Michal Ormos — Writing https://www.michalormos.eu/blog.html Long-form writing on DevSecOps, cloud security, automation and the boring-but-important parts of running production. en-gb Wed, 20 May 2026 09:00:00 +0000 Hardening an AWS Organization in 30 days: a practical checklist https://www.michalormos.eu/blog/aws-organization-hardening.html https://www.michalormos.eu/blog/aws-organization-hardening.html Wed, 20 May 2026 09:00:00 +0000 If you've inherited a single-account AWS environment with IAM users, shared root credentials and no guardrails, here's the playbook to turn it into something an auditor — and a future you — can live with. CI/CD security gates that don't slow the team down https://www.michalormos.eu/blog/ci-cd-security-gates.html https://www.michalormos.eu/blog/ci-cd-security-gates.html Sun, 12 Apr 2026 09:00:00 +0000 Most security gates in CI/CD pipelines fail one of two tests: they're so noisy nobody reads them, or they're so slow developers route around them. Here's the version I actually keep in production. Vulnerability management at scale: what actually matters https://www.michalormos.eu/blog/vulnerability-management-at-scale.html https://www.michalormos.eu/blog/vulnerability-management-at-scale.html Tue, 03 Mar 2026 09:00:00 +0000 Once you're past a few hundred assets, the scanner is no longer the bottleneck — triage is. Here's what I've learned operating vulnerability management programmes that didn't end in burned-out security teams.