Field Notes
Write-ups on network architecture, infrastructure, and security.
Curl First, Build Second: The API Validation Methodology
The one rule that shaped every feature in MistPulse: never write application code against an API response shape you haven't verified yourself, with a real curl call, first.
Sep 24, 2026
Laying the Foundation: Architecture and the Security-First Proxy
Why MistPulse's mobile app never touches a Mist API token, and the Supabase edge-function relay that stands in its place as the system's only security boundary.
Sep 23, 2026
The Idea: Why I Built MistPulse
How years of troubleshooting networks from a laptop in the field turned into a mobile app project, and the non-negotiable security boundary set before a line of code was written.
Sep 22, 2026
From GRC Compliance to Continuous Exposure Management: Quantifying Cyber Risk with Open-Source Architecture
Introducing a Continuous Threat Exposure Management (CTEM) framework integrated with FAIR cyber risk quantification: moving from static GRC compliance to continuous, board-level risk visibility.
Sep 14, 2026
Bridging Technical Scanning to Enterprise Governance: How Open-Source Vulnerability Management Drives GRC Compliance
How open-source vulnerability scanning workflows transform raw system telemetry into auditable compliance evidence across ISO 27001, SOC 2, NIST SP 800-53, and PCI-DSS.
Sep 14, 2026
Running OpenVAS Is Easy. Managing Vulnerabilities Is Not.
Vulnerability scanning is widely adopted, yet many organizations struggle to reduce risk despite running regular scans. Without governance, prioritization, and ownership, vulnerability data becomes noise.
Sep 14, 2026
OpenVAS Vulnerability Scanner on Ubuntu 24.04: Docker Deployment with HTTPS
How to run OpenVAS (GVM) in Docker with HTTPS on Ubuntu 24.04: consolidating the working steps where Greenbone's own documentation is partially outdated.
Sep 14, 2026
Get new posts by email: no spam, unsubscribe anytime.