Blog
Notes from the build
-
One database change took down half the internet
The November 2025 Cloudflare outage was not a hack and not an AI gone rogue. It was a routine internal change. That is exactly why it should worry small teams.
-
How Korvalis reads a session's intent, and how temporary access works
A plain explanation of the two things Korvalis does: watch live sessions and stop the destructive ones, and hand out cloud access that expires on its own.
-
How to prevent accidental deletion in AWS, Azure, and GCP
A practical guide to the deletion protections in AWS, Azure, and GCP, where each one falls short, and how to stop a destructive session no native setting catches.
-
Why we built Korvalis
On a small team, everyone has the keys. Here is why that is a bigger problem than most founders admit, and what we are doing about it.