LiteLLM and the Canary (Token) in the Coal Mine

A supply chain attack on LiteLLM swept up cloud credentials, SSH keys, and crypto wallets. Most victims never knew. Canary tokens exist for moments like this.

Securing Google Cloud: The MVSP Checklist Guide

Google Cloud MVSP defines 60 controls across 6 domains for a minimum security baseline. Use an open-source tool to learn and track your progress.

WebMCP: The Web Finally Speaks Agent

A brief on WebMCP, Google's new browser standard that gives AI agents a proper way to use the web — without screenshots, scraping, or guesswork.

Privileged Account Monitoring: 5 Hard Truths

From shadow admins to zero standing privilege, this guide cuts through the noise with 5 essential truths for securing your most critical identities and access paths.

Deploying Google ADK Agents to Vertex AI Agent Engine with Agent Identity

Step-by-step guide to deploying Google ADK agents on Vertex AI Agent Engine with Agent Identity—covering setup, IAM permissions, and when to use it in production.

Vibe Coding Linkwise - A Smart, Personal Link Aggregator

A hands-on vibe coding experiment: building Linkwise, a smart link aggregator with Firebase and Gemini AI—from local prototype to Cloud Run deployment.

From RSS to Email: Automating Google Cloud Release Notes Summaries

Turn Google Cloud's RSS feed into a clean daily email digest. A simple Python script using Gemini and Resend delivers only the announcements that matter.

Securing Tiny Tech: NIST Finalises Lightweight Cryptography Standard

NIST SP 800-232 is here. Explore the four Ascon-family algorithms, and how they bring strong cryptography to resource-constrained IoT devices.

Secure Federated Access to Google Cloud: Simulating Access with a Headless OIDC Client

A step-by-step demonstration of federated identity access to Google Cloud resources using a headless OIDC client and Workload Identity Federation.