Writeups // Sections
Blog
The founder story behind AhuraIntel, and a practitioner's series on cyber-governance, security operations, and digital resilience — written from the SOC chair and from lived experience of isolation. Organized into sections — browse by what you're here for.
Founder Stories
-
What Apogee Took From Me, and What It Turned Me Toward
Four years running a startup while finishing a cybersecurity degree — the investors who believed, the friendship that crossed an enemy narrative, the year everything broke, and the realization that turned me from building inside systems to helping govern them.
-
Fired in Sixty Days for Where I'm From, and Why I Didn't Quit
A telecom job that should have proven I belonged in this field instead let me go within sixty days, over a policy tied to my nationality. What that forced me to see, and the three reasons I stayed in cybersecurity anyway.
Governance & Policy
-
Why Isolated States Build Cyber Resilience Differently
Isolation does not just limit a state's cyber options — it rewrites what resilience means, and Iran and North Korea show two very different answers.
-
CSIRT Capacity Building: The Missing Governance Layer
A national CSIRT is not a room full of screens — it is a governance institution, and Ghana's decade-long build-out shows what getting the sequence right looks like.
-
Minimum Viable Cyber Governance
Before OECD- or EU-style cyber regulation can transfer to a state, four basic things must exist — an accountable agency, a short strategy, recurring money, and a legal basis.
-
Comparing Global CIIP Frameworks: What Each One Assumes About You
The OECD Recommendation, EU NIS2, and the AU Malabo Convention protect critical infrastructure in very different ways — and each silently assumes a different kind of state.
-
Digital Sovereignty vs. Digital Isolation
Self-reliance and disconnection get discussed as if they were one thing — a working taxonomy of who chose the constraint, what it constrains, and why the difference matters.
-
When the Internet Goes Dark: Governance Lessons from National-Scale Shutdowns
What national-scale connectivity loss actually does to work, families, and the economy — and what any government should learn from it, written from lived experience.
-
Cyber Resilience Without a Seat at the Table
What resilience looks like for states shut out of Western-aligned frameworks, vendor markets, and information-sharing bodies — and why their exclusion costs everyone.
Practitioner
-
Building a Vulnerability Management Program from Zero
How I built a working vulnerability management program at my own startup with no security budget, and the sequence any small organization can copy.
-
Incident Response Playbooks That Actually Get Used
What separates a playbook that survives a real incident from one that dies in a wiki, drawn from telecom SOC work and building IR processes from scratch.
-
SOC Analyst Diary: What Detection Engineering Really Looks Like
A generalized, honest account of SOC shift work — alert fatigue, tuning, and the distance between vendor promises and the queue at 3am.
-
OWASP Top 10, Five Years Later
The web-security failures that never leave the list, why they persist, and what startups should actually do with the OWASP Top 10.
-
Secure Coding for Teams Without a Security Hire
The small set of secure-development habits that prevents most common failures, learned running a startup dev team with no security budget.
-
SIEM Deployment Lessons from Two Very Different Organizations
What running a SIEM alone at a mid-sized trade company taught me that a mature telecom SOC could not — and vice versa.
-
Threat Intelligence for Small Teams
How a team with no TI function can separate the intelligence that changes decisions from the feed noise that only changes moods.
Educator
-
Cybersecurity in Plain Language: A Policymaker's Glossary
The fifteen security terms a policymaker actually needs, each defined in plain sentences with a policy-relevant example.
-
Teaching Cybersecurity to People Who Will Never Write Code
Why security literacy for non-coders matters more than another certification for engineers, and the teaching method I use to build it.
-
What Is a CSIRT, and Why Should a Government Care?
A plain-language explainer of what an incident response team actually does day to day, and why a country without one is structurally blind.
-
Phishing Explained Without the Jargon
How phishing really works, psychologically and technically, with a realistic walkthrough and practical checklists for individuals and small-org leaders.
-
Explaining Zero Trust to Non-Technical Executives
What zero trust actually means, why it is not a product you can buy, and the three questions every executive should ask a vendor.
-
How Encryption Actually Protects — and Doesn't Protect — You
Sealed envelopes, locked safes, and the honest limits of encryption — what it defends against, what it cannot, and why that matters for the backdoor debate.
-
A Non-Technical Guide to Reading a Security Incident Report
The anatomy of an incident report — timeline, scope, root cause, impact, remediation — plus the questions to ask and the red flags of a bad one.
Region
-
Digital Infrastructure Under Sanctions: The Iranian Case
How sanctions reshape a country's digital infrastructure across hardware, software, cloud, and payments — and why the bill lands on defenders.
-
Rebuilding Digital Trust After a National Shutdown
Connectivity comes back in days; trust comes back in years — what banks, businesses, and public services must actually do to earn it back.
-
Freelancing Through a Blackout: A Firsthand Account
What it takes to keep an independent consulting practice alive when the internet disappears for months — a professional survival playbook, told firsthand.
-
What Regional Cyber Cooperation Could Look Like
A realistic blueprint for cyber cooperation across the Middle East and West and Central Asia — technical channels that can work even where political trust cannot.