Secure Docker and Kubernetes
From supply chain to runtime: build safer images, lock down clusters, instrument logging & audit trails, and stay ahead of emerging threats.
Three Books, One Mission
Learn container security through a comprehensive guide, a dark fantasy novel, and a comic book — pick your style.
Black Forest Shadow
A dark fantasy novel set in 1865 — learn container security through an immersive narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
Docker and Kubernetes Security
The comprehensive guide — supply chain to runtime, with TL;DRs, exercises, and CI/CD integration.
Prefer a different store? Your choice will be remembered.
Black Forest Commandos
The comic book origin story — ten commandos securing Asgard against CVE monsters through an epic visual narrative.
Buy directly
Latest from the Blog
View all →
August 1, 2026 · 15 min read
The Poisoned Macchiato: Signing Java SBOMs with CosignA café, a suspicious espresso, and a lesson in supply chain trust. Learn how to generate BuildKit SBOM attestations for Java images and re-attest them with Cosign as OCI referrers.
June 23, 2026 · 15 min read
Black Forest Commandos: Asgard Mission DIY v1.5.2Hands-on workshop materials for the 10 Black Forest Commandos in Asgard v1.5.2. Covering secure initialization, SBOM generation via Scout, Attestations, Hardened Images, VEX exemptions, Docker Bake, Cosign signing, and Zero-Day defense.
June 16, 2026 · 11 min read
Beyond SLSA: How to Stop Zero-Click CI/CD Worms with the IX Hexbreaker Aegis FrameworkThe security perimeter of modern software development has officially collapsed. This article introduces the IX Hexbreaker Aegis Framework, a 9-step active defense architecture designed to sanitize the local developer environment, lock down agentic AI, and stop autonomous worms dead in their tracks.
Workshop Series
Docker Commandos / Black Forest Commandos
A narrative-driven workshop series where your team fights CVE monsters alongside the Black Forest Commandos — learning SBOMs, attestations, hardened builds, and zero-day defense through story.
Deliveries
Dockerize Java Securely: SBOMs + Attestations + BakeWeAreDevelopers World Congress · Jul 2026→Java Supply Chain Security with DockerJCON Europe 2026 · Apr 2026→Docker Commandos v1.5Rabobank · Mar 2026→10 Docker CommandosJobRad GmbH · Sep 2025→Docker Deep Dive with a Docker CaptainWeAreDevelopers World Congress · Jul 2025→Speaking At
Workshops and presentations delivered at leading organizations and conferences.
Recent Talks, Workshops & Interviews
All Events →In the Field
Recent Gallery
Photos from recent talks, workshops, interviews, and community events.
Black Forest Commandos Casino
Stay in the Loop
New books, workshop dates, and security deep-dives — straight to your inbox.
No spam. Unsubscribe anytime.