Math-Computer-Science-Cyber Security Hybrid | Co-founder and CTO https://xitter.cf/t.co/Ljrt2g0kED | PhD @UWaterloo
Kanada
Joined March 2009
- Tweets288
- Following281
- Followers70
- Likes743
Starting in a bit more than half an hour: youtube.com/watch?v=35SSULVs…
See you there :-)
Your AI coding agent can write Terraform, Dockerfiles, and K8s manifests in seconds.
But can it tell you if they're secure?
We built an open-source skill that adds security scanning to any AI coding agent. One command install. Here's how it works:
youtube.com/watch?v=851QsRDu…
The part people like most: it doesn't just find issues — it explains WHY the config is insecure, shows the exact file and line, and can fix it for you.
Going through a SOC2 or HIPAA audit? It maps findings to compliance frameworks too.
Open source. MIT licensed. Free to use.
GitHub: github.com/coguardio/misconf…
Star it if it's useful. Issues and PRs welcome.
#DevSecOps #InfrastructureAsCode #Terraform #Kubernetes #CloudSecurity #OpenSource
#VibeCoding is dangerous. Code issues, but also misconfigs. Here is a claude skill to help you detect those: github.com/coguardio/misconf…
OWASP TOP 10 2025 RC1 just dropped: owasp.org/Top10/2025/0x00_20…
Misconfig is now Nr. 2! My bet was right :-)
My short term prediction for the future: Pagerank equivalent algorithm for AI training improvements. Let's see in 6 months if something came up :-)
I just got an email that I won a $50 visaqift card... So much better than a gift card... My lucky day!!! :-)
Is "delete my ChatGPT history if something happens to me" the new "delete my browser history if something happens to me"? 🤔
status.redhat.com/incidents/… Primiary key error... Shows that it happens to the best! Keep your #configs secured!
So, now that microsoft favours go at least for #typescript... what will this mean for .NET? Interesting times.
My thoughts on #crowdstrike today: coguard.io/post/microsoft-cr… #ciso #CyberSecurity #uptime #downtime #microsoft #Crowdstrike
Truly, every security benchmark is saying: Keep images immutable in your registry... But rarely any project follows the advice, and it costs precious engineering hours.
Albert Heinle retweeted
🚀 The Alpha Release of the D.U.C.K. Initiative for Node Operators is now live.
The goal is to equip @LidoFinance node operators with open-source tools and a knowledge base to enhance operations & reduce risk in running staking infrastructure.
#web3 #staking #defi #infra #risk
ALT Introduction the Alpha Release: The D.U.C.K. Initiative
Albert Heinle retweeted
In collaboration with @ChainproofDAI, @HypernativeLabs, @Kiln_finance, @Lionscraft_io, @CoGuardIO, and @BlockscapeLab 🤝
If you’d like to contribute feedback to the initial draft, reach out at: forms.gle/RaUWtoKdNWivJb5R8
Albert Heinle retweeted
🦆 Thrilled to unveil the initial draft of the D.U.C.K. Initiative!
D.U.C.K. provides open-source resources to @LidoFinance node operators and others in the staking infrastructure space 🔧
More details: duck-initiative.gitbook.io/d…
