Practical DevSecOps @PDevsecops
San Francisco Joined December 2018-
Tweets681
-
Followers2K
-
Following205
-
Likes274
An MCP compromise may look like normal tool usage. 🚨 The agent invokes tools, retrieves data, and returns an answer. But the instruction came from the wrong place. practical-devsecops.com/mcp-incident-r… #IncidentResponse
Authenticated does not mean hardened. 🛡️ Your MCP server may have OAuth and logs, but is it running as root? Storing secrets in images? Allowing open egress? practical-devsecops.com/mcp-server-har… #ServerHardening
MCP risk is not just an AppSec issue. 📊 It crosses API security, cloud security, third-party risk, identity, logging, and governance. CISOs need a real framework. practical-devsecops.com/mcp-security-r… #MCPSecurity
OAuth is not enough if every agent can call every tool. 🔐 For MCP, use session-scoped access: role plus task equals allowed tools. Give the agent only what the task needs. practical-devsecops.com/mcp-authentica… #MCPAuth
Prompt injection is no longer just a chat input problem. 🧠 With MCP, instructions can enter through PDFs, web pages, emails, calendars, memory, and other agents. practical-devsecops.com/mcp-prompt-inj… #PromptInjection
Quick MCP audit question: 🔍 Can someone access your tool manifest without logging in? If yes, attackers can see tool names, descriptions, schemas, and capabilities. practical-devsecops.com/mcp-server-sec… #MCPSecurity
The user sees a tool name. The model sees the full tool description. 🧪 That hidden surface can be poisoned. Hash manifests, detect drift, and monitor tool call chains. practical-devsecops.com/mcp-tool-poiso… #ToolPoisoning #MCPSecurity
MCP connects agents to databases, code, email, cloud APIs, and internal tools. 🔌 That is power and risk in the same pipe. Inventory servers, remove secrets, add OAuth, enforce allowlists, and log tool calls. practical-devsecops.com/mcp-security-g… #MCPSecurity
MCP now has an OWASP Top 10. ⚠️ 30+ MCP CVEs were filed in Jan-Feb 2026. 43% were shell injection issues. If your agents touch code, data, email, or cloud APIs, start here: practical-devsecops.com/owasp-mcp-top-… #MCPSecurity #OWASP
🚨 Happening TODAY! 📡 DevSecOps Live: Agentic AI Threat Modeling with MAESTRO ✅ MAESTRO 7-layer walkthrough 🗺️ ✅ Live MCP deployment demo 🔬 ✅ Real agentic threats 🔑 🎙️ Speaker: Ken Huang 🔗 us06web.zoom.us/webinar/regist… #DevSecOps #AgenticAI #MAESTRO #AISecurity
🗓️ Two days to go! This one is for you if you are 👇 🔐 Security Engineer ⚙️ DevSecOps Practitioner 🛡️ AppSec Professional 🤖 AI/ML Engineer 👔 Security Leader Free. 23rd April. DevSecOps Live. 🎯 🔗 us06web.zoom.us/webinar/regist… #AgenticAI #MAESTRO #AISecurity #DevSecOps
🗺️ MAESTRO's 7 layers 👇 Foundation Models Data Operations Agent Frameworks Infrastructure Observability Integration Agent Ecosystem 🚨 Most teams stop at Layer 1. 📡 DevSecOps Live | 23rd April 🔗 us06web.zoom.us/webinar/regist… #MAESTRO #AgenticAI #AISecurity
🌟 Ken Huang | DevSecOps Live 🎙️ 👉 CEO, DistributedApps.ai 🏢 👉 CSA Fellow 🛡️ 👉 OWASP AIVSS Project Lead 🔐 👉 14 books on AI security 📚 👉 Speaker: RSA, WEF Davos, IEEE 🎤 Join him 23rd April 🗓️ 🔗 us06web.zoom.us/webinar/regist… #AISecurity #AgenticAI #DevSecOps #Infosec
⚠️ STRIDE. DREAD. PASTA. Built for deterministic software. Not for AI agents. 🤖 🎯 MAESTRO closes that gap. 📡 DevSecOps Live | 23rd April 2026 ⏰ 10.00 EDT / 14.00 GMT / 19.30 IST / 22.00 SGT 🔗 us06web.zoom.us/webinar/regist… #AgenticAI #MAESTRO #AISecurity #DevSecOps
📡 Next DevSecOps Live is here! 🎉 🖥️ Topic: Agentic AI Threat Modeling with MAESTRO 🎙️ Speaker: Ken Huang 🗓️ 23rd April 2026 ⏰ 10.00 EDT / 14.00 GMT / 19.30 IST / 22.00 SGT 🌍 🔗 us06web.zoom.us/webinar/regist… #AISecurity #AgenticAI #MAESTRO #DevSecOps #Infosec
Spending thousands on scanners 🔍 Skipping what makes them useful? 4 questions before writing code: ➡️ What are we building? ➡️ What can go wrong? ➡️ What do we do about it? ➡️ Did we do a good job? #ThreatModeling #DevSecOps #AppSec #SecurityBasics practical-devsecops.com/what-is-threat…
Most DevSecOps rollouts fail in 90 days 📉 Not bad tech. No plan. Phase 1: Assess gaps Phase 2: Align people Phase 3: Automate right Phase 4: Measure + iterate Skipping phases = 3x the debt. #DevSecOps #Implementation #SDLC #CyberSecurity practical-devsecops.com/devsecops-impl…
Wrong tool = false confidence 🛠️ By category: 📦 SBOM: Syft, CycloneDX 🔍 Scanning: Trivy, Grype, Snyk 🔐 Signing: Cosign, Notary 🐳 Container: Harbor, Dockle A scanner nobody checks = no scanner. #DevSecOps #SupplyChainSecurity #SecurityTools practical-devsecops.com/software-suppl…
2025 = DevSecOps stopped being optional 🔒 AI threats outpaced defenses. Supply chain attacks went mainstream. Compliance forced security into business functions. Adapted early = miles ahead in 2026. #DevSecOps #CyberSecurity #SecurityTrends #appsec practical-devsecops.com/devsecops-tren…
Capital One 2019. K8s misconfiguration. $300M 📉 Best practices: 🔐 RBAC first 🔑 Encrypt secrets at rest 🌐 Network policies (default deny) 🔍 Scan every image 📊 Monitor runtime behavior #Kubernetes #KubernetesSecurity #DevSecOps #ContainerSecurity practical-devsecops.com/kubernetes-sec…
Tanya Janca | Shehack... @shehackspurple
50K Followers 2K Following Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻
S1n0xt0 @s1n0xt0
7 Followers 433 Following What is done through love is always beyond good and evil. ⌨️
Wale Soares @walesoares
57 Followers 545 Following Tech investor, entrepreneur, and real estate enthusiast, focused on emerging technologies and market trends.
Thadakamalla Abhishek @ThadakamallaAb3
0 Followers 19 Following
Fabricio Nicolás Riv... @riverosfn
36 Followers 2K Following Futuro Licenciado en Sistemas de Información UNLaR
Baks @Bakssj7
0 Followers 14 Following
Geo B @George_Sapper
0 Followers 48 Following
Subhamay Paul @paulsuv9
0 Followers 207 Following
Ra7405 @i3ecntel
0 Followers 216 Following
fernando @fernando_cruz
39 Followers 379 Following
Karl Seryani @kseryani7
0 Followers 29 Following 4th-year CS student at Western University graduating April 2026. I build full-stack applications and developer tools. Also into offensive and defensive security
David @Dalvikkim1990
0 Followers 56 Following
Benjamin Pick @benjaminpick
180 Followers 4K Following
Sherif Ashraf @SherifAshraf41
0 Followers 11 Following
Joseph Martin @JosephMart93776
38 Followers 1K Following
PatchOrPerish @patchorp3rish
0 Followers 16 Following
Niyantri Security @Niyantri_Labs
3 Followers 24 Following AI-powered code security platform 🚀 Scan.Detect. Fix. Prevent vulnerabilities before they ship. Building the future of secure development. #NiyantriSecurity
SecOpsChain @SecOpsChain
0 Followers 8 Following
clawguru.org @ClawguruGod
2 Followers 35 Following Security-Checks & executable Runbooks für Self-Hosted. Moltbot • OpenClaw • Docker & AI-Agents in 30 Sekunden gecheckt. Kein Signup • Keine Daten-Speicherung
Ing Christ @IngChrist
0 Followers 36 Following
Priyanshu Sharma @PriyanshuS11029
0 Followers 21 Following
Wale Animashaun @walemash
248 Followers 4K Following
Oğuzhan Çeribaşı @exnovan
316 Followers 667 Following Red Team Cyber Security Expert | Web Application Security
prajyot fulsundar @prajyotful14
0 Followers 4 Following
Amy Firestone @AmyFirestone
4 Followers 155 Following
Tata Glen @yuenchung237
0 Followers 32 Following Cybersecurity | DevSecOps | Network Engineering Building secure systems in public Learning. Building. Growing.
Salma Boulahrouf @SalmaBlhf
2 Followers 36 Following
Bayes @zadigetmoi00
1 Followers 280 Following
Langah Mpofu @LangahMpofu201
1 Followers 10 Following
Lakshya @normallistless
0 Followers 9 Following
Alexandre Koneski @mkoneski
273 Followers 3K Following Systems Analyst, Technology enthusiast Interests: IoT, Big Data Analytics, Cloud, Innovation
Ramsingh T Naik @ram_naik
10 Followers 549 Following
Viridiana @G16723Viridiana
1 Followers 15 Following
Abcas MCP Guard @abcas_mcp_guard
15 Followers 198 Following Abcas MCP Guard - since Jan 2026 - Patent Pending. over 176 protection schemes, no API key needed.
cam @AlfredCodreanu
12 Followers 39 Following
Swaraj Puppalwar @PuppalwarSwaraj
13 Followers 37 Following Full‑Stack Web Developer & CTO @ Lioran Groups | React, Node.js, Python | Building scalable web & mobile apps, AI tools, and real-world products. 🚀
Jean-Sébastien @dunkjs
549 Followers 6K Following Je suis désolé. Mon compte était temporairement piraté.
Mark Manning @antitree
3K Followers 2K Following Process isolationist, k8s hacker, ᴎo-prem pusher, syscall denier, guarder of chains 🔸Chainguard - Product Security 🔸Rochester 2600 🔸Former: Snowflake, NCC
Clarisel Pineda @clariselpineda
0 Followers 43 Following
janetonews @janetonews
2K Followers 1K Following Tech & space PR | Ex-journalist | Refueling with good hikes + food
Damien Burks (he/him) @damienjburks
2K Followers 867 Following Cloud DevSecOps Engineer ☁️ | Founder of @devsecblueprint | Content Creator 📝 | AWS Community Builder ☁️ | BlackQueerTechie 🏳️🌈
Tanya Janca | Shehack... @shehackspurple
50K Followers 2K Following Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻
JS0N Haddix @Jhaddix
176K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Clint Gibler @clintgibler
23K Followers 573 Following 🗡️ Head of Security Research @semgrep 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
Scott Piper @0xdabbad00
20K Followers 253 Following Cloud security historian Developed https://t.co/ZXFwkuyseC, CloudMapper, and Parliament Organizer for @fwdcloudsec Researcher at @wiz_io
James Kettle @albinowax
83K Followers 102 Following Director of Research at @PortSwigger aka @Burp_Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
Rohit Ghumare @ghumare64
88K Followers 2K Following Architect | Advisor | Investor | Builder https://t.co/RyijZJTBEC | https://t.co/FDduub1ksp | https://t.co/D2n8y3Ktnv Ex-founder https://t.co/yjLHHWpjNv
Luke Stephens (hakluk... @hakluke
100K Followers 2K Following Hacker, marketer. I manage socials and marketing for cybersecurity orgs. Founder of @hacker_content and @haksecio
Dark Reading @DarkReading
351K Followers 49 Following One of the most widely read and trusted cybersecurity news sites, providing IT security professionals informed insights into the latest news and trends.
Madhu Akula @madhuakula
4K Followers 1K Following Pragmatic Security Leader | Startup Advisor, Author, Speaker & Trainer @ BlackHat, DEFCON, USENIX, OWASP, SANS #Security, #CloudNative, #Kubernetes, #OpenSource
Katie Paxton-Fear @InsiderPhD
97K Followers 2K Following Dr, apparently. Security Adovcate @semgrep & Hacker. #BugBounty hunter & #infosec YouTuber. APIs & Interlinked OffSec, PhD in AI+Sec @hacknotcrime. she/her
OWASP® Foundation @owasp
216K Followers 525 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
Dietmar Schadow @DSchadow
2 Followers 0 Following
rui @fdiskyou
2K Followers 306 Following BJJ Black Belt. Type Confused. calc||GTFO. Retired @OpenBSD committer, former @ProjectHoneynet researcher, once @exploitdb core team (pre-corp) etc
Frans Rosén @fransrosen
43K Followers 907 Following Co-founder of @centrahq/@detectify/@poweredbyingrid. I do not advertise doing hacking services, do not trust the ones telling you I do.
Andrew Hay @andrewsmhay
15K Followers 1K Following Devastatingly handsome and surprisingly approachable executive, record-holding powerlifter, and aspiring wine snob.
brian McGillivray @brianmcgill
7 Followers 6 Following
Liz Rice @LizRice
33 Followers 23 Following
@ddǝɐuɐp @DanaEpp
4K Followers 223 Following I help builders and breakers of code learn to find security vulnerabilities in their apps and APIs.
Irene Michlin @IreneMichlin
537 Followers 215 Following Yes, you can do secure development in Agile or Lean. #SDLC, #ThreatModeling, #AppSec, #defensivesecurity, #Lean, #Agile, #Kanban
Gunnar Grosch @GunnarGrosch
5K Followers 2K Following Developer Advocate at Sinch | ex-AWS | AWS Serverless Hero Hero | Sweden
Mark Manning @antitree
3K Followers 2K Following Process isolationist, k8s hacker, ᴎo-prem pusher, syscall denier, guarder of chains 🔸Chainguard - Product Security 🔸Rochester 2600 🔸Former: Snowflake, NCC
Teri Radichel #cybers... @TeriRadichel
15K Followers 3K Following Founder @2ndSightLab | AI Assisted Pentester. Researcher | AWS Security Hero l GSE | Former IANS, SANS faculty | Contact: LinkedIn
Riccardo ten Cate @RiieCco
294 Followers 312 Following
Matt Tesauro @matt_tesauro
1K Followers 261 Following
Chris Romeo @edgeroute
4K Followers 499 Following Christian; Husband; Dad; CEO Devici, GP @Kerr_Ventures: @AppSecPodcast @SecTablePodcast | #AppSec, #ThreatModeling, and #Startups
Ken Johnson @cktricky
4K Followers 2K Following Co-Founder & CTO @DryRunSecurity. AppSec. BJJ Black Belt. Podcast: https://t.co/lNWxkUndEZ. - '85 Champion Chubby Winner.
SeThLaW (l4wke) @sethlaw
3K Followers 1K Following appsec, mobile, hack, fix, rinse, repeat. Co-host of @absoluteappsec, founder of @redpointsec, #hackertracker developer.
adam shostack @adamshostack
10K Followers 521 Following Done with Twitter. Don't expect responses. Threat Modeling: Designing for Security. Working to reduce bad security outcomes.
Sundar Krishnamurthy @sundarnut
3K Followers 5K Following CISSP, Security Leadership @Expedia, Sleepless in Seattle. Opinions/tweets are my own. Threat modeling, IAM, crypto, teaching #infosec, trainspotting. 🚂
Simon Barker @allthecode_
1K Followers 840 Following Software developer base in the UK, I did the online dev creator thing for a while but copycats ruined it so now I'm just lurking
David Cohen @tutoriaLinux
1K Followers 21 Following Creator of the tutorialinux YouTube channel, author of The Software Developer's Guide to Linux, general nerd.
John Arundel @bitfield
94K Followers 88K Following Go/Rust writer and teacher 🦀. Programming is fun, and you should have fun! Join my Code Club for free Rust + Go learning resources ↓
Tushar Rajpoot @tush_tr604
7K Followers 1K Following Engineering @amazon | Building @kubekode_org | https://t.co/3tOKoCPvZ4, https://t.co/HKINdJtZSH
Harkirat Singh @kirat_tw
123K Followers 1K Following YT - https://t.co/DXjYUcXxXl Cohort - https://t.co/CHefcN58W1 Hire devs - https://t.co/yFKdcBlU9g struggling actor @superteamin
Vanshika @vanshikatech
11K Followers 296 Following Software Developer ll • IG: 280K+ @codecrookshanks • GDSC Lead ‘21 • Public Speaker🎙️#devrel #communities
Hiten Codes @hitencodes
1 Followers 2 Following
Haris Ali Khan @codewithharry
29K Followers 16 Following Software Engineer | YouTuber | Passionate coder
Aman Dhattarwal @AmanDhattarwal
109K Followers 8 Following Founder & CEO of @Apnacollegex | India’s biggest coding community 🚀 | 9Million+ students
Arsh Goyal @arsh_goyal
41K Followers 2K Following software , tech , ai education | ai @samsung | Startups | Ex-ISRO | Educator | 700K+ YT & IG | Reachout on mail : [email protected]
Neeraj Walia @ezSnippet
109K Followers 81 Following A passionate Software Engineer from India. Github - https://t.co/9VCwkXzHMk
Khushboo Verma @khushbooverma
164K Followers 1K Following eng @Cloudflare 🔧 | prev.: Appwrite, Microsoft | Docker Captain 🐳 | Tech 💻 | Community | AI | Views are personal
Andras Cser @acser
2K Followers 2 Following Principal Analyst at Forrester Research covering Identity and Access Management and Fraud Management.
JohnFontana @JohnFontana
3K Followers 681 Following Identity Evangelist @Yubico. ZDNet blogger. Social media; news hound. Skimo racer, cyclist. Views are my own.
Jim Moyle @JimMoyle
5K Followers 633 Following Ultra Runner Azure Virtual Desktop Senior Program Manager Founder of the UK Citrix User Group
Nicholas Chang @nick_cloudops
2K Followers 2K Following Microsoft Azure MVP | Microsoft Certified Trainer | Senior Platform Engineer @KainosSoftware | @AzureCommUG |@MS_ComInsights
Michael Mardahl | MVP @michael_mardahl
2K Followers 566 Following Destroying on-prem solutions since “The Cloud” appeared. Microsoft MVP #enterpriseMobility #Security #Identity. #FatherFirst #neuroDiverse
Maurice Daly [MVP] @modaly_it
9K Followers 808 Following Microsoft Security MVP | MCT | Senior Security Architect @PatchMyPC | https://t.co/7SL00blxOH | Proud father & husband #MSIntune #Microsoft365
Viktor Farcic @vfarcic
8K Followers 481 Following Developer Advocate @upbound_io, host at https://t.co/L3A2IozhhK and https://t.co/2itk5552Vv
Viktoria Semaan @ViktoriaSemaan
370 Followers 8 Following Developer Relations @AWS | 7x AWS Certified | Public Speaker | 600K+ followers on Social Media | Teaching AI and leveling up in Tech
Brendan O’Leary @olearycrew
10K Followers 6K Following DevRel at @KiloCode | ex-GitLab | 1x developer 👨💻 4x dad 👦🏻 👧🏼 👦🏻 👧🏼
Michael Friedrich �... @dnsmichi
13K Followers 5K Following 🦊 Principal Developer Advocate @GitLab 🌱 Focus #DevSecOps #AI #Agents ✨ Travel, embedded hardware, LEGO, new adventures
Simon Bennetts ⚡�... @psiinon
7K Followers 638 Following ZAP (@zaproxy) by @Checkmarx lead, #Mozillian Mastodon: @[email protected]
Anant Shrivastava @anantshri
5K Followers 1K Following Personal Twitter. Founder @cyfinoid Project: @CodeVigilant @TamerPlatform https://t.co/5MjfS4jjAK fediverse @[email protected]
Sena Yakut @sena_yakutt
2K Followers 359 Following ☁️🛡️🚀 AWS Security Hero | ❤️ Securing the future. | Organizer @CloudTurkiye
James Turnbull @kartar
17K Followers 2K Following 🇦🇺🇺🇸 Eng @smartrr_app & author. Ex-@Glitch, @Microsoft, @kickstarter, @docker. Likes tattoos, food & wine. He/him/his. https://t.co/8KTnU3o1as
Mark Imbriaco @markimbriaco
10K Followers 2K Following Head of Engineering @ Railway. Prev. Epic Games, GitHub, Heroku, 37signals. Father of 4.You might like
