Skip to content
sec/atlas

public record

What's new

What changed around here: new content, features and corrections. Security moves fast, and a living site must show that it is alive.

  1. 14/10/2026

    sec/atlas: eleven domains, a learning map and careers

    • New domains: OWASP Top 10 with vulnerable and fixed code, DevOps, incident response and forensics, offensive security, GRC and leadership, and Vibecoding.
    • A learning map by level and prerequisites in every domain, with the next step, the state of each topic and a preview with key points.
    • Careers: 15 roadmaps (AppSec, DevSecOps, DevOps, architect, incident response, pentester, red team, GRC, CISO and more) linked to the Journey.
    • Glossary terms in the text open a popup with the definition; light theme, a side summary and a copy-code button.
    • Everything in Portuguese, English and Spanish, with an automatic check against outdated translations, and an Obsidian export.
    • The project is now called sec/atlas.

  2. 13/10/2026

    Manifesto and MCP server

    • Manifesto page: why the way security is taught needs to change and what this project does differently.
    • Local MCP server (7 tools, no dependencies) for coding agents to read, search, validate and scaffold new topics.
    • MCP server smoke test in CI, with checks on the security refusals.

  3. 13/10/2026

    Open project

    • Code under MIT and content under CC BY-SA 4.0, with a contribution guide, code of conduct and security policy.
    • CI with content validation and size budget, static analysis (CodeQL) and automatic dependency updates.
    • Issue templates for content errors and topic proposals: corrections are the most welcome kind of contribution.

  4. 13/10/2026

    New domain: Security engineering

    • Map with 8 topics: secure IaC, policy as code, CI/CD hardening, reliability at scale, platform observability, automation (SOAR), AI in security and security as a product.
    • Study path, attack scenario (compromised pipeline) and quiz on every topic.
    • Bridges to AppSec, CloudSec, SecOps and AI agents.

  5. 13/10/2026

    New domain: SecOps and L7 defense

    • Map with 10 topics: edge telemetry, scale, L7 attacks, detection engineering, WAF, rate limiting, bot management, runbooks, SOC SLOs and defense in depth.
    • Study path and attack scenario (credential stuffing) for the new domain, with a quiz on every topic.
    • Bridges to AppSec, CloudSec and AI agents.

  6. 13/10/2026

    Personal landing, supporting pages and sources

    • Introduction at the top of the hub, About page (experience, education, certifications), English summary and contact links.
    • Link preview (Open Graph), sitemap and robots for sharing.
    • Sources page per domain, and on every topic the update date and a link to report errors.
    • What's new page (this one) to record changes and fixes.

  7. 13/10/2026

    Guided study

    • Study paths with progress saved only in the browser.
    • Step-by-step attack scenarios and a quiz on every topic (105 questions).
    • Global search (Ctrl+K), details panel on the map, filters and a list view on mobile.
    • Bridges across domains: the same problem seen in AppSec, CloudSec and AI agents.

  8. 13/10/2026

    New content and more readable maps

    • New topics: threat modeling (AppSec) and incident response (CloudSec).
    • CI/CD now appears on the AppSec map.
    • Maps reorganized: cards aligned by stage, relations only on focus and straight lines.