Currently building GrackerAI, a GEO platform for B2B cybersecurity
Notes on identity, AI security, and the practice of building software.
I'm Deepak Gupta, a founder and cybersecurity architect writing about the gaps between the categories everyone talks about and the categories that actually matter.
Featured
Writing that captures the work
· GTM
Growth Channels Ranked: Where Should Your GTM Team Actually Focus?
Referral and inbound carry the lowest CAC because the buyer arrives already educated. But the cheapest channel is not automatically the right one: deal size and whether demand already exists decide which channels can work at all.
Read the essay
- PrivacyBillions in Fines, Barely a Bruise: What Big Tech Penalties Really Mean for Your PrivacyEvery few months another tech giant is fined hundreds of millions for violating your privacy. The numbers are enormous, the violations keep accelerating, and the math explains why: the penalties cost far less than compliance. Here is what they really mean, and what you can actually do.
- GEOCrawl Budget Is Now an AI Visibility ProblemCrawl budget is no longer a technical SEO footnote. Google's AI surfaces draw from the same Search index as the blue links, so whether you appear in an AI answer reduces to whether Google crawled, indexed, and kept your pages fresh.
- GEOGEO Is a Product Discipline, Not a Marketing OneThe entire GEO industry treats AI visibility as a marketing problem: track citations, optimize content, report share of voice. That framing is why most GEO programs plateau. The deeper truth is that GEO is a product discipline, and the teams winning at it have figured that out.
- Machine IdentityTop Non-Human Identity (NHI) Management Tools for 2026The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
Latest
Recently published
- regulationsWho Actually Punished Big Tech in 2026? What the Tech Fines Tracker ShowsThe 2026 Big Tech enforcement record in one place: four penalties worth about $14.1B, led by US states rather than Brussels, and dominated by children's safety. Here is what the Tech Fines tracker shows and how to follow it.
- verificationAge Assurance: The Compliance Architecture, Not the Vendor ListPicking an age verification vendor is the last decision, not the first. The duty you are actually under, the methods ladder, the one-bit record, and where the age claim lives in your identity model.
- HijackingDevice Bound Session Credentials: The Answer to Session TheftChrome shipped DBSC to stable. It binds the session cookie to a key in the TPM, which makes a stolen cookie inert off the originating device. Here is the protocol, the honest limits, and the buyer checklist.
Read by track
Side projects
Predictions & postmortems
Explore
More of the work
Research & guides
Free tools