cloud - Abhay Bhargav

AppSec Predictions for 2020

A Customary Blogpost I am going to NOT encompass "InfoSec Predictions" in this because "InfoSec" is a HUGE area and I am not nearly qualified enough to be making predictions

Abhay Bhargav

Abhay Bhargav 28 Dec 2019 • 5 min read

serverless

TDD for Serverless - My Setup

I have been building serverless over the last 10 months now. I am currently working on a "not-small" project that spans nearly a 100 functions in Python 3.7. I

Abhay Bhargav

Abhay Bhargav 1 Dec 2019 • 4 min read

application security

Secrets of Secrets

Secrets Management is important. Now, more than ever. Yet, I see very little attention being paid to it by Developers, DevOps teams and surprisingly, even security teams. Secrets are not

Abhay Bhargav

Abhay Bhargav 4 Nov 2019 • 2 min read

application security

Holy s**t! We're really behind!

Have been doing a lot of work with, the Cloud, Kubernetes, Serverless and Containers over the last 2 years, and I realize that we have very little by way of

Abhay Bhargav

Abhay Bhargav 27 Oct 2019 • 2 min read

cloud

Notes on Open Policy Agent and Docker Security

I am starting to work with Open Policy Agent (OPA) for Kubernetes. OPA is largely known for its ability to behave as a powerful Admission Controller for Kubernetes. However, I

Abhay Bhargav

Abhay Bhargav 21 Oct 2019 • 2 min read

serverless

Winning with Serverless DevSecOps Pipelines

There's little doubt that Serverless Technologies are being adopted at a rapid pace [1]. I have personally seen typically stodgy, old-school enterprises take to building out serverless (especially FaaS) projects

Abhay Bhargav

Abhay Bhargav 21 Jul 2019 • 8 min read

serverless

So you wanna build a Production-ready Serverless App?

I've been exploring serverless security for around a year now. Commonly, as a security pro, one typically looks at the offensive angle to any technology. While this can be very

Abhay Bhargav

Abhay Bhargav 18 Jul 2019 • 7 min read

graphql

The Hard Way: Security Learnings from Real-world GraphQL

This article comes (relatively) close on the heels of my talk at AppSec California. The talk was: "An Attacker's Perspective of Serverless and GraphQL Applications"The slides for that talk

Abhay Bhargav

Abhay Bhargav 17 Feb 2019 • 7 min read

Subscribe to Abhay Bhargav