Turning TLS on is the easy part. Eight checks that catch the certificate failures that cause incidents: expiry, SAN drift, CA expiry and failed rotations.

Building a golden image is only half the story. A look at the tools and techniques we use to turn one generic, hardened image into a fully configured, environment-specific node on first boot using cloud-init, systemd and vals, with no drift and nobody needing to SSH in.

A practical guide to hardening your software supply chain using Cosign, Kyverno, Harbor, SHA digests, and SBOMs.

Discover how OpenBao, the open-source alternative to HashiCorp Vault, delivers secure, community-driven secrets management.

Want some security tips and context for cloud-native platforms in financial services?

We’re going to look at how to manage network policies in Kubernetes with Calico.

An introduction to Kubernetes Network Policies

Introducing vals-operator — an opensource tool for managing secrets in Kubernetes