Technologies

Microsoft Azure

Azure landing zone design, Cloud Adoption Framework alignment, policy rollout sequencing and management group governance.

Google Cloud

Google Cloud IAM hardening: organization policy design, workload identity federation, VPC Service Controls perimeters and agent identity.

Alibaba Cloud

Alibaba Cloud security review: RAM permission audit, AccessKey lifecycle, Security Center configuration and cross-border data flow compliance.

Microsoft Sentinel

Using Microsoft Sentinel for detection engineering: data source selection, analytics rules, ATT&CK coverage, the data lake tier and automation.

Microsoft Defender for Cloud

Defender for Cloud for Azure-native CSPM, multicloud extension, container posture and AI workload security posture management.

Microsoft Entra ID

Entra ID hardening: Conditional Access design, PIM, phishing-resistant authentication, app registration governance and agent identity.

BloodHound

BloodHound for mapping privilege escalation paths across Active Directory, Entra ID and — via OpenGraph — cloud, SaaS and agentic identities.

Wiz.io

Wiz for agentless multi-cloud posture management, attack-path graphs and toxic-combination prioritisation, now under Google Cloud.

Microsoft 365

Microsoft 365 hardening: SharePoint oversharing, guest access, Purview DLP and DSPM, and data governance ahead of Copilot and agent rollout.

Google Workspace

Google Workspace hardening: Context-Aware Access, OAuth app governance, Drive sharing defaults and admin console audit configuration.

Terraform

Terraform IaC review: module security, policy-as-code gating, state file protection, dynamic credentials and supply-chain hygiene.

Azure AI Foundry

Securing managed AI platforms: network isolation, agent identity, runtime guardrails, key handling, content filtering, logging and tenant data boundaries.