Introduction This blog was inspired by a recent conversation with my account manager at Kong, who explained how the company will govern its Open Source distribution model from version 3.9 onwards. That triggered me to reflect more broadly on how Open Source projects are governed, and how organizations should
At Simptel, we apply two guiding principles in the design of our infrastructure: least surface exposure and zero-trust networks. These principles ensure that every interaction with our platform presents the smallest possible attack surface, and that no step or connection is implicitly trusted. In this text, we will explain step
Every time you click “Login with Microsoft or Google” you’re experiencing something called federated authentication. It’s a form of Single Sign-On (SSO) that allows you to access multiple services without creating a new username and password for each. Instead, you sign in once with a trusted identity provider
Introduction Privacy-Enhancing Technologies (PETs) are tools and methods designed to protect individual privacy while still enabling useful data processing. According to the European Union Agency for Cybersecurity (ENISA), PETs protect privacy by reducing personal data or preventing unnecessary processing, all without losing system functionality (ENISA, 2018). In the context of
Cybersecurity can feel like alphabet soup: IAM, IGA, InfoSec, Zero Trust. They sound complicated, but at their core, they’re all about one simple question: 👉 Who should be allowed to do what? Let’s break this down in plain English. 👤 IAM: Who You Are and What You Can Do Identity