Devanshu Nagpal

I’m Dev, a red team engineer focused on cloud security. My work involves assume-breach testing across AWS and Azure, attack-path analysis, and building tools to automate offensive testing. This blog is where I write up what I learn: how containers, Kubernetes, and cloud identity get compromised in practice, and the controls and detections that prevent it. I’m also exploring AI security, especially how to safely run and contain code written by AI agents. Most posts cover both sides, the attack path and the defense, because that’s how I think about security work.