Thoughts on Code and CyberSecurity
Explore articles about web development, systems design, cyber security, and best practices. I share insights from building products at scale and lessons learned along the way.
Latest Articles
Read my latest thoughts and in-depth guides
Harden Your Codebase
Your source code repository is the beating heart of your software supply chain. It holds not just your application logic, but the history of every decision, credential slip-up, and dependency choice your team has ever made. Yet many teams treat repository security as an afterthought something to bolt on after a breach rather than build in from day one. This post walks through four practical, high-leverage controls you can put in place today: metrics-driven security with the OpenSSF Scorecard, branch protection, automated code ownership, and a clear security policy.
From Zero Visibility to a Managed Fleet: Building an Endpoint Security Program from Scratch
Every security team has a "day zero" the moment before any tooling exists, when nobody can answer basic questions like what's on our network, is it patched, or would we even notice if it wasn't. That was the starting point for me in this lab: an environment with no history of vulnerability scanning, no centralized patch tracking, and no endpoint detection of any kind. Windows machines sat exposed with open RDP. Nobody could say with confidence how many devices needed protecting. This post walks through how I closed that gap, standing up secure connectivity, deploying EDR and vulnerability scanning, and building a governed patch management process.
What Working On a Phishing Playbook Taught Me About Cybersecurity
I've spent the past 6+ years as a full stack engineer building products that people trust, where operational data flows through systems I worked on. In all of that time, my lens was product, ship fast, perform well, look right, handle edge cases, and application level security. I built authentication flows, manage session tokens, integrated OAuth, and handled API calls that touched financial records. The products I build are exactly what attackers are trying to compromise, and attackers will go the extra mile to gain access. This is where cybersecurity comes in, you might have implemented all necessary security at the application layer but all your hardwork might be undone by a simple email.
How to Install Basic Web Development Tools Like Chrome, Git Bash, Visual Studio Code, Node JS for Beginner Web Developer
Getting into web development is exciting, but before you write your first line of code, you must set up your laptop properly. A clean and well-configured development environment will save you hours of frustration and allow you to focus on what actually matters, learning how to build web applications. Most beginners think the hard part is learning HTML, CSS, or JavaScript. In reality, the first challenge is knowing which tools to install and how to configure them correctly. This guide walks you through the essential laptop setup every beginner web developer needs in 2026. Once you install these tools, your system will be ready for coding, building projects, and learning modern web development. 🚀