Books

In Parramatta’s bruised twilight, nine wives speak only beautiful lies to keep their husbands alive. One syllable of truth could kill; one veil of Mithya may save them all. But what remains when the light of illusion begins to fracture?

I wrote this book to show exactly what happens when you add Rust to the kernel. Not as a toy. Not as a single driver in a conference demo. It's a full module that covers process management, memory allocation, file systems, networking, device drivers, inter-process communication, and even machine learning inference. It's all built on safe abstractions, all compiled into one loadable binary, all tested on a running kernel. You'll find that each chapter adds new source files to the same module.

Every web application has security headers, cookies, TLS configurations, and CORS policies that need to be correct. Most teams find out they're wrong only after a penetration test — or worse, after an incident. This book shows you how to build a scanner that catches these issues automatically. You'll create a Python CLI tool that uses Hurl (declarative HTTP testing) to assert security properties, SSLyze to validate TLS protocol versions, and AI to generate specific remediation for every failure it finds. The output: structured JSON reports, visual HTML dashboards, and AI-generated security posture assessments. **What you'll build:** - 9 declarative Hurl security test files (headers, cookies, CORS, HSTS, CSP, CSRF, redirects, TLS) - A preprocessor that handles domain substitution and authentication - An output parser with built-in remediation guidance for every test - A TLS scanner validating SSL 2.0/3.0 disabled and TLS 1.2/1.3 enabled - An AI analyzer that generates context-specific fixes using Ollama, OpenAI, or Bedrock - An HTML reporter with dark-themed visual dashboards - Docker multi-architecture deployment - CI/CD pipeline with GitHub Actions **Who this is for:** - Developers who want security checks before deploying - DevSecOps engineers building CI/CD security gates - Penetration testers who need quick baseline assessments - Security students learning web vulnerability concepts hands-on - Platform teams enforcing security standards across services Every failure includes: what was expected, what was received, why it matters, how to fix it, and a documentation link. AI adds domain-specific code examples on top.

Every web application has security headers, cookies, TLS configurations, and CORS policies that need to be correct. Most teams find out they're wrong only after a penetration test — or worse, after an incident. This book shows you how to build a scanner that catches these issues automatically. You'll create a Python CLI tool that uses Hurl (declarative HTTP testing) to assert security properties, SSLyze to validate TLS protocol versions, and AI to generate specific remediation for every failure it finds. The output: structured JSON reports, visual HTML dashboards, and AI-generated security posture assessments. **What you'll build:** - 9 declarative Hurl security test files (headers, cookies, CORS, HSTS, CSP, CSRF, redirects, TLS) - A preprocessor that handles domain substitution and authentication - An output parser with built-in remediation guidance for every test - A TLS scanner validating SSL 2.0/3.0 disabled and TLS 1.2/1.3 enabled - An AI analyzer that generates context-specific fixes using Ollama, OpenAI, or Bedrock - An HTML reporter with dark-themed visual dashboards - Docker multi-architecture deployment - CI/CD pipeline with GitHub Actions **Who this is for:** - Developers who want security checks before deploying - DevSecOps engineers building CI/CD security gates - Penetration testers who need quick baseline assessments - Security students learning web vulnerability concepts hands-on - Platform teams enforcing security standards across services Every failure includes: what was expected, what was received, why it matters, how to fix it, and a documentation link. AI adds domain-specific code examples on top.

Threat modeling is broken. It takes days, costs thousands, and most teams skip it entirely. What if your AI coding assistant could do it for you — systematically, consistently, and in minutes? This book shows you how to build an MCP server that makes it happen. You'll create 80+ structured tools that guide any AI assistant through a rigorous 9-phase STRIDE threat modeling workflow. Not vague prompts that produce unstructured text — real, typed, validated tools that build up a complete threat model piece by piece: business context, architecture, threat actors, trust boundaries, data flows, STRIDE-based threats, mitigations, and a final JSON export compatible with AWS Threat Composer. **What you'll build:** - A full MCP server with FastMCP (stdio + SSE transport) - Pydantic v2 data models for type-safe threat modeling - Case-insensitive enum validation (because AI isn't always consistent) - 11 tool modules covering every phase of STRIDE analysis - Customizable organization security guidelines loaded from `.md` files - Docker deployment for team-wide access - Compliance gap analysis that validates against mandatory controls - A complete workflow orchestrator with progress tracking **What makes this different:** The server doesn't call any LLM itself. It provides the structure and tools — your AI assistant (Claude, Kiro, Cursor, Copilot) provides the intelligence. This means it works with any model, any provider, forever. No API keys, no token costs for the server itself. **Who this is for:** - Security engineers who want to automate repetitive threat modeling - Python developers building MCP servers for any domain - DevSecOps teams embedding security into AI-assisted workflows - Architects who need consistent, auditable threat models - Anyone curious about how MCP tools work under the hood **By the end of this book**, you'll have a production-ready MCP server, a deep understanding of how AI tools are structured, and transferable patterns for building MCP servers in any domain — not just security.

The product playbooks built for Silicon Valley break the moment the internet drops, the currency crashes, or the regulator rewrites the rules at midnight. This book provides the alternative: a battle-tested system for building products that thrive under uncertainty, drawn from real experience across Africa, Southeast Asia, and Latin America. If you build products in the real world, this is your field guide.

Unlock the secrets of artificial intelligence by mastering its core foundation. This practical guide teaches you how to design, code, and optimize neural networks from the ground up without relying on complex libraries. It is the ultimate resource for developers ready to truly understand the math and logic behind the code.

Security threat modeling is expensive ($5K–$20K per engagement), slow (2–5 days), and requires rare expertise. What if you could automate it? This book shows you how to build AITM — an open-source Python tool that uses Large Language Models to generate comprehensive STRIDE threat analyses from a simple system description. One command. 30 seconds. Professional results. You'll build every component from scratch: - A stateless threat modeling engine with a 3-step AI workflow - Multi-provider LLM integration (Amazon Bedrock, OpenAI, Ollama) - Structured output parsing with Pydantic — no regex, no fragile parsing - Architecture diagram analysis using vision models - A professional CLI with progress indicators and colored output - Markdown and JSON report generation Whether you're a developer automating security reviews, a DevSecOps engineer integrating threat modeling into CI/CD, or a student learning how to build real-world LLM-powered tools — this book gives you the complete blueprint. Includes 5 real-world use cases, full source code on GitHub, and step-by-step instructions that work on macOS and Linux. No security expertise required. Just Python and curiosity.

Stop Guessing. Start Dominating Your DevOps Interview.You’ve spent years mastering GCP, Terraform, Kubernetes, and CI/CD—but can you articulate your expertise under pressure? Most candidates stumble on strategic framing, production scenarios, or leadership questions. This guide changes that.What’s Inside? 🔹 End-to-End CI/CD Pipeline Design – From GitHub Actions to ArgoCD, with security gates and rollback strategies. 🔹 Secure Multi-Env GCP Infrastructure – Private GKE clusters, Workload Identity, Secret Manager, and VPC Service Controls—all production-ready. 🔹 Kubernetes + ArgoCD at Scale – App-of-Apps patterns, RBAC, and zero-downtime deployments for multi-team platforms. 🔹 Python for DevOps Automation – Audit IAM bindings, build operators, and automate workflows like a pro. 🔹 Leadership & Behavioral Mastery – STAR method stories for incidents, tool adoption, and mentorship.Why This Guide? ✔ No Fluff – Only actionable, interview-tested content. ✔ Real-World Code – Terraform modules, ArgoCD manifests, and Python scripts you can use today. ✔ Interviewer Mindset – Learn what hiring managers actually look for in a Lead DevOps Engineer.Your Next Career Move Starts Here. 📖 Grab your copy and walk into your interview prepared to impress.

Essie, the imagined black quantum cat, becomes a detective and investigates the famous and hidden mysteries of quantum theory, from measurement and the Born rule to Gödel’s silence, Wittgenstein’s absence, Majorana’s disappearance, and the strange power of successful calculation.