Security research
Field notes from real sweeps.
What we find when we audit, harden and recover servers. Client details are removed; the lessons are not.
October 8, 2026
Your firewall is on. Docker is ignoring it.
Published container ports skip UFW entirely. How to find exposed services from outside, and the fixes that survive the next deploy.
October 8, 2026
A country allowlist that only loaded half the country
A US-only firewall allowlist silently loaded half its ranges, and another loaded none. How to size, verify and scope country filtering.