Currently building GrackerAI, a GEO platform for B2B cybersecurity
Notes on identity, AI security, and the practice of building software.
I'm Deepak Gupta, a founder and cybersecurity architect writing about the gaps between the categories everyone talks about and the categories that actually matter.
Cybersecurity Awareness Month
A free course in staying secure, at home and at work
Seven practical guides, each ending in a checklist you can tick off as you go. Your progress stays in your browser. No signup.
- 01 · Start hereThe 7-Day Personal Security ResetOne short session a day: email, phone, router, AI chats, money, devices, recovery.7 days, 30 to 60 minutes each
- 02 · BeginnerCredential HygienePasswords, password managers, passkeys, and MFA ranked by how well they resist phishing.16 min read
- 03 · BeginnerWork From Anywhere, SecurelyLaptops, phones, home routers, public Wi-Fi, and travel.16 min read
- 04 · BeginnerThe Workplace Security PlaybookVerify before you act, handle data and AI safely, report without fear.16 min read
- 05 · BeginnerAI-Powered Social EngineeringDeepfakes, voice clones, AI phishing, and the checks that defeat them.16 min read
- 06 · PractitionerRansomware ReadinessHow attacks unfold, backups that survive, and the first hour of response.15 min read
- 07 · AdvancedThreat Modeling AI SystemsLLMs, agents, and adversarial ML, using OWASP, MITRE ATLAS, and NIST.16 min read
Featured
Writing that captures the work
· AI
America.gov Explained: What It Is, How to Use It, and What Comes Next
America.gov launched on September 29, 2026 as a single AI front door to federal services, drawing on 29,000 government websites. What it does today, how to use it well, where it falls short, and what other countries should take from it.
Read the essay
- AIAGI Has Not Arrived. Here Is What 2026 Actually ProvedJensen Huang declared AGI had arrived in a post that ended with "400K GPUs coming online next." That is not a scientific claim. It is a capital request with a headline attached. 2026 was remarkable. It was not the year general intelligence arrived.
- GTMGrowth Channels Ranked: Where Should Your GTM Team Actually Focus?Referral and inbound carry the lowest CAC because the buyer arrives already educated. But the cheapest channel is not automatically the right one: deal size and whether demand already exists decide which channels can work at all.
- PrivacyBillions in Fines, Barely a Bruise: What Big Tech Penalties Really Mean for Your PrivacyEvery few months another tech giant is fined hundreds of millions for violating your privacy. The numbers are enormous, the violations keep accelerating, and the math explains why: the penalties cost far less than compliance. Here is what they really mean, and what you can actually do.
- GEOCrawl Budget Is Now an AI Visibility ProblemCrawl budget is no longer a technical SEO footnote. Google's AI surfaces draw from the same Search index as the blue links, so whether you appear in an AI answer reduces to whether Google crawled, indexed, and kept your pages fresh.
Latest
Recently published
- PrivacyHow Much of You Is on Data Broker Sites? A Free Exposure CheckData brokers hold a profile of nearly every US adult. This free, browser-only check estimates how exposed you are and gives you an opt-out plan, with nothing leaving your device.
- PricingHow to Buy Software When AI Breaks PricingBuy software by the unit that tracks value, not by the login. Here is how I rank seat, credit, usage and outcome pricing, what 14 vendors charge in 2026, and what to write into the contract.
- CybersecurityAI-Era Cyberattacks: What Companies Should DoAI made attacks cheap, but 2026's breaches still walked through old doors: exposed devices, default credentials and over-trusted agents. Here are six attack patterns and nine fixes, ordered by how fast they cut risk.
Read by track
Where the writing goes
Five tracks, one author. Pick the one you came for; each has its own feed and signup.
All tracks- Identity & CIAM
- 190posts
- AI Security & Agents
- 148posts
- GEO & AI Search
- 55posts
- Scams & Cybersecurity
- 230posts
- Founders & Growth
- 67posts
Side projects
Predictions & postmortems
Beyond the blog
Twenty-three reference sites, one author
Directories, how-tos, and datasets I keep because I needed them myself. Each one is sourced, hand-checked, and free.
Identity & security
- CIAM CompassCustomer identity, explained for buyers and builders
- GRC CompassGRC and compliance vendors, hand-verified
- The Identity MapWho does what in identity
- Tech FinesBig Tech penalties, sourced to the decision
- The CISO DeskBuying and operating notes for security leaders
- Hash LabSee how hash functions behave
- Agent Security MapThe AI agent security landscape, scored
- The Scam AtlasScam types and real cases, sourced
- Locked OutHacked or locked out? Official recovery paths, step by step
AI, search & tools
Founders & reading
- E-BooksBooks to read in the browser
- BooksBooks worth your time, with notes
- PodcastsSecurity shows, with where to start
- Tech GraveyardObituaries for technology that died
- Future TechPredictions with dates attached
- Technology RewiredHow each software category is being rewired by AI
- Startup OffersCredits and discounts for early-stage teams
- GTM MapHow software companies actually went to market
- Web StoriesShort visual explainers
Free tools
Runs in your browser, nothing leaves it
- PrivacyData exposure checkAn honest, browser-only read of your data-broker exposure, with a real opt-out plan. No data leaves your device, no signup.
- PrivacyPassword strength & breach checkCheck a password's real entropy and crack time, and whether it has leaked in known breaches, all in your browser. Your password never leaves the device.
- PrivacyAI front door readinessCompare eight countries' digital government stacks, score your own organization's readiness for an AI assistant, and see which threats switch on with transactions.