Websauna Co / Cybersecurity
I’ve spent years helping teams choose and deploy security controls that actually get used — not just tick boxes for compliance. When it comes to multifactor authentication (MFA), the biggest failure isn’t cryptography or standards: it’s...
Read more... →
I’ve been tracking the slow, steady shift toward passwordless authentication for years now — testing products, probing security claims, and watching organizations wrestle with the trade-offs. Passwordless is no longer a futuristic checkbox; for...
Read more... →
I want developer pipelines that are secure, fast, and simple to understand. Over the years I’ve seen teams over-engineer CI/CD so much that it becomes the riskiest part of their product: secrets scattered in variables, build steps that run as...
Read more... →
I’ve spent years building and securing cloud-native apps, and one lesson keeps coming back: even a single small virtual machine (VM) exposed to the internet can become your weakest link if you don’t harden it. This guide walks you through a...
Read more... →
I get asked a lot: can you trust OpenAI’s API with sensitive business data? As someone who tests and writes about cloud services and security, my short answer is: “it depends.” But that’s not very useful on its own. Below I walk through a...
Read more... →