(01)
Secrets management without a vault platform
HashiCorp Vault, AWS Secrets Manager, Doppler — paid vault platforms are great, and overkill for small teams. Smaller teams can handle secrets cleanly with simpler tooling that fits within their cloud provider and developer workflow.
→
(02)
WordPress security — myths and reality
"WordPress is insecure" — everyone has heard it. The real statistics say something different: properly configured, it's safer than most custom builds.
→