Practical notes from real programmes.
Application security architecture, migration and maturity, written for the people who have to make it work.
- 01 · Edge & WAAP · 7 min
What 112 application migrations taught me about moving to cloud WAAP
Cloud WAAP migration lessons from onboarding ~112 applications: DNS cutover order, TLS compatibility, origin protection, staged blocking and SIEM logging.
Read - 03 · Vulnerabilities & exposure · 7 min
From vulnerability lists to exposure management: CTEM for South Asian enterprises
Continuous threat exposure management (CTEM) for South Asian enterprises: the five stages, better vulnerability prioritisation and how to mobilise owners.
Read - 05 · Mobile apps · 7 min
Mobile app shielding for banks: what RASP protects, and what it doesn't
Mobile app shielding and RASP for banking apps explained: the threats in-app protection stops, what it cannot replace, and how to tune policy without friction.
Read - 06 · Governance & maturity · 7 min
Measuring application security maturity with OWASP SAMM: a practical starting point
A practical OWASP SAMM assessment guide: run a lightweight AppSec maturity assessment in 2–3 weeks, score honestly, set a target and build a security roadmap.
Read