Deploy Wazuh with Ansible (Part 1)
A practical guide to building a maintainable Wazuh deployment repository using upstream roles, wrapper roles, and inventory-driven files.
WazuhAnsibleDevOpsSecurity
Writing & analysis
The reasoning behind the systems.
Longer-form writing about operational trade-offs, lessons from implementation, and the decisions that make systems easier to trust.
Filter by category
Open article →
Monitoring AWS Egress Traffic with EC2 NAT and Suricata
Monitor AWS egress traffic by combining an EC2 NAT instance with Suricata for open-source network visibility and security analysis.
SuricataAWSDevOpsAudit
Reduce AWS NAT Gateway Costs with an EC2 NAT Instance
A practical guide to building a self-managed NAT instance with Amazon Linux 2023, iptables, and AWS Graviton for private subnet internet access.
AWSCloud SecurityAws Nat GatewayAws Cost Optimization
BAMF: Open-Source Teleport Alternative for SSH and Databases
Centralized access.
DevOpsOpen SourceCloud SecurityCompliance
Build a Centralized DAST Pipeline with ZAP, Nuclei, and GitHub Actions
Build a reusable DAST pipeline with OWASP ZAP, Nuclei, OPA policy decisions, GitHub Actions, pull-request feedback, and audit-ready reports.
DevOpsApplication SecurityGithub ActionsCloud Security
Keycloak Audit Logging for User Events and Admin Actions
Build auditable Keycloak event logging so authentication and administrative identity actions remain searchable, attributable, and reviewable.
DevOpsSecurityComplianceOpen Source