Security Engineer
At Harness · Bengaluru, India
I work where software engineering meets security. Here I write through the tools, decisions, and details that make complex systems easier to understand.
Let’s connectFrom the archive
01Application security / Tutorial
Using browser developer tools to investigate postMessage, heap snapshots, Lighthouse findings, and network resources during web security assessments.
Read the articletargetWindow.postMessage(data, targetOrigin)One argument decides which origin may receive the message. The article follows that detail through DevTools.
Beyond the feature
A visual guide to Kubernetes admission controllers and where they sit in the API request path.
How Kubernetes informers and custom controllers watch resources and reconcile desired state.
Why long-lived access tokens increase exposure and how expiration, revocation, and rotation change the tradeoffs.
Beyond the page
Projects, research, and speaking connect the writing to the work behind it. Explore the portfolio
BSides Goa 2024
Dependency and runtime defenses against remote code execution.