Insights and best practices from the policy-as-code community
Between 25 August and 11 September 2026, four critical CVEs hit NVIDIA NemoClaw, DeepSeek Harness, IBM Langflow and SGLang. Every one traces back to a default configuration, not a model flaw. A verified breakdown of each vulnerability and the policy-as-code controls that actually contain them.
91.5% of vibe-coded apps had at least one vulnerability in Q1 2026. Real incidents — Moltbook, Lovable, Orchids — show what happens when AI-generated code ships without security review. Policy-as-code defenses that actually stop it.
A technical analysis of Model Context Protocol (MCP) security vulnerabilities including CVE-2025-6514 (CVSS 9.6), the Anthropic mcp-server-git RCE chain, and real supply chain incidents. Learn the four MCP threat layers and implement policy-as-code defenses with OPA and Falco.
A comprehensive analysis of React2Shell (CVE-2025-55182), the critical CVSS 10.0 remote code execution vulnerability affecting React Server Components and Next.js. Learn the technical exploit mechanics, real-world exploitation patterns, and how to implement policy-as-code defenses.
A comprehensive guide to securing GitOps workflows with policy-as-code. Learn how to integrate OPA, Kyverno, and admission controllers with Flux and ArgoCD to prevent misconfigurations, enforce compliance, and automate security at the Git layer.
An in-depth 2025 analysis of Terraform vs. OpenTofu for enterprise use. We compare licensing (BUSL vs. MPL), ecosystem maturity, feature velocity, community support, and provide a clear migration guide.
An executive guide for CISOs and security leaders on eBPF. Learn how it provides kernel-level observability for threat detection, network policy enforcement, and runtime security without sidecars.
AI won't replace policy experts, but it's becoming an incredible co-pilot. We explore practical ways to use AI for generating, explaining, and testing complex Rego policies.
The definitive guide to Platform Engineering and Internal Developer Portals (IDPs). Learn how to build self-service infrastructure with Backstage, Port, Humanitec, and custom solutions. Includes architecture patterns, implementation strategies, and enterprise-grade templates.
A comprehensive guide to managing Terraform state files. Learn how to prevent accidental deletion, implement robust backup and recovery strategies using S3 versioning, and apply best practices for state file security.
Browse articles by topic
