https://codeandcypher.com/tags/devsecops/Enterprise cybersecurity research by Joshua A. Wortz, CISSP: Zero Trust, cloud security, DevSecOps, threat defense, and AI-security education.https://codeandcypher.com/images/papermod-cover.pnghttps://codeandcypher.com/Hugoen-usThu, 22 Oct 2026 17:20:43 -0700https://codeandcypher.com/posts/why-i-moved-from-wordpress-to-hugo/Thu, 22 Oct 2026 08:00:00 -0700https://codeandcypher.com/posts/why-i-moved-from-wordpress-to-hugo/Why enterprise security engineer Joshua Wortz traded WordPress for Hugo: eliminating attack surface, cutting runtime bloat, and embracing DevSecOps purity.https://codeandcypher.com/posts/reverse-engineering-tableau-to-fabric-oauth/Fri, 02 Oct 2026 05:00:00 -0700https://codeandcypher.com/posts/reverse-engineering-tableau-to-fabric-oauth/Reverse engineer Tableau to Fabric OAuth failures, decode AADSTS650052, and build hardened, least-privilege Entra ID runbooks with KQL and PowerShell.https://codeandcypher.com/series/hands-on-ai-security/part-4-policy-as-code-open-policy-agent-rego/Thu, 01 Oct 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-4-policy-as-code-open-policy-agent-rego/Connect Open Policy Agent (OPA) to your AI security gateway, evaluate context classifications in real time, and generate audit-ready security block logs.https://codeandcypher.com/series/acuity-health-security-architecture/part-4-automated-ci-cd-quality-gates-iso27001-risk/Tue, 29 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-4-automated-ci-cd-quality-gates-iso27001-risk/Enforce automated CI/CD quality gates, track SLAs, and execute an actionable 10-step ISO 27001:2013 risk assessment across cloud healthcare workloads.https://codeandcypher.com/series/hands-on-ai-security/part-3-blue-teaming-building-the-security-gateway/Thu, 24 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-3-blue-teaming-building-the-security-gateway/Construct an external security gateway in Flask to inspect incoming prompts, enforce guardrails, and intercept leaked secrets before they reach the browser.https://codeandcypher.com/series/acuity-health-security-architecture/part-2-architecting-zero-trust-devsecops/Tue, 15 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-2-architecting-zero-trust-devsecops/Operationalize NIST SP 800-218 (SSDF) and Zero Trust Architecture across cloud-native development environments, ephemeral CI/CD pipelines, and supply chains.https://codeandcypher.com/series/hands-on-ai-security/part-1-zero-cost-local-llm-lab/Thu, 10 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-1-zero-cost-local-llm-lab/Architect a reproducible local AI red/blue team lab using Docker, Ollama, and the vulnerable Piper chatbot on standard 8GB RAM student laptops.https://codeandcypher.com/papers/acuity-health-enterprise-architecture-hotwash-synthesis/Mon, 10 Aug 2026 00:00:00 -0700https://codeandcypher.com/papers/acuity-health-enterprise-architecture-hotwash-synthesis/Executive synthesis and architectural hotwash of the Acuity Health enterprise security transformation, mapping Zero Trust and NIST governance frameworks.https://codeandcypher.com/papers/designing-a-secure-software-development-program/Mon, 06 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/designing-a-secure-software-development-program/An engineering framework operationalizing NIST SP 800-218 (SSDF), CI/CD quality gates, and OWASP API security defenses in a healthcare delivery organization.