// writing
Practical articles on Azure cloud security, Microsoft Defender, Zero Trust architecture, DevSecOps, and lessons from real-world platform engineering. Written to be useful, not comprehensive.
Zero Trust isn't a product you buy — it's an architecture you build. Here's how I approach it in Microsoft Azure environments, from identity foundations to network segmentation.
Defender for Cloud ships with sensible defaults, but a handful of non-default settings make a dramatic difference to your security posture. Here are the ones I enable on every engagement.