Category: Security

Security is the dedicated cybersecurity category on orthogonal.info, covering everything from application-level secure coding practices to network-layer defenses and zero-trust architecture. In an era where a single misconfigured cloud bucket or unpatched dependency can lead to a headline-making breach, this category provides the practical, hands-on guidance that engineers need to build and maintain secure systems. Each article blends defensive theory with real commands, configurations, and code you can apply immediately.

With 21 posts spanning offensive and defensive security topics, this collection reflects a practitioner’s perspective — not checkbox compliance, but genuine risk reduction.

Key Topics Covered

Application security (AppSec) — Secure coding patterns, input validation, OWASP Top 10 mitigations, and static analysis with tools like Semgrep, Bandit, and CodeQL.
Network security and firewalls — Configuring OPNsense, pfSense, VLANs, WireGuard tunnels, and network segmentation strategies for home and production environments.
CVE analysis and vulnerability management — Dissecting real-world CVEs, understanding CVSS scoring, and building patch management workflows with Trivy, Grype, and OSV-Scanner.
Penetration testing and red teaming — Practical walkthroughs using Nmap, Burp Suite, Nuclei, and Metasploit to identify weaknesses before attackers do.
Zero-trust architecture — Implementing identity-aware proxies, mutual TLS, and least-privilege access using Cloudflare Access, Tailscale, and SPIFFE/SPIRE.
Container and Kubernetes security — Pod security standards, image scanning, runtime protection with Falco, and supply-chain security with Sigstore and cosign.
Secrets management — Storing and rotating secrets with HashiCorp Vault, SOPS, Sealed Secrets, and cloud-native key management services.
Compliance and hardening — CIS Benchmarks, STIGs, and automated compliance scanning for Linux hosts, containers, and cloud accounts.

Who This Content Is For
This category serves security engineers, DevSecOps practitioners, penetration testers, platform engineers, and system administrators who take security seriously without wanting to drown in vendor marketing. Whether you are hardening a homelab, preparing for a SOC 2 audit, or building a secure CI/CD pipeline, the guides here are written by and for people who ship code and defend infrastructure daily.

What You Will Learn
Readers of the Security category will gain the skills to identify and remediate vulnerabilities across the full stack — from source code to running containers to network perimeters. You will learn how to integrate security scanning into CI/CD pipelines, configure firewalls with defense-in-depth principles, analyze CVE disclosures to assess real-world impact, and implement zero-trust networking without crippling developer velocity. Every article prioritizes actionable steps over abstract theory.

Explore the posts below to strengthen your security posture today.