BlogSecurity research and notes
Cloud security remediation, Terraform, solver-checked fixes and keeping AWS findings from piling up.
Cloud Security · August 13, 2026 · 7 min read
Detection was solved years ago. Remediation wasn't. See the four pieces a closed-loop architecture needs — state-aware ingestion, a provable safety gate, fail-closed behavior, and a fix path that matches how your team ships.
Read the post →Security Engineering · August 13, 2026 · 6 min read
Manual drift reconciliation doesn't stick. See how hash-based drift detection, a real unified diff, and a Z3-verified GitHub PR turn security hygiene into a normal part of your Terraform review flow.
Read the post →Security Engineering · June 20, 2026 · 7 min read
Wildcard IAM policies allow broad access that bypasses security boundaries. Learn how to write Z3 SMT logic checks and deploy signed GitOps remediation patches.
Read the post →Cloud Security · June 18, 2026 · 5 min read
Exposed Kubernetes API endpoints allow external scan mapping. See how PosturaNet continuously audits cluster configurations and locks public access in under 60 seconds.
Read the post →Security Engineering · June 12, 2026 · 5 min read
Learn how to parse configurations, run pre-flight logic verification with SMT solvers, and deploy IaC patches in under 10 seconds without cloud disruption.
Read the post →Compliance · June 8, 2026 · 8 min read
A comprehensive guide to auditing and automating the CIS AWS Foundations benchmarks, and checking policy compliance continuously with formal solver checks.
Read the post →Cloud Security · June 2, 2026 · 6 min read
Traditional CSPM tools leave alerts in backlogs for days. Explore how active reasoning models and Z3 solver logic shrink mean time to remediation (MTTR).
Read the post →