Blog & Events
Insights, talks & field notes
Practical writing from the FireDuck team, plus upcoming talks, workshops, and meetups where you can come and say hello.
Latest writing
3 posts
2 May 2026 V-CISO Leadership
Getting the most from a V-CISO engagement
Five practical things to put in place before your first V-CISO session so you don't waste the first month getting set up.
Read article18 April 2026 DevSecOps CI/CD
Stop leaking secrets in your CI pipelines
A short field guide to keeping API keys, tokens and credentials out of your build logs, container images, and public repos.
Read article11 March 2026 Compliance ISO 27001
ISO 27001 without grinding delivery to a halt
How to scope an ISO 27001 programme so it reflects how your engineers actually work — and still passes the audit.
Read article