Just Start Building Matters More Than Ever. – Hart Rossman
I'm Bartosz — a Security Engineer building at the intersection of AI and security.
I looked for practical, hands-on AI projects built specifically for security engineers — real tools, real stacks, deployable code. I couldn’t find them, so I started building them myself.
Here you’ll find step-by-step tutorials, architectural breakdowns, and honest takes on where AI is taking security operations. Everything is designed to run, fork, or adapt to your environment. Have ideas, tweaks, or want to help with the blog? Reach out 🤝
A leaked Azure storage key or Event Hub connection string is, by default, usable from anywhere on the public internet. Here's how to put that credential behind a network door — using the Azure firewall and Google's published goog.json IP ranges — with two parallel walkthroughs for the two architectures you'll actually find in the wild, plus a self-maintaining reconciler.
A small Python service for Google SecOps that watches every feed, runs three independent checks per feed, restarts what it can, files one Jira ticket per outage with a Gemini summary, and emails the owner. No agent framework. No MCP. Just a YAML config and a Cloud Run Job. Open source, v1, contributions welcome.
A real-world POC: I gave Claude access to Elastic SIEM, Jira, Confluence, and Gmail — and let it triage a broken log feed autonomously. Here's exactly what happened, and how to set it up yourself.
Build your first autonomous AI agent with CrewAI — deployable Python code, multi-agent systems, and real API integrations for security engineers.
