Cloud security

Cloud security work by D. Klincharski: inspecting unfamiliar accounts, connecting findings to evidence, and learning how attacks and controls interact. Start with an audit walkthrough, inspect the tools, or try the playable lab.

About D. Klincharski

Builds / Tools / Labs

Projects to explore.

01 Open source SentryHiveRun established AWS security scanners with one read-only command and produce a traceable report. Explore project 02 Product ScanCombUse WardBee by ScanComb to check AWS and repository evidence against framework controls and prepare compliance reviews. Explore project 03 Playable lab Cloud Siege: Control Plane ClashExplore attack paths and defensive controls in a playable Red versus Blue cloud security lab. Explore project

Articles / Experiments

Notes from the work.

01 Oct 07, 2026 A cybersecurity conference cold-called me like an old friend. That's the problem.A legit security event called me with my mobile, private email and work email, which I never gave them. What GDPR says, and what to do when it happens to you. Journal · 7 min 02 Sep 29, 2026 Start compliant: a Terraform Fargate baseline that passes the scanner on day oneHow the open-source Terraform ECS Fargate starter now ships the controls WardBee by ScanComb checks for, so new services begin with evidence instead of a remediation backlog. Technical blog · 6 min 03 Sep 23, 2026 NIS2 Supplier Check: Turn Customer Questions into EvidencePrepare for NIS2 supplier questionnaires with technical checks, a 15-question self-assessment and a clear evidence report. Preview ScanComb's approach. Journal · 6 min 04 Sep 18, 2026 The AI boom has entered its compliance phase: what the EU AI Act changes for companiesFor years the AI question inside companies was what models could do. The EU AI Act turns it into something harder: can you prove what your AI systems access, what protects them and who is responsible? Journal · 6 min 05 Sep 11, 2026 What counts as evidence in a cloud security audit (and what auditors reject)Screenshots, policies and good intentions are not evidence. Here is what actually survives an ISO 27001 or SOC 2 review of an AWS environment, control by control. Journal · 6 min 06 Aug 26, 2026 How I audit an AWS account with Prowler, ScoutSuite and SteampipeA practical walkthrough of the three open-source tools I reach for when someone hands me an unfamiliar AWS account and asks "is this okay?" Journal · 5 min 07 Aug 16, 2026 Cloud Siege: Learn Cloud Security by Playing Both SidesCloud Siege turns cloud security into a six-round Red vs Blue card game. Play solo, take the field training, or duel a friend—and learn why layered defence actually works. Journal · 4 min 08 Jul 22, 2026 ScanComb and WardBee: evidence for cloud compliance in the age of vibe codingWardBee by ScanComb checks cloud and repository evidence against framework controls, exposes gaps, and prepares compliance reviews with human sign-off. Journal · 3 min

Explore by topic