Softgategrid

Field notes

Notes from cybersecurity engineering work

Short articles rooted in Softgategrid consulting practice—boundaries, secrets, logging, and scope discipline.

Server aisle with blue cabinet lights

Draw trust boundaries before you ship the next feature

Most cybersecurity debt starts as an unspoken assumption about who can call whom.

 Physical padlock resting on a laptop

Secrets that survive rotation without breaking deploy night

Rotation fails when the secret is treated as a string in a ticket instead of a lifecycle.

 Close-up of code on a screen during late work

Logging for humans who are already under pressure

Detection quality collapses when logs are plentiful but decisions are slow.

 Notebook and laptop on a meeting table

How we keep security review scope from devouring the calendar

A review that tries to examine everything usually finishes nothing useful.