PRODUCT THINKING. PRACTICAL BUILDING.

Cloud security.
From the inside out.

I'm Ayush, a TPM working on cloud-security products.
This is where I share the thinking behind the work.

Product requirements, architecture decisions, and the commands I keep coming back to. Written while building. Open for you to explore.

Explore my work Browse the notebook
A working notebook, not a finished story.
A LOOK INSIDE23 notes & references3 core security domains5 security tool guidesAll in the open

01 / SELECTED WORK

Deep dives from the workbench.

All notes
CIEM

Making least privilege actionable.

From assigned permissions to observed usage. A product vision and a focused MVP for permission recommendations across four clouds.

Identity securityProduct design
Explore the documents
DSPM

Finding the data that matters.

Mapping the path from cloud onboarding to sensitive-data discovery, with scan-engine notes and a practical PII recognizer reference.

Data securitySystem design
Explore the documents
ASPM

Security, built into the workflow.

A phased application-security plan connecting source control, scanners, and quality gates to the developer workflow.

App securityDeveloper experience
Explore the documents

02 / THE OPEN NOTEBOOK

A few useful places to start.

Less searching. More building.
From requirements to rulesAsset triggers, conditions, and backend design The security toolboxScanner commands worth keeping close Connecting the piecesJira, Microsoft Teams, and Sumo Logic Small scripts, useful shortcutsExtract, enrich, and convert compliance data

GOOD WORK STARTS WITH A CONVERSATION

Building in this space, too?

I'm always happy to exchange ideas on cloud security,
product thinking, and turning complex problems into useful systems.

Let's connect Or send me a note