https://zodops.io/ Engineering notes on the systems that keep data safe. Long-form, implementation-level writing on agent security, cloud security, data security, and security automation. en-us Thu, 29 Oct 2026 00:00:00 GMT https://zodops.io/anatomy/the-log-sees-the-token/ https://zodops.io/anatomy/the-log-sees-the-token/ Thu, 29 Oct 2026 00:00:00 GMT MCP At 2 a.m., the team's agent opened a public pull request full of private code. GitHub says Dana opened it. Dana was asleep. https://zodops.io/cases/encrypted-still-readable/ https://zodops.io/cases/encrypted-still-readable/ Sat, 24 Oct 2026 00:00:00 GMT Data Security The warehouse was encrypted. Every analyst could still read every Social Security number. This is how a hospital stopped moving real patient identifiers into places that only needed to join on them. https://zodops.io/articles/rollout-playbook-without-stalling-engineering/ https://zodops.io/articles/rollout-playbook-without-stalling-engineering/ Tue, 13 Oct 2026 00:00:00 GMT Field Notes Getting a security tool adopted without becoming the thing that stalls the sprint. https://zodops.io/articles/llm-triage-alert-is-attacker-controlled/ https://zodops.io/articles/llm-triage-alert-is-attacker-controlled/ Mon, 14 Sep 2026 00:00:00 GMT Security Automation Adding an LLM to your triage workflow means the attacker gets a vote. https://zodops.io/anatomy/github-oidc-org-can-assume-prod/ https://zodops.io/anatomy/github-oidc-org-can-assume-prod/ Tue, 08 Sep 2026 00:00:00 GMT CI You took the access key out of the pipeline. The trust policy still says any repo in the org can become the prod role. That is the same grant with a nicer name. https://zodops.io/anatomy/sites-read-all-is-the-index/ https://zodops.io/anatomy/sites-read-all-is-the-index/ Tue, 25 Aug 2026 00:00:00 GMT MCP You connected the agent to SharePoint. You did not review the Graph permission the app was granted. Application Sites.Read.All is a tenant crawl, not a search box. https://zodops.io/cases/the-owners-who-were-not-people/ https://zodops.io/cases/the-owners-who-were-not-people/ Tue, 18 Aug 2026 00:00:00 GMT Cloud Security A tenant-wide inventory of standing Owner and User Access Administrator found four assignments on one subscription. Three of them were not people. PIM could cover the human. It could not cover the pipeline, the vendor identity, or the Global Administrator setting left on from a cleanup. https://zodops.io/anatomy/mcp-service-account-in-env/ https://zodops.io/anatomy/mcp-service-account-in-env/ Tue, 11 Aug 2026 00:00:00 GMT MCP You reviewed the system prompt. You did not review the access key the MCP server loads on start. That key is the permission grant. https://zodops.io/articles/no-last-day/ https://zodops.io/articles/no-last-day/ Mon, 03 Aug 2026 00:00:00 GMT Agent Security Every employee who leaves gets an offboarding. The agent your team stood up in March never will. Protection that depends on where data sits can't keep up with something whose job is to move it. https://zodops.io/articles/the-package-doesnt-exist-yet/ https://zodops.io/articles/the-package-doesnt-exist-yet/ Tue, 28 Jul 2026 00:00:00 GMT Field Notes Coding assistants invent software names. Attackers can claim them first. The fix is a policy and architecture decision, not a coding one. https://zodops.io/articles/mcp-tool-permissions-and-prompt-injection/ https://zodops.io/articles/mcp-tool-permissions-and-prompt-injection/ Thu, 16 Jul 2026 00:00:00 GMT Agent Security Prompt injection matters because of what the agent is allowed to do next. Tool permissions, output channels, and agent identity are where that gets decided — or doesn't. https://zodops.io/articles/azure-owner-means-root/ https://zodops.io/articles/azure-owner-means-root/ Tue, 09 Jun 2026 00:00:00 GMT Cloud Security Owner and User Access Administrator are root for everything beneath them, and Global Administrator is one setting from both. The fix is removing standing access: PIM for people, tighter controls for the identities PIM can't cover. https://zodops.io/cases/the-deny-still-held/ https://zodops.io/cases/the-deny-still-held/ Wed, 20 May 2026 00:00:00 GMT Cloud Security A weekend AdministratorAccess grant outlived the migration. The SCP kept the role from leaving the org or turning off CloudTrail. It couldn't stop a bucket policy from trusting an account we didn't own. I treated the deny as the ceiling, then added resource control policies for the data path. https://zodops.io/articles/scp-deny-is-the-perimeter/ https://zodops.io/articles/scp-deny-is-the-perimeter/ Tue, 21 Apr 2026 00:00:00 GMT Cloud Security SCPs set the ceiling that still holds when an IAM policy is wrong. Paired with resource control policies, they're how you draw a real boundary around your data. https://zodops.io/articles/ai-agent-memory-governance/ https://zodops.io/articles/ai-agent-memory-governance/ Mon, 06 Apr 2026 00:00:00 GMT Agent Security When an agent remembers what matters to you, it can also remember what an attacker told it. Persistent memory needs the same governance as any other place sensitive data lives. https://zodops.io/cases/finding-shadow-ai/ https://zodops.io/cases/finding-shadow-ai/ Thu, 26 Mar 2026 00:00:00 GMT Data Security Employees were sending sensitive data, including AWS secret keys, to assistants nobody had approved. I paired DSPM with endpoint and inline DLP to find it, then rebuilt policy around corporate versus personal assistant instances, cutting false positives by about two-thirds. https://zodops.io/articles/dspm-dlp-shadow-ai-leaks/ https://zodops.io/articles/dspm-dlp-shadow-ai-leaks/ Tue, 17 Mar 2026 00:00:00 GMT Data Security Running DSPM and DLP to hunt for shadow assistants taught me two things: the leaks are bigger than you expect, and much of the noise comes from the assistants you already approved. https://zodops.io/articles/data-security-shadow-data-inventory/ https://zodops.io/articles/data-security-shadow-data-inventory/ Sun, 22 Feb 2026 00:00:00 GMT Data Security Shadow data isn't a tooling gap. It's an inventory gap. https://zodops.io/articles/security-automation-without-babysitting/ https://zodops.io/articles/security-automation-without-babysitting/ Sun, 11 Jan 2026 00:00:00 GMT Security Automation Security automation that doesn't become another thing to babysit.