https://securityblueprints.io/categories/posts/ Recent content in Posts on Security Blueprints Hugo en user@example.com (Niels Provos) user@example.com (Niels Provos) Security Blueprints, LLC Sun, 06 Sep 2026 23:57:44 +0000 https://securityblueprints.io/posts/agent-perimeter-fallacy/ Tue, 03 Mar 2026 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/posts/agent-perimeter-fallacy/ Security practitioners who treat security as an engineering problem start by asking what they can make structurally impossible. Mandatory hardware second factors, positive execution control, egress restrictions: these are invariants, machine-enforced constraints that eliminate attack surface without requiring ongoing human judgment. Detection layers come after, augmenting a foundation that does not depend on them. Not everyone works this way. There is a recurring pattern, more common than it should be, of reaching for detection as a first-line preventative control rather than as a complement to structural prevention. https://securityblueprints.io/posts/three-security-invariants-ciso-challenge/ Thu, 09 Oct 2025 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/posts/three-security-invariants-ciso-challenge/ Project update — August 2026: The game now has a dedicated development site. Visit game.securityblueprints.io for the current direction and private playtest updates. I’ve spent 25 years in security, and watching the news cycle of breaches never gets less frustrating. Another company compromised. Another million records stolen. Another ransomware payment. What makes it worse is that most of these incidents didn’t have to happen. While working at Google and Stripe, I helped develop security invariants which are technical controls that categorically eliminate entire attack surfaces. https://securityblueprints.io/posts/security-invariants/ Wed, 23 Oct 2024 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/posts/security-invariants/ As shown by the numerous data breaches documented on Security Blueprints, many companies struggle to establish an effective security posture that prevents breaches or significantly reduces their impact. Fortunately, there’s a powerful approach to substantially improve your security stance: Security Invariants . A security invariant is one of several types of constraints that once consistently enforced across a computing infrastructure, systematically reduces the attack surface without requiring the organization’s team members to make security decisions.