Currently building GrackerAI, a GEO platform for B2B cybersecurity
Notes on identity, AI security, and the practice of building software.
I'm Deepak Gupta, a founder and cybersecurity architect writing about the gaps between the categories everyone talks about and the categories that actually matter.
Featured
Writing that captures the work
· AI
America.gov Explained: What It Is, How to Use It, and What Comes Next
America.gov launched on September 29, 2026 as a single AI front door to federal services, drawing on 29,000 government websites. What it does today, how to use it well, where it falls short, and what other countries should take from it.
Read the essay
- AIAGI Has Not Arrived. Here Is What 2026 Actually ProvedJensen Huang declared AGI had arrived in a post that ended with "400K GPUs coming online next." That is not a scientific claim. It is a capital request with a headline attached. 2026 was remarkable. It was not the year general intelligence arrived.
- GTMGrowth Channels Ranked: Where Should Your GTM Team Actually Focus?Referral and inbound carry the lowest CAC because the buyer arrives already educated. But the cheapest channel is not automatically the right one: deal size and whether demand already exists decide which channels can work at all.
- PrivacyBillions in Fines, Barely a Bruise: What Big Tech Penalties Really Mean for Your PrivacyEvery few months another tech giant is fined hundreds of millions for violating your privacy. The numbers are enormous, the violations keep accelerating, and the math explains why: the penalties cost far less than compliance. Here is what they really mean, and what you can actually do.
- GEOCrawl Budget Is Now an AI Visibility ProblemCrawl budget is no longer a technical SEO footnote. Google's AI surfaces draw from the same Search index as the blue links, so whether you appear in an AI answer reduces to whether Google crawled, indexed, and kept your pages fresh.
Latest
Recently published
- AuthenticationAccount Recovery Design: The Flow That Determines Your Real Security CeilingYour account is only as secure as its weakest reachable path, and that path is usually recovery. A ranked guide to recovery methods, the NIST-backed design rules, and the help desk vector behind MGM, TfL and M&S.
- regulationsWho Actually Punished Big Tech in 2026? What the Tech Fines Tracker ShowsThe 2026 Big Tech enforcement record in one place: four penalties worth about $14.1B, led by US states rather than Brussels, and dominated by children's safety. Here is what the Tech Fines tracker shows and how to follow it.
- verificationAge Assurance: The Compliance Architecture, Not the Vendor ListPicking an age verification vendor is the last decision, not the first. The duty you are actually under, the methods ladder, the one-bit record, and where the age claim lives in your identity model.
Read by track
Side projects
Predictions & postmortems
Explore
More of the work
Research & guides
Free tools