Skip to main content

DevSecOps

Security in the development lifecycle

8 posts

Security

What the IBM X-Force Report Taught Us About Securing Our Own Tools

After reading the IBM X-Force Threat Intelligence Index, we audited git-steer — an MCP server with autonomous access to GitHub repos. Here's what we found and fixed.

Security

Concept: Learn admission webhook patterns for validating and mutating Kubernetes resource

Cortex explores Learn admission webhook patterns for validating and mutating Kubernetes resources at creation time

Security

Bridging Wazuh and Cortex: When AI Meets Enterprise SIEM

Integrating Wazuh SIEM with Cortex AI orchestration on K3s cluster - achieving real-time threat detection, automated incident response, and comprehensive security monitoring with 214+ alerts indexed

Security

Wazuh + Cortex Security Integration: Enterprise SIEM for K3s

Integrating Wazuh SIEM with Cortex AI orchestration to provide comprehensive security monitoring and threat detection across a 7-node K3s cluster

Security

Building a Wazuh MCP Server: AI-Driven Security Operations

Creating a comprehensive Model Context Protocol server with 25+ security tools for AI-driven Wazuh operations. From JWT authentication to KEDA autoscaling, learn how we built production-ready AI security operations.

Security

Building an Enterprise Security Platform: Wazuh on Kubernetes with MCP Integration

A comprehensive guide to deploying production-grade Wazuh SIEM on Kubernetes with AI-driven operations. Includes HA architecture, KEDA autoscaling, multi-infrastructure monitoring, and $6k-12k annual cost savings.

Security

Container Security Best Practices

Essential security practices for containerized applications - from image hardening and vulnerability scanning to runtime protection and supply chain security.

Security

Shifting Security Left in CI/CD Pipelines

Comprehensive guide to integrating security early in the development lifecycle with automated scanning, SAST, DAST, and security gates in CI/CD pipelines