Security
Keep Your Proxmox Restore Key Outside the Backup Chain
An encrypted Proxmox backup is recoverable only if its key remains accessible when the original system is unavailable.
Security
MCP Is the Pipe, Not the Permission Boundary
A secure internal MCP pipeline assumes clients, prompts, and credentials can be compromised—and makes every unauthorized action fail predictably.
Security
Why MCP Isn’t a Security Boundary: A Builder’s Guide to Scoping
MCP is a communication pipe, not a security boundary. Secure internal tools with scopes, least privilege, and boring success criteria.
Security
Why Your Internal MCP Server is a Security Liability (And How to Fix It)
MCP is a communication pipe, not a security boundary. Secure internal tools with least privilege and the boring success criterion.
Security
Secrets Management for Solo SaaS: From .env to Vault
Stop hardcoding secrets. A practical guide to securing your solo SaaS without enterprise complexity or cost.
Security
MCP Is a Pipe, Not a Vault: Securing Internal AI Tools with Least Privilege
MCP is a communication protocol, not a security boundary. Secure internal tools with least-privilege scopes and explicit consent to contain the blast radius of
Security
Stop Using .env Files: A Solo Founder’s Guide to Secret Sprawl
Convenience kills solo SaaS projects. I stopped using .env files when the operational cost outweighed the speed. Here is how to reduce blast radius,...
Security
MCP for Internal Tools: Permissions, Scopes, and Boring Success Criteria
MCP is a pipe, not a vault. Secure internal tools with tool-level scopes and boring success criteria.
Security
Small Business Security Without Framework Theater: Backups, MFA, Patching, and Access Reviews
Stop buying tools. Start building habits. A practical guide to MFA, patching, and backups for small businesses.
Security
Iowa Small Business Cybersecurity in 2026: A Practical NIST CSF 2.0 Guide
A practical Iowa SMB guide to using NIST CSF 2.0 without turning security into paperwork.