We use Tailscale as our VPN solution internally here at SRA for accessing a lot of our internal systems as well as for having a static egress IP (via exit nodes) for services that only allow IP-based access controls. We developed a GitOps solution to manage the Tailscale policy that governs our network. In this blog, we will walk through this solution.

There are many posts covering the best practices for mitigating supply chain attacks. Beyond these, developers can further limit their blast radius by isolating build stages from publishing stages. This post highlights how this pattern can be implemented and how it is largely ignored by vendor documentation.

The WADLer is a tool for automatically parsing and testing API endpoints pulled from Web Application Description Language (WADL) files.

Process Mitigations are a Windows feature that enables exploit mitigations on either a per-process or system-wide basis. This post explores our research into potential defensive applications of Process Mitigations to prevent commodity attack techniques as well the limitations of the control.

Embed canary tokens in your login portal and route webhook trigger data into Microsoft Sentinel via Azure Logic Apps - detecting cloned or proxied login pages at the moment they load, before credentials are entered.