Resources
Tools landscape, technical glossary, and curated links for security and engineering.
Tools Landscape
Key tools across security, DevSecOps, data engineering, and cloud.
Security
Data Engineering
Cloud & IaC
Technical Glossary
Plain-English definitions for terms used across this site.
CVE A standardised identifier for a publicly disclosed cybersecurity vulnerability. DevSecOps The practice of integrating security tools and responsibilities throughout the software development lifecycle. Medallion Architecture A layered data lakehouse design with Bronze (raw), Silver (cleansed), and Gold (aggregated) tiers. SAST Static Application Security Testing - analysis of source code for vulnerabilities without executing it. SIEM Security Information and Event Management - a platform that aggregates logs and detects threats in real time. Zero Trust A security model that requires continuous verification for every user and device, regardless of network location.
Curated Links
Vetted external resources, grouped by discipline.
Security
OWASP Top Ten Free
The canonical standard for web application security risks. owasp.org MITRE ATT&CK Free
Knowledge base of adversary tactics, techniques, and procedures. attack.mitre.org NVD (NIST) Free
U.S. National Vulnerability Database - canonical CVE source. nvd.nist.gov CVE Details Free
CVE database with exploitability scores and vendor statistics. www.cvedetails.com CISA KEV Free
Known Exploited Vulnerabilities catalog maintained by CISA. www.cisa.gov DevSecOps
Data Engineering
Cloud & IaC
AWS Well-Architected Free
Framework for building secure, reliable, and efficient cloud workloads. aws.amazon.com Cloudflare Developers Free
Workers, Pages, KV, D1 - complete developer documentation. developers.cloudflare.com Terraform Registry Free
Browse providers, modules, and policies for IaC. registry.terraform.io