Blog
Notes from the build
Is it safe to give an AI coding agent access to your cloud?
The honest answer on giving AI coding agents AWS access, what permissions they should have, and how a small team stops an agent from deleting production.
Should developers have access to production? An honest answer for small teams
Whether developers should have production access, what the two-camp debate misses, and what to actually do about it on a team with no dedicated security hire.
How to stop terraform destroy from wiping production
How prevent_destroy protects Terraform resources, the three ways it gets bypassed anyway, and what actually stops a destructive change to production.
StrongDM alternatives after the Delinea acquisition (2026)
StrongDM is now part of Delinea. Here are the real alternatives for cloud access, who each one suits, and a different approach built for small teams.
What are zero standing privileges? (ZSP for cloud teams)
A plain definition of zero standing privileges (ZSP), how it differs from least privilege, how to get there with just-in-time access, and whether small teams need it.
What is a cloud guardrail? (and how to add them without slowing developers)
A plain definition of cloud guardrails, how they differ from permissions, preventive versus detective guardrails, and how to add them without slowing your team down.
What is break-glass access? (and how it works on a small team)
A plain definition of break-glass access, when to use it, how to implement it safely, and how it differs from just-in-time access, for teams without a security function.
What is just-in-time access? (and does a small team need it)
A plain definition of just-in-time (JIT) access, how it works, how it differs from PAM and zero standing privileges, and whether a small team actually needs it.
What is least privilege? (and why it's hard at small scale)
A plain definition of the principle of least privilege, why it's hard to actually implement, how it differs from zero standing privileges, and what small teams can do instead.
One database change took down half the internet
The November 2025 Cloudflare outage was not a hack and not an AI gone rogue. It was a routine internal change. That is exactly why it should worry small teams.