Welcome to my tech blog. I write about application security, product security, DevSecOps, and AI security.

Topics I Cover#

  • AppSec - Application security testing, secure code review, vulnerability research
  • ProdSec - Product security engineering, threat modeling, security architecture
  • DevSecOps - Security automation, CI/CD pipeline security, infrastructure as code
  • AI Security - LLM security, prompt injection, AI/ML threat landscape