EnumByte is a technical publication on AI security, cloud security, and security engineering.
The name is the method. In security, enumeration is where you map what is actually there — services, identities, permissions, secrets, tools — before deciding what to attack or defend. A byte is the smallest unit you can inspect. EnumByte applies both to modern systems: list the real attack surface, then go down to the detail that decides whether it holds.
It is written for security engineers, platform teams, and developers who want to see how something breaks, not just be told that it can.
What we cover
- AI security — attack surfaces in AI systems: prompt injection, MCP and agent security, model supply chain risk
- Cloud security — IAM, secrets management, infrastructure hardening, and configuration drift
- Security engineering — threat modeling, detection, incident response, and secure development practices
How we write
- Enumerate first. Each article starts from what is exposed and reachable, then works toward what matters.
- Show the mechanism. Commands, configs, and working code, so you can reproduce the result. Where it helps, we publish open-source labs alongside the article.
- Defense included. An attack without a detection or a fix is only half a finding.
- Honest trade-offs. We say what a mitigation costs and where it stops working.
EnumByte is written and edited by Dan Cohen Vaxman, a security engineer focused on AI and cloud infrastructure.
enumbyte