ZTNA vs VPN: why retire traditional remote access
VPN gives the user too much network. ZTNA grants only the specific application, verifying identity and device posture on every session.
Coming soonInsights
Insights
Notes and articles on technology that decides. Pillar content on Zero Trust, cloud migration (the 7 Rs) and AI architectures built on MCP.
Zero Trust Network
Zero Trust Network
Replacing the traditional perimeter with continuous verification, segmentation and granular control.
Cloud DLP with Zscaler: prevent leaks without slowing the business
How to apply data loss prevention policies across email, SaaS and endpoints without turning security into a bottleneck.
Coming soonApplication & URL filtering: granular control without breaking productivity
Dynamic categorisation, per-user and per-SaaS-tenant control, and exceptions driven by business process — not static lists.
Coming soonBrowser Isolation and CASB: browse and use SaaS without exposing the network
Remote browser isolation and visibility over unsanctioned SaaS to reduce shadow IT without blocking the user.
Coming soonZscaler DLP for AI: prevent leaks across LLM prompts
Real-time inspection of prompts and files sent to ChatGPT, Copilot, Gemini and Claude. Block or redact sensitive data (PII, source code, contracts) before it leaves, with per-user and per-app audit trail.
Coming soonCloud migration — The 7 Rs
Cloud migration — The 7 Rs
The framework AWS and Azure use to decide what to do with every application during a migration.
The 7 Rs of cloud migration: a clear decision framework
Rehost, Replatform, Repurchase, Refactor, Relocate, Retain and Retire. How to pick the right strategy per application — not by trend.
Coming soonRehost vs Replatform: when 'lift & shift' is enough
When to move as-is and when to invest in small changes (managed databases, containers) to gain cost and operational efficiency.
Coming soonRefactor and Repurchase: modernise or switch to SaaS
Rewriting to microservices or serverless makes sense in few cases. Repurchasing as SaaS often delivers more value with less risk.
Coming soonRetire & Retain: what to switch off and what to keep on-premise
A successful migration is also a cleanup. Criteria for retiring applications and for keeping workloads that shouldn't move yet.
Coming soonAI and MCP architectures
AI and MCP architectures
How modern agents connect to internal data and tools in a controlled, auditable way.
MCP (Model Context Protocol): the 'USB-C' for AI agents
An open protocol that lets LLMs consume internal tools, data and actions through a common contract — not bespoke integrations.
Coming soonAgentic architectures with MCP: orchestrate tools safely
MCP servers per domain (HR, finance, tickets), role-based permissions and traceability for every call the agent executes.
Coming soonRAG + MCP: controlled access to corporate data
Combine embeddings-based retrieval with MCP tools to answer with your own context — without exposing the entire data lake.
Coming soonMulti-agent and handoffs: emerging patterns for complex flows
Specialist agents delegating to each other, an orchestrator that decides the handoff, and a shared MCP layer as the tool surface.
Coming soon