<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Security — Things Worth Sharing</title><description>Posts tagged Security.</description><link>https://cloudsecop.net/</link><item><title>Worker security: secrets, CSP, Bot Management, Turnstile</title><link>https://cloudsecop.net/en/blog/secrets-csp-bot-management-en/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/secrets-csp-bot-management-en/</guid><description>Defense-in-depth for Cloudflare Workers: WAF + Bot Management, Turnstile, Access JWT, secret management, CSP/HSTS, 4 auth patterns, Zod validation, and anti-patterns to avoid.</description><pubDate>Sat, 13 Dec 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare Developer</category><category>Security</category><category>CSP</category><category>Bot Management</category><author>KhaVan</author></item><item><title>Notes from three months of rolling out Zero Trust</title><link>https://cloudsecop.net/en/blog/zero-trust-rollout-notes/</link><guid isPermaLink="true">https://cloudsecop.net/en/blog/zero-trust-rollout-notes/</guid><description>What actually worked, what didn&apos;t live up to expectation, and the operational lessons from rolling out Cloudflare Zero Trust across an organisation of thousands.</description><pubDate>Sun, 08 Dec 2024 00:00:00 GMT</pubDate><category>Security</category><category>Zero Trust</category><category>Cloudflare</category><author>KhaVan</author></item></channel></rss>