Security analysis and technical guides.
Practical writing on AI security, application security testing, and the technical realities of cybersecurity in regulated environments.
What Microsoft 365 Copilot Can Expose Without Bypassing Permissions
Permission sprawl, overshared SharePoint sites, stale groups, connector scope, and sensitive metadata made discoverable by AI.
Evidence-First AI Security Evaluation
How SCS structures AI security testing across LLM apps, RAG systems, agents, internal copilots, and Microsoft 365 Copilot exposure.
Blocking Port Scans on pfSense
Configuration guide for using pfSense to detect and block port scanning activity — hardening your network perimeter against reconnaissance.