I'm Tolu, a Security Engineer. I design cloud security controls that hold up under adversarial testing, and write up how they were built and where they fail.
Latest Blog
Application Security Testing on EKS: SAST, DAST, and a Runtime Agent Blocking the Same Exploit
Trivy, ZAP, OpenRASP, and Inspector on one EKS pipeline, verified by a live SQL injection blocked twice, at scan and at runtime.
Software Supply Chain Security on AWS: Keyless Signing, SBOMs, and SLSA Provenance
A pipeline that signs a container image with Cosign keyless, attaches SLSA provenance, and refuses to ship unless both verify.
Unified Threat Detection on AWS: Security Hub, GuardDuty, and Automated EC2 Isolation
Wiring Security Hub and GuardDuty so a HIGH finding auto-quarantines the affected EC2 instance in seconds.