Writing about software, security, and AI
A place for product thinking, systems notes, technical writeups, and the lessons I learn while building real-world solutions.
The Ultimate IDOR Testing Checklist (2026 Edition)
A practical security checklist for testing insecure direct object reference flaws across APIs, apps, GraphQL, mobile clients, and real-world edge cases.
Latest writing
Recent posts
Thoughts, notes, and product stories from the field.
RoleFlux: building an open-source GCP CDR platform for real SOC workflows
A full overview of RoleFlux, a serverless GCP cloud detection and response platform that turns audit logs into actionable security signals with MITRE mapping and AI triage.
Prompt Injection in Copilot Chatbot — Phishing via Client-Controlled Context
A critical prompt-injection issue in a Copilot-style chatbot where client-controlled page context could push AI into validating fake security updates and phishing flows.
Building a better AI product loop with signal, speed, and trust
A practical framework for shipping AI features that ship value without creating fragile systems or misleading users.
Secure architecture for startups that want to grow without panic
A simple way to think about security early: protect the core, automate the basics, and make resilience part of product design.
Why engineering blogs still matter in a world of short-form content
Long-form writing still helps teams share context, document trade-offs, and build trust with the people they work with.
Case study: building an AI idea evaluation platform for founders
A behind-the-scenes look at turning a market insight idea into a product that helps teams assess startup viability quickly.
Project spotlights
Case studies and experiments
AI startup evaluation platform
XpertVex
A product that turns live web research into structured viability signals for founders and operators.
Security engineering notes
SecureOps Playbooks
Operational patterns and detection logic for resilient systems and production security workflows.
Build in public
Product Experiments
Mini case studies around AI tooling, UX decisions, and iterative product work shaped by real usage.
Stay in the loop
I write about building useful things.
If you want early access to essays, product notes, and field updates, I’ll keep it sharp and useful.