Sandeep Sidhu

sandeepsidhu.com · in production since 2010

Security and observability for teams without a security team.

I'm an SRE who has run production infrastructure for 20+ years. I write about securing your systems, monitoring them properly, and putting AI agents to work in your engineering workflows. Everything here comes from work I've actually done.

Book a free 30-min review or read the log
Sandeep Sidhu
on call: Sandeep Sidhu
role Senior SRE building AlertKick & Moorfox writing since 2010 focus security · observability · AI workflows

Recent entries

Full log 2010-2026
  1. 2026-07-31 SOC 2 for a 10-person SaaS: what I'd actually do first

    A customer asked for your SOC 2 report and you have no security team. Here is the order I would do things in, from someone who builds compliance tooling and runs production for a living.

  2. 2023-01-26 Exploring eBPF with libbpf and ebpf go library
  3. 2023-01-10 Managing OpenShift Nodes with Sync Pods and ConfigMaps
  4. 2022-12-02 Kubernetes vs. OpenShift: Understanding the Differences and Choosing the Right Solution

    Kubernetes vs. OpenShift: Understanding the Differences and Choosing the Right Solution

  5. 2022-05-19 vault HA mysql backend cannot assign requested address

    Vault HA mysql backend cannot assign requested address

  6. 2020-11-12 Git cherry pick examples