Guilherme Rondon·Oct 27From RBAC to AppArmor: six phases to harden k3s on a Raspberry PiIn the post about the migration to Gitea I described how I got my projects’ builds working inside the cluster. To get there, I took a…
Denis Honório·Oct 27Implementando o Princípio do Menor Privilégio no Linux: Um Guia Prático de Hardening e Auditoria…No cenário de Defesa Cibernética e Operações de Segurança (SOC), o controle rigoroso sobre quem possui acesso a determinados ativos de…
Defa Mulya Pratama·Oct 16Make Your Hardening Diff ReviewableA regression gate tells us something changed. A report helps us decide what to do next.
Defa Mulya Pratama·Oct 11Your Hardening Needs a Regression TestWe test detections. We version infrastructure. But host hardening still drifts silently — until an audit, or an attacker, finds the gap.
Defa Mulya Pratama·Oct 9Attack, Detect, HardenDetection gets the applause. But a rule firing means the hole was still there. Here’s the third leg most teams skip — and how I built all…
byteGirl·Sep 25OpenSCAP: A Hands-On Guide to Auditing and Automated Remediation with Ansible.How to scan a Rocky Linux server against OSPP and CIS benchmarks, generate compliance reports, and fix findings with Ansible.A response icon1A response icon1
byteGirl·Sep 21Hardening a Fresh Proxmox VE 9 Cluster Node with Ansible (IaC).Ansible vs. pmxcfs: one filesystem, four fights, zero survivors (except the playbook).
Andrew Crites·Sep 10An Introduction to Hardening AI Generated CodeI’ve worked in IT professional services as a senior engineer for over 10 years now, and I have a lot of experience, thoughts, and feelings…
k3tu·Sep 2When Debug Tooling Ships to Production: How Keycloak’s Admin and Account UI Leaked Their Own Source…Reported by Swornim Poudel
Asep Sayyad·Aug 23Linux Security Checklist for Production ServersA step-by-step practical guide to locking down SSH, configuring firewalls, enforcing least privilege, hardening the kernel, and setting up…A response icon1A response icon1
