Security

I wanted to find out whether our internal, VPN-only systems could be made usable from Claude, with real identity, and without the connection turning into a

If you already run Nomad + Vault patterns in production, the first question about OpenBao is simple: will our existing workloads still run without a rewrite? In

In our previous post about HashiCorp Nomad and Vault: Dynamic Secrets we walked through the full lifecycle of secrets management for a Python Flask application

Over the last two weeks we introduced three mesh VPN solutions one at a time: NetBird, Tailscale, and Headscale. Three posts, three products, one open question:

In Post 2 of this series we introduced Tailscale as the UX gold standard in the mesh VPN segment. With one honest caveat: The control plane is proprietary,

Mesh VPNs are replacing the old concentrator model. Anyone stepping into this space cannot avoid one name: Tailscale. The service has been the UX gold standard

Classic SSL VPNs are aging. The last two years have shown multiple critical vulnerabilities in the major concentrator products, while at the same time the

If you've used Claude Code for more than a day, you know the drill. Every Bash command, every file write outside the working directory, every network call --

In 3 Stunden erarbeiten wir eine praxisnahe Security- und Compliance-Strategie für eure Infrastruktur und Plattformen.

In 2026, “tech trends” are less about shiny launches and more about the forces that shape everyday IT work—how software gets built, how systems stay secure, how

A lot has happened in the eight months since we covered Mondoo's March 2025 release. If you're already using the platform, you've probably noticed some big

The Problem: Hardcoded Credentials Every developer has faced this temptation: you need to test something quickly, so you hardcode an API key or database

Introduction Model access alone rarely delivers differentiated organizational value. Real leverage appears when language models can safely invoke tools

Introduction As organizations increasingly adopt AI-powered solutions, providing secure and flexible access to large language models (LLMs) becomes a critical

In modern cloud-native Kubernetes environments, security is paramount. One of the key challenges is ensuring secure communication between microservices while

In a cloud-native Kubernetes environment, secrets management is a critical aspect of security. HashiCorp Vault is a popular tool for managing secrets and

In today’s fast-paced digital world security isn’t optional, it’s a foundation. Whether you're running microservices in Kubernetes, managing cloud resources, or

Mondoo bills itself as a comprehensive exposure management platform – think a single pane for all your security needs, on-prem and in the cloud. In practice,

In previous posts we have already shown multiple ways to use HashiCorp Packer to build Golden Images. In this post we will show how to automate the process with

In the rapidly evolving world of software development, securing and managing the integrity of codebases is paramount, particularly for organizations subject to

Ensuring access controls and secrets management is critical in modern IT infrastructures. HashiCorp offers two powerful tools, Boundary and Vault, which

In today's fast-paced digital landscape, efficient case management is crucial for organizations to stay on top of security and compliance issues. Mondoo, a

In the previous posts of this blog series, we introduced the Mondoo platform, its Terraform provider resources, data sources, and imports, exploring how they

Introduction In today's fast-paced digital landscape, ensuring compliance with various frameworks is crucial for companies to maintain the security and

In the previous posts of this blog series, we introduced the Mondoo platform, its Terraform provider resources and data sources, exploring how they enhance

As organizations strive to safeguard their digital assets, innovative solutions like Mondoo have emerged to enhance security and compliance across various

Ensuring the security of your Kubernetes clusters and workloads is important in today's digital landscape. This article introduces Mondoo's innovative tools for

In today's digital landscape, ensuring the security of your supply chain is key. The integration of CIS SecureSuite Certification with Mondoo's Compliance on

In an era where information security management is more crucial than ever, organizations are seeking innovative solutions to safeguard their digital assets

The cybersecurity landscape is constantly evolving, and with it, the regulatory requirements that businesses must meet. One of the most significant developments

In today's dynamic and complex cloud environments, organisations face significant challenges in managing costs while ensuring compliance and operational

This article shows you how to secure your Kubernetes cluster with the Mondoo Operator. The Mondoo Operator simplifies the process of securing your Kubernetes

Securing your GitHub Organisation is crucial as it can contain sensitive code and data. It is therefore important to monitor contributors and contributions to

As the world's leading platform for software development and collaboration, GitHub sees millions of new repositories created every day. While this rapid growth

In this article, we will show you how to secure your Kubernetes cluster with Mondoo and GitHub Actions. We will use the Mondoo GitHub Action to scan deployed

In this article, we will show you how to secure your Kubernetes cluster with Mondoo and GitHub Actions. We will use the Mondoo GitHub Action to scan our

Protecting your digital assets isn't just about safeguarding data; it's about safeguarding your business's reputation, integrity, and longevity. With cyber

In the ever-evolving landscape of cloud infrastructure management, efficiently securing and monitoring resources is critical. This is where Mondoo comes in, a

We are happy to announce our partnership with Mondoo, a leading provider of cybersecurity and infrastructure management solutions. In collaboration with

Gain in-depth knowledge of the EU NIS2 guidelines, covering key provisions, compliance requirements, and best practices for organizational implementation.

Master Mondoo’s advanced features, focusing on policy scoring, exception handling, data exporting, smart ticketing, and custom compliance frameworks.

Gain hands-on experience with Mondoo, mastering its features, custom policies, and advanced security management.