Public SSL certificates now last 200 days, drop to 100 in March 2027 and are losing client authentication. What to change on Cassandra and Kafka.

Turning TLS on is the easy part. Eight checks that catch the certificate failures that cause incidents: expiry, SAN drift, CA expiry and failed rotations.

Turn one hardened golden image into a fully configured, environment-specific node on first boot with cloud-init, systemd and vals, with no configuration drift.

A practical guide to hardening your software supply chain using Cosign, Kyverno, Harbor, SHA digests, and SBOMs.

Discover how OpenBao, the open-source alternative to HashiCorp Vault, delivers secure, community-driven secrets management.

Want some security tips and context for cloud-native platforms in financial services?

We’re going to look at how to manage network policies in Kubernetes with Calico.

An introduction to Kubernetes Network Policies: how to isolate workloads and control pod-to-pod traffic, with practical examples you can apply.

Introducing vals-operator — an opensource tool for managing secrets in Kubernetes