// writing

Working notes on Application Security and Saudi PDPL

Every article here started as something I needed to explain to a team, a regulator, or a version of myself from ten years ago. Published on LinkedIn, mirrored and indexed here.

// featured series

Series

COMPLETED5 of 5

Securing APIs

A field guide to API security for teams shipping production traffic. Written for engineers who own the code, not just the policy.

Read the series

COMPLETED5 of 5

Practical Prompt Engineering for Security

How security teams can use LLMs without leaking data, hallucinating controls, or drowning in output. Concrete prompts and guardrails.

Read the series

ACTIVE4 of 26

Saudi PDPL Governance and Audit Series

A 26-part working guide to the Personal Data Protection Law of Saudi Arabia. Roles, records, lawful basis, and readiness for audit.

Read the series

// reference

Reference collection

REFERENCE COLLECTION6 articles · 2024-2025

Secure Coding for ASP.NET Core

A reference collection covering authentication, authorization, input handling, and secure defaults for .NET teams.

Open collection

Editorial revision in progress. Available on LinkedIn in the meantime.

Get the next article when it's published

No promotions. Just the next piece.