CloudSecBurrito

Deploying OSS Kubernetes Security Console

Deploying OSS Kubernetes Security Console

Jun 4, 202610 min read

Building an OSS Kubernetes Security Console with MCP

Building an OSS Kubernetes Security Console with MCP

May 28, 202612 min read

Trivy Operator: The Scanner That Leaves Receipts

Trivy Operator: The Scanner That Leaves Receipts

A practical walkthrough of how Trivy Operator turns image, config, secret, and RBAC findings into Kubernetes-native reports.

Jun 4, 202615 min read

From Capabilities to AppArmor: Layering Linux Runtime Security

From Capabilities to AppArmor: Layering Linux Runtime Security

Apr 27, 202610 min read

Distroless Removes the Shell, Not the Risk

Distroless Removes the Shell, Not the Risk

Apr 20, 202612 min read

What Changes When You Turn On mTLS

What Changes When You Turn On mTLS

A hands-on walkthrough with Linkerd and cert-manager, from open traffic to enforced identity

Apr 17, 202617 min read

Runtime Security in Kata: Less Visibility, Better Signal

Runtime Security in Kata: Less Visibility, Better Signal

Why chasing syscalls is the wrong problem and what to watch instead

Apr 2, 202611 min read

Kata Containers: When "Container Escape" Stops Working

Kata Containers: When "Container Escape" Stops Working

A hands-on look at what actually changes when your pods run inside a VM instead of sharing the host

Mar 25, 202610 min read

Kafka on Kubernetes

Kafka on Kubernetes

When Network Policy Stops Being Theoretical

Mar 16, 202611 min read

Seccomp in Kubernetes

Seccomp in Kubernetes

From Pod Spec to Syscall Boundary

Feb 16, 20267 min read

Seccomp: The Syscall Firewall

Seccomp: The Syscall Firewall

How Linux Decides Which Syscalls Are Allowed to Exist

Feb 5, 202610 min read