#Security

4 articles

Practical IT security for companies without a dedicated security team.

Putting Cloudflare in Front of Everything: DNS, WAF and Zero Trust for SMBs

Putting Cloudflare in Front of Everything: DNS, WAF and Zero Trust for SMBs

Even the free Cloudflare plan gives a small company DDoS protection, a WAF, free TLS and secure remote access. This is the setup I apply to every domain.

Hardening an Ubuntu 24.04 Server: The Checklist I Use on Every Deployment
Linux

Hardening an Ubuntu 24.04 Server: The Checklist I Use on Every Deployment

A fresh VPS is attacked within minutes of going online. This is the short, repeatable hardening checklist I run before anything is deployed.

DevSecOps on a Budget: Shifting Security Left Without a Security Team
DevSecOps

DevSecOps on a Budget: Shifting Security Left Without a Security Team

You do not need an expensive platform to build security into your pipeline. Free tools for secrets, dependencies, containers and code go a long way.

1 min read
Building an IT Department From Scratch: A Practical Playbook
Networking

Building an IT Department From Scratch: A Practical Playbook

Fifteen years of setting up IT for retail chains, factories and agencies taught me the order that works: inventory, network, identity, backup, then everything else.

2 min read