Guides

Artificial intelligence

Agents, MCP and what changes when software signs in on someone's behalf.

Artificial intelligence Authentication and SSO Authorization and access control Enterprise ready MCP Security and compliance User provisioning and SCIM

4 min read

A guide to organization modeling

The engineering questions that matter are rarely about which tool.

1 January 2026

4 min read

Best practices for MCP secrets management

The uncomfortable part of building for agents is that the old assumptions quietly stop holding.

1 January 2026

4 min read

DDoS attacks and botnets explained

The useful frame is not "is this secure" but "what does an attacker get if this one thing goes wrong, and how quickly would we know".

1 January 2026

4 min read

Every SCIM attribute explained

The value of a standard is that two parties who have never spoken can interoperate.

26 May 2025

4 min read

How to build secure AI agents that are Enterprise Ready

The uncomfortable part of building for agents is that the old assumptions quietly stop holding.

1 January 2026

4 min read

How to identity a phishing email

The useful frame is not "is this secure" but "what does an attacker get if this one thing goes wrong, and how quickly would we know".

1 January 2026

4 min read

MCP, ACP, A2A, Oh my!

Most of the difficulty with agents is not the model.

1 January 2026

4 min read

OTP bots explained: What they are and how to stop them

Almost every incident worth writing about starts with something that was working exactly as designed.

1 January 2026

4 min read

SCIM vs JIT: Key differences explained

Protocol work looks tedious from the outside and turns out to be where the interesting failures live.

1 January 2026

4 min read

The 4 main types of access control

A design is a set of bets.

1 January 2026

4 min read

The developer's guide to domain verification

A design is a set of bets.

1 January 2026

4 min read

What does it mean to distill a machine learning model or LLM?

Agents changed the shape of the problem.

1 January 2026

4 min read

What is CMMC 2.0 and who needs it?

The gap between selling to teams and selling to companies is not a pricing change.

6 May 2026

4 min read

What is email spoofing?

The useful frame is not "is this secure" but "what does an attacker get if this one thing goes wrong, and how quickly would we know".

1 January 2026

4 min read

What is fine-grained access control?

Most systems do not fail because someone chose the wrong database.

1 January 2026

4 min read

What is the Model Context Protocol (MCP)?

Agents changed the shape of the problem.

1 January 2026

Ship the thing the guide describes

Every pattern here is already implemented in the platform.

Get started Talk to an expert