Writing about software, security, and AI
A place for product thinking, systems notes, technical writeups, and the lessons I learn while building real-world solutions.
Video as code: what Claude Opus 5.5 is actually rendering
A look at Skillry's Opus 5.5 collection — 475 videos generated by writing Three.js, Canvas, SVG and GSAP rather than prompting a diffusion model, and why that difference matters if you ship software.
Latest writing
Recent posts
Thoughts, notes, and product stories from the field.
RoleFlux: building an open-source GCP CDR platform for real SOC workflows
A full overview of RoleFlux, a serverless GCP cloud detection and response platform that turns audit logs into actionable security signals with MITRE mapping and AI triage.
Prompt Injection in Copilot Chatbot — Phishing via Client-Controlled Context
A critical prompt-injection issue in a Copilot-style chatbot where client-controlled page context could push AI into validating fake security updates and phishing flows.
Building a better AI product loop with signal, speed, and trust
A practical framework for shipping AI features that ship value without creating fragile systems or misleading users.
The Ultimate IDOR Testing Checklist (2026 Edition)
A practical security checklist for testing insecure direct object reference flaws across APIs, apps, GraphQL, mobile clients, and real-world edge cases.
Secure architecture for startups that want to grow without panic
A simple way to think about security early: protect the core, automate the basics, and make resilience part of product design.
Why engineering blogs still matter in a world of short-form content
Long-form writing still helps teams share context, document trade-offs, and build trust with the people they work with.
Project spotlights
Case studies and experiments
Security engineering notes
SecureOps Playbooks
Operational patterns and detection logic for resilient systems and production security workflows.
Build in public
Product Experiments
Mini case studies around AI tooling, UX decisions, and iterative product work shaped by real usage.
Stay in the loop
I write about building useful things.
If you want early access to essays, product notes, and field updates, I’ll keep it sharp and useful.