Posts on application-security
2 posts on application-security. Notes from public sources and my own test lab.
WAF Won't Save You: The Illusion Behind Firewalls and the Harsh Truths
Think your 'premium' WAF makes your web application invincible? Think again. Let's talk about why defense starts in the code, not at the perimeter.
February 25, 2026·3 dk readapplication-securityred-teamsecure-coding
Moving Fast vs. Playing it Safe: The Dirty Laundry of DevSecOps
Is your speed causing security nightmares? From leaked AWS keys to noisy SAST tools, here is the real deal on making DevSecOps actually work for you.
February 3, 2026·5 dk readapplication-securityci-cd-securitydevsecops