I'm Tolu, a Security Engineer building better defenses: automating security into pipelines, breaking things intentionally, and sharing what I learn for others facing the same challenges.

Cloud Security · DevSecOps · Application Security
Selected Projects

AWS Automated Vulnerability Remediation System

Event-driven patching that turns AWS Inspector findings into applied fixes, with per-instance locking and automatic snapshots.

PolicyGuard

IaC misconfiguration scanner for AWS and Azure, with Rego policies benchmarked at precision 1.00 / recall 0.95.

CredScan

A secret scanner for code, IaC, and git history, with confidence-scored detection and opt-in live verification.
View all projects →
Latest Blog
Jul 2026

Software Supply Chain Security on AWS: Keyless Signing, SBOMs, and SLSA Provenance

A pipeline that signs a container image, attaches SLSA provenance, and refuses to call it deployable until both verify.
Jun 2026

Unified Threat Detection on AWS: Security Hub, GuardDuty, and Automated EC2 Isolation

Wiring Security Hub and GuardDuty so a HIGH finding auto-quarantines the affected EC2 instance in seconds.
Jun 2026

Runtime Security on EKS: Tetragon eBPF Enforcement, Falco Detection, and GuardDuty

Stacking three runtime security layers on EKS: in-kernel kills, a queryable alert history, and AWS threat intel.
View all blog posts →