Ken Kantzer's Blog

Ken’s early 2026 thoughts on the state of AI coding, Claude, Kernigan’s Law, and what technology has worked thus far The post Let’s be honest about AI Coding appeared first on Ken Kantzer's Blog.

I read a comment on HN that sparked this article: GPT is kind of like DevOps from the early 2000s.

My startup Truss (gettruss.io) released a few LLM-heavy features in the last six months, and the narrative around LLMs that I read on Hacker News is now starting to diverge from my reality, so I thought I’d share some of the more “surprising” lessons after

One day, while The Manager was walking back from a morning coffee run, a group of frazzled engineers came near and spake unto him, saying: “Most Esteemed Boss, we are unable to hire Talent – and many of our candidates refuse to take our coding challenges!

While I was at PKC, our team did upwards of twenty code audits, many of them for startups that were just around their Series A or B (that was usually when they had cash and realized that it’d be good to take a deeper look at their security, after the do-o…

This is one in a series of deeper-dives into various Learnings from 5 years of tech startup code audits.

This is one in a series of deeper-dives into various Learnings from 5 years of tech startup code audits.

A note before we begin: I’m arguing that technology ROI discussions are broken, not that ROI as a decision-making tool is broken.

“In the brain of all brilliant minds resides in the corner a fool.”

A few years ago, I was in one of my ruts.

Hiring experienced engineers is one of the most difficult and important things that engineering leaders have to pull off.

I’ve been thinking recently about how to discover and hire great engineers in the hottest job market in decades.

This is an updated re-post of an article I wrote on the PKC Blog in June 2018 There’s always a reason to rebuild.

SANS Control 6—”Maintenance, Monitoring and Analysis of Audit Logs” The Core Principle The core principle is this: fish nets over fishing lines.

SANS Control 5—”Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations and Servers” The Core Principle Let’s sum it up in three words: Secure by default.

SANS Control 4—”Controlled Use of Administrative Privileges” The Core Principle This core principle can be summed up by the famous Reagan Cold War quote: trust but verify.

SANS Control 3—”Continuous Vulnerability Management” The Core Principle That first word—continuous—is the core of this control.

SANS Control 2—”Inventory and Control of Software Assets” The Core Principle The same Golden Rule that applies to hardware applies to software: know what you have.

SAN Control 1—”Inventory and Control of Hardware Assets“ The Core Principle There are only six controls in the Top 20 list that are designated “Basic,” and an inventory of your hardware is number one.

CISOs have an impossible job.