Azure security · from Sweden

Azure security advice for when you're done rolling the dice.

Practical guidance on securing your Azure environment — identity, networking, governance, and everything in between.

Read the Blog About me Need help?

// what i help with

Focus areas

More about me

Identity & Access

Entra ID hardening, Conditional Access, PIM, workload identities.

Network Security

Hub-and-spoke, Firewall, Private Endpoints, segmentation that holds up.

Governance & Policy

Landing zones, Azure Policy, guardrails that scale with the org.

Detection & Response

Sentinel, Defender for Cloud, KQL playbooks for real-world threats.

// from the blog

Latest posts

View all

Azure

Properly securing Logic App Standard with Easy Auth

A comprehensive guide on properly securing Logic App Standard with Easy Auth, covering minimal App Registration setup, Bicep configuration, preventing SAS key bypass, and automation considerations.

Mar 11, 2025 15 min read

Azure

Exfiltrating secrets using Kudu in Logic App Standard

Security considerations for the Kudu console in Logic App Standard — how contributors can exfiltrate Key Vault secrets and managed identity tokens, and how to mitigate these risks.

Jan 27, 2025 10 min read

Azure

Why Integration in Azure Needs a Security Mindset

Default configurations in Azure Integration Services can introduce serious risks. Learn why a security-first mindset is essential when deploying Logic Apps, Function Apps, and APIs.

Dec 2, 2024 8 min read

// need a second opinion?

Stuck on a tricky Azure security problem?

Reach out — happy to talk through what you're facing and where to focus.

Get in touch