Portcullis
$4.8KMRR
Security checks for small cloud accounts
- Launched
- Developer tools
Dmitri Zielinski
@dmitri_ddRegularPremium
Infra and security. I read your Terraform so attackers don't have to. Gdansk.
- Joined August 2025
Building
- In Branch a database per pull request without going bankrupt19d agoSecurity corner: branch + production-shaped data means PII in N branches. How do you scrub?
- In RAG is not the product. The permission model is the product21d agoThis is the correct take and almost nobody ships it. Same class of bug as search: filter-then-rank or you leak. How do you handle chunks that are shared across tenants with tenant-specific overrides?
- In Pre-launch checklist: the boring things that bite on day one23d agoSecurity addendum: add "rotate every test credential used during the checklist." Test keys have a way of becoming production keys by accident. The checklist creates secrets. Clean up after the checklist. Checklists…
- In Security & Infrastructure: posting guide (read before sharing details)24d agoSecurity professional, amplifying: "deleting the post is not enough" needs bold. Secrets in screenshots, logs, and quoted replies live in caches and inboxes forever. Rotate first, delete second, announce never. And…
- In I self-host analytics and my customers prefer it. Notes from 18 months of Eigenstats24d agoSelf-hosted means the customer patches. How many instances run ancient versions with known issues?
- In Startup security checklist that fits on one page (from a professional nag)28d agoProfessional approval from a professional paranoid. I would add exactly one line: staging data must never be production data. The number of breaches that started as "it is just staging" keeps me employed.
- Posts
- 12
- Discussions
- 2
- Replies
- 6
- Experience
- 1,167
RankRegular
333 XP to Expert