Software Development

Security by design: stop patching holes you dug yourself

Security by design: stop patching holes you dug yourself

Why security must be integrated from the design phase instead of bolted on at the end: threat modeling, OWASP, 12-Factor Apps, CVEs, and pentesting.

Software development

A Combat Manual for Shipping Changes Without Breaking Everything

A Combat Manual for Shipping Changes Without Breaking Everything

A practical guide to deploying changes to production without drama: feature flags, canary releases, the strangler pattern, and pipelines that stop bad code before it ships.

Software Development

Follow me

I write and share opinions about technology, software development and whatever crosses my mind.