cloud - Abhay Bhargav

5 Must-Have Kubernetes Security Tools

My entire months of June and July have been consumed by Kubernetes. All, largely owing to the Kubernetes Security Masterclass Training that are we are bringing to BlackHat USA 2020

Abhay Bhargav

Abhay Bhargav 15 Jul 2020 • 4 min read

application security

AppSec Predictions for 2020

A Customary Blogpost I am going to NOT encompass "InfoSec Predictions" in this because "InfoSec" is a HUGE area and I am not nearly qualified enough to be making predictions

Abhay Bhargav

Abhay Bhargav 28 Dec 2019 • 5 min read

serverless

TDD for Serverless - My Setup

I have been building serverless over the last 10 months now. I am currently working on a "not-small" project that spans nearly a 100 functions in Python 3.7. I

Abhay Bhargav

Abhay Bhargav 1 Dec 2019 • 4 min read

application security

Secrets of Secrets

Secrets Management is important. Now, more than ever. Yet, I see very little attention being paid to it by Developers, DevOps teams and surprisingly, even security teams. Secrets are not

Abhay Bhargav

Abhay Bhargav 4 Nov 2019 • 2 min read

application security

Holy s**t! We're really behind!

Have been doing a lot of work with, the Cloud, Kubernetes, Serverless and Containers over the last 2 years, and I realize that we have very little by way of

Abhay Bhargav

Abhay Bhargav 27 Oct 2019 • 2 min read

cloud

Notes on Open Policy Agent and Docker Security

I am starting to work with Open Policy Agent (OPA) for Kubernetes. OPA is largely known for its ability to behave as a powerful Admission Controller for Kubernetes. However, I

Abhay Bhargav

Abhay Bhargav 21 Oct 2019 • 2 min read

serverless

Winning with Serverless DevSecOps Pipelines

There's little doubt that Serverless Technologies are being adopted at a rapid pace [1]. I have personally seen typically stodgy, old-school enterprises take to building out serverless (especially FaaS) projects

Abhay Bhargav

Abhay Bhargav 21 Jul 2019 • 8 min read

serverless

So you wanna build a Production-ready Serverless App?

I've been exploring serverless security for around a year now. Commonly, as a security pro, one typically looks at the offensive angle to any technology. While this can be very

Abhay Bhargav

Abhay Bhargav 18 Jul 2019 • 7 min read

graphql

The Hard Way: Security Learnings from Real-world GraphQL

This article comes (relatively) close on the heels of my talk at AppSec California. The talk was: "An Attacker's Perspective of Serverless and GraphQL Applications"The slides for that talk

Abhay Bhargav

Abhay Bhargav 17 Feb 2019 • 7 min read

Subscribe to Abhay Bhargav