nathanberg.github.io/tags/bash/ https://nathanberg.github.io/tags/threat-hunting/ https://nathanberg.github.io/tags/detection/ https://nathanberg.github.io/tags/social-engineering/ https://nathanberg.github.io/tags/awareness/ https://nathanberg.github.io/tags/firewall/ https://nathanberg.github.io/tags/secure-product-engineering/ https://nathanberg.github.io/tags/secure-by-design/ https://nathanberg.github.io/tags/application-and-product-security/ https://nathanberg.github.io/tags/security-engineering-leadership/ https://nathanberg.github.io/tags/threat-modeling/ https://nathanberg.github.io/tags/secure-architecture/ https://nathanberg.github.io/tags/mitre/ https://nathanberg.github.io/tags/att-ck/ https://nathanberg.github.io/tags/threat-intelligence/ https://nathanberg.github.io/tags/identity-security/ https://nathanberg.github.io/tags/authorization/ https://nathanberg.github.io/tags/access-control/ https://nathanberg.github.io/tags/session-management/ https://nathanberg.github.io/tags/token-security/ https://nathanberg.github.io/tags/injection-prevention/ https://nathanberg.github.io/tags/input-validation/ https://nathanberg.github.io/tags/browser-security/ https://nathanberg.github.io/tags/output-encoding/ https://nathanberg.github.io/tags/api-security/ https://nathanberg.github.io/tags/product-security/ https://nathanberg.github.io/tags/security-design/ https://nathanberg.github.io/tags/design-review/ https://nathanberg.github.io/tags/appsec-process/ https://nathanberg.github.io/tags/secure-sdlc/ https://nathanberg.github.io/tags/devsecops/ https://nathanberg.github.io/tags/secure-delivery-and-cloud-security/ https://nathanberg.github.io/tags/xss/ https://nathanberg.github.io/tags/web-security/ https://nathanberg.github.io/tags/security-requirements/ https://nathanberg.github.io/tags/acceptance-criteria/ https://nathanberg.github.io/tags/sast/ https://nathanberg.github.io/tags/security-testing/ https://nathanberg.github.io/tags/llm/ https://nathanberg.github.io/tags/command-line/ https://nathanberg.github.io/tags/dast/ https://nathanberg.github.io/tags/dynamic-testing/ https://nathanberg.github.io/tags/zeek/ https://nathanberg.github.io/tags/suricata/ https://nathanberg.github.io/tags/homelab/ https://nathanberg.github.io/tags/nids/ https://nathanberg.github.io/tags/network/ https://nathanberg.github.io/tags/dependency-security/ https://nathanberg.github.io/tags/software-composition-analysis/ https://nathanberg.github.io/tags/dns/ https://nathanberg.github.io/tags/secrets-management/ https://nathanberg.github.io/tags/credential-security/ https://nathanberg.github.io/tags/sysmon/ https://nathanberg.github.io/tags/wef/ https://nathanberg.github.io/tags/logging/ https://nathanberg.github.io/tags/blue-team/ https://nathanberg.github.io/tags/infrastructure-as-code/ https://nathanberg.github.io/tags/cloud-security/ https://nathanberg.github.io/tags/yara/ https://nathanberg.github.io/tags/malware/ https://nathanberg.github.io/tags/reverse-engineering/ https://nathanberg.github.io/tags/triage/ https://nathanberg.github.io/tags/container-security/ https://nathanberg.github.io/tags/workload-security/ https://nathanberg.github.io/tags/siem/ https://nathanberg.github.io/tags/wazuh/ https://nathanberg.github.io/tags/opensearch/ https://nathanberg.github.io/tags/kubernetes-security/ https://nathanberg.github.io/tags/platform-security/ https://nathanberg.github.io/tags/cryptography/ https://nathanberg.github.io/tags/cicd-security/ https://nathanberg.github.io/tags/lateral-movement/ https://nathanberg.github.io/tags/smb/ https://nathanberg.github.io/tags/winrm/ https://nathanberg.github.io/tags/software-supply-chain/ https://nathanberg.github.io/tags/artifact-security/ https://nathanberg.github.io/tags/ssh/ https://nathanberg.github.io/tags/mfa/ https://nathanberg.github.io/tags/sbom/ https://nathanberg.github.io/tags/build-provenance/ https://nathanberg.github.io/tags/lmstudio/ https://nathanberg.github.io/tags/cloud-iam/ https://nathanberg.github.io/tags/least-privilege/ https://nathanberg.github.io/tags/threat-intel/ https://nathanberg.github.io/tags/stix/ https://nathanberg.github.io/tags/taxii/ https://nathanberg.github.io/tags/cloud-network-security/ https://nathanberg.github.io/tags/network-segmentation/ https://nathanberg.github.io/tags/containers/ https://nathanberg.github.io/tags/ebpf/ https://nathanberg.github.io/tags/tracee/ https://nathanberg.github.io/tags/cloud-detection/ https://nathanberg.github.io/tags/security-logging/ https://nathanberg.github.io/tags/threat-detection-and-response/ https://nathanberg.github.io/tags/kerberos/ https://nathanberg.github.io/tags/active-directory/ https://nathanberg.github.io/tags/red-team/ https://nathanberg.github.io/tags/cloud-data-security/ https://nathanberg.github.io/tags/data-protection/ https://nathanberg.github.io/tags/exploit-mitigation/ https://nathanberg.github.io/tags/binary/ https://nathanberg.github.io/tags/vulnerability-management/ https://nathanberg.github.io/tags/risk-reduction/ https://nathanberg.github.io/tags/waf/ https://nathanberg.github.io/tags/nginx/ https://nathanberg.github.io/tags/modsecurity/ https://nathanberg.github.io/tags/risk-based-remediation/ https://nathanberg.github.io/tags/vulnerability-prioritization/ https://nathanberg.github.io/tags/ransomware/ https://nathanberg.github.io/tags/backups/ https://nathanberg.github.io/tags/appsec-metrics/ https://nathanberg.github.io/tags/security-measurement/ https://nathanberg.github.io/tags/log-analysis/ https://nathanberg.github.io/tags/security-champions/ https://nathanberg.github.io/tags/developer-enablement/ https://nathanberg.github.io/tags/supply-chain/ https://nathanberg.github.io/tags/sigstore/ https://nathanberg.github.io/tags/security-education/ https://nathanberg.github.io/tags/risk/ https://nathanberg.github.io/tags/email/ https://nathanberg.github.io/tags/spf/ https://nathanberg.github.io/tags/dkim/ https://nathanberg.github.io/tags/dmarc/ https://nathanberg.github.io/tags/security-guardrails/ https://nathanberg.github.io/tags/paved-road/ https://nathanberg.github.io/tags/risk-acceptance/ https://nathanberg.github.io/tags/security-governance/ https://nathanberg.github.io/tags/secrets/ https://nathanberg.github.io/tags/aws/ https://nathanberg.github.io/tags/cicd/ https://nathanberg.github.io/tags/product-security-incident-response/ https://nathanberg.github.io/tags/psirt/ https://nathanberg.github.io/tags/auditd/ https://nathanberg.github.io/tags/incident-readiness/ https://nathanberg.github.io/tags/metrics/ https://nathanberg.github.io/tags/n8n/ https://nathanberg.github.io/tags/automation/ https://nathanberg.github.io/tags/ai/ https://nathanberg.github.io/tags/detection-engineering/ https://nathanberg.github.io/tags/threat-detection/ https://nathanberg.github.io/tags/webhooks/ https://nathanberg.github.io/tags/api/ https://nathanberg.github.io/tags/rag/ https://nathanberg.github.io/tags/prompt-injection/ https://nathanberg.github.io/tags/security-telemetry/ https://nathanberg.github.io/tags/data-security/ https://nathanberg.github.io/tags/poisoning/ https://nathanberg.github.io/tags/mlops/ https://nathanberg.github.io/tags/vector-db/ https://nathanberg.github.io/tags/multi-tenant/ https://nathanberg.github.io/tags/governance/ https://nathanberg.github.io/tags/agents/ https://nathanberg.github.io/tags/tooling/ https://nathanberg.github.io/tags/siem-architecture/ https://nathanberg.github.io/tags/security-analytics/ https://nathanberg.github.io/tags/observability/ https://nathanberg.github.io/tags/canary/ https://nathanberg.github.io/tags/data-loss-prevention/ https://nathanberg.github.io/tags/network-detection/ https://nathanberg.github.io/tags/zeek-suricata/ https://nathanberg.github.io/tags/policy-as-code/ https://nathanberg.github.io/tags/abac/ https://nathanberg.github.io/tags/identity/ https://nathanberg.github.io/tags/ransomware-resilience/ https://nathanberg.github.io/tags/recovery/ https://nathanberg.github.io/tags/models/ https://nathanberg.github.io/tags/integrity/ https://nathanberg.github.io/tags/phishing/ https://nathanberg.github.io/tags/soc/ https://nathanberg.github.io/tags/digital-forensics/ https://nathanberg.github.io/tags/forensic-readiness/ https://nathanberg.github.io/tags/pii/ https://nathanberg.github.io/tags/privacy/ https://nathanberg.github.io/tags/third-party-risk/ https://nathanberg.github.io/tags/supplier-security/ https://nathanberg.github.io/tags/keys/ https://nathanberg.github.io/tags/mcp/ https://nathanberg.github.io/tags/zero-trust/ https://nathanberg.github.io/tags/saas-security/ https://nathanberg.github.io/tags/integration-security/ https://nathanberg.github.io/tags/operations/ https://nathanberg.github.io/tags/testing/ https://nathanberg.github.io/tags/evals/ https://nathanberg.github.io/tags/microservices/ https://nathanberg.github.io/tags/service-security/ https://nathanberg.github.io/tags/change-management/ https://nathanberg.github.io/tags/audit/ https://nathanberg.github.io/tags/data-governance/ https://nathanberg.github.io/tags/compliance/ https://nathanberg.github.io/tags/application-security/ https://nathanberg.github.io/tags/engineering/ https://nathanberg.github.io/tags/oauth/ https://nathanberg.github.io/tags/openid-connect/ https://nathanberg.github.io/tags/provenance/ https://nathanberg.github.io/tags/egress/ https://nathanberg.github.io/tags/network-security/ https://nathanberg.github.io/tags/key-management/ https://nathanberg.github.io/tags/ecs/ https://nathanberg.github.io/tags/fargate/ https://nathanberg.github.io/tags/alb/ https://nathanberg.github.io/tags/async-security/ https://nathanberg.github.io/tags/file-upload-security/ https://nathanberg.github.io/tags/redis/ https://nathanberg.github.io/tags/queue-mode/ https://nathanberg.github.io/tags/secrets-manager/ https://nathanberg.github.io/tags/deployment/ https://nathanberg.github.io/tags/reliability/ https://nathanberg.github.io/tags/rails-security/ https://nathanberg.github.io/tags/secure-coding/ https://nathanberg.github.io/tags/cloudwatch/ https://nathanberg.github.io/tags/python-security/ https://nathanberg.github.io/tags/security-automation/ https://nathanberg.github.io/tags/blue-green/ https://nathanberg.github.io/tags/scaling/ https://nathanberg.github.io/tags/guardduty/ https://nathanberg.github.io/tags/aws-security/ https://nathanberg.github.io/tags/backup/ https://nathanberg.github.io/tags/resilience/ https://nathanberg.github.io/tags/iam/ https://nathanberg.github.io/tags/legacy-modernization/ https://nathanberg.github.io/tags/ci-cd/ https://nathanberg.github.io/tags/secure-code-review/ https://nathanberg.github.io/tags/appsec/ https://nathanberg.github.io/tags/penetration-testing/ https://nathanberg.github.io/tags/purple-team/ https://nathanberg.github.io/tags/adversary-emulation/ https://nathanberg.github.io/tags/abuse-cases/ https://nathanberg.github.io/tags/business-logic-security/ https://nathanberg.github.io/tags/privacy-engineering/ https://nathanberg.github.io/tags/ai-security/ https://nathanberg.github.io/tags/llm-application-security/ https://nathanberg.github.io/tags/security-operating-model/ https://nathanberg.github.io/tags/security-leadership/ https://nathanberg.github.io/tags/security-team-leadership/ https://nathanberg.github.io/tags/engineering-leadership/ https://nathanberg.github.io/tags/security-communication/ https://nathanberg.github.io/tags/executive-leadership/ https://nathanberg.github.io/tags/security-roadmap/ https://nathanberg.github.io/tags/security-strategy/ https://nathanberg.github.io/tags/tabletop-exercises/ https://nathanberg.github.io/tags/incident-leadership/ https://nathanberg.github.io/tags/principal-security-engineer/ https://nathanberg.github.io/categories/blog/ https://nathanberg.github.io/categories/cybersecurity/ https://nathanberg.github.io/categories/exploits/ https://nathanberg.github.io/categories/security-engineering/ https://nathanberg.github.io/categories/application-product-security/ https://nathanberg.github.io/categories/secure-delivery-cloud-security/ https://nathanberg.github.io/categories/threat-detection-response/ https://nathanberg.github.io/categories/security-leadership/ https://nathanberg.github.io/page2/ https://nathanberg.github.io/page3/ https://nathanberg.github.io/page4/ https://nathanberg.github.io/page5/ https://nathanberg.github.io/page6/ https://nathanberg.github.io/page7/ https://nathanberg.github.io/page8/ https://nathanberg.github.io/page9/ https://nathanberg.github.io/page10/ https://nathanberg.github.io/page11/ https://nathanberg.github.io/page12/ https://nathanberg.github.io/page13/ https://nathanberg.github.io/page14/ https://nathanberg.github.io/page15/ https://nathanberg.github.io/page16/ https://nathanberg.github.io/page17/ https://nathanberg.github.io/page18/ https://nathanberg.github.io/page19/ https://nathanberg.github.io/page20/ https://nathanberg.github.io/page21/ https://nathanberg.github.io/page22/ https://nathanberg.github.io/page23/ https://nathanberg.github.io/page24/ https://nathanberg.github.io/page25/ https://nathanberg.github.io/page26/ https://nathanberg.github.io/page27/ https://nathanberg.github.io/page28/ https://nathanberg.github.io/page29/ https://nathanberg.github.io/page30/ https://nathanberg.github.io/page31/ https://nathanberg.github.io/page32/ https://nathanberg.github.io/page33/ https://nathanberg.github.io/page34/ https://nathanberg.github.io/page35/ https://nathanberg.github.io/page36/ https://nathanberg.github.io/page37/ https://nathanberg.github.io/page38/ https://nathanberg.github.io/page39/ https://nathanberg.github.io/page40/ https://nathanberg.github.io/page41/ https://nathanberg.github.io/page42/