Writing

Notes on AI security, detection engineering, and the practical edges of deploying LLMs in enterprise environments.

The first posts are in progress: a walk through the mcp-defender-xdr threat model, and why detection engineering wants an MCP server rather than a CLI. Subscribe to the RSS feed and they'll show up when they publish.