Why did I leave Microsoft?
To work full time on 🔥 Maester.
Over 40,000+ tenants today rely on Maester to monitor their tenants daily.
I wanted to make sure that the tests they are running continue to be relevant and evolve as Microsoft 365 and the security landscape evolves.
So today I'm announcing the launch of https://t.co/F5uN233Yh7
Maester Cloud is the portal companion to Maester that lets you track your results over time. It is multi tenant, runs in your cloud (or ours) and more → check out the site for all the features.
More importantly Maester Cloud is a way for me to fund the continued development of the open source Maester core and the tests in Maester.
That is our mission. In fact I worked with the core team @fabian_bader , @Thomas_Live , @MySnozzberries and @SamErde to create the Maester Manifesto (https://t.co/wcm7PnGEMr). It is our promise to the community.
If you value Maester and would like to support and ensure that Maester continues to grow and be healthy, I would be beyond thrilled if your organisation can sponsor this effort.
I would also appreciate it very much if you can share this post with your network to spread awareness.
Thanks!
Acts of service really makes me melt. Idc what it is. How big or small. The fact that I'm considered and thought about & you want to make my day easier is a lot to me🥹🥲
I really dislike the concept of “we experience people differently” because what have I done for you to be horrible to me but kind to the next person?? 😭
"Passkeys won't save you."
Provocative? Maybe. But stick with me, it's the through-line of this episode.
New Entra Chat with Vince Smith, the PM lead driving Microsoft Entra Agent ID.
Here's his case: as users adopt passkeys and that end of the balloon gets squeezed, attackers simply move to the other end 👉 non-human identities and workloads. That's the new frontier, and it's exactly where agents are landing.
Which is why agents needed a new kind of identity in the first place:
→ An agent is as clumsy and unpredictable as a human, and as fast as a machine. Traditional anomaly detection looks at one and can't tell if it's a user or a workload gone rogue.
→ The blueprint + instance model: one blueprint spinning up many scoped, least-privilege instances, instead of a bazillion app registrations or one over-permissioned service principal that can read everyone's mailbox.
And Vince's advice for admins is refreshingly un-precious: don't wait for the perfect plan.
❇️ Start green, ✳️ stay green, ✅ then get green 💚.
Even just stamping a unique identifier on your agents today buys you the observability you'll want later.
Be the river that flows around the rocks.
We also trace his 25 years at Microsoft from shipping betas off a machine under a neighbor's desk to a few security incidents he mostly can't talk about.
I'm not a "cooking is my passion girly" it is absolutely a labor of love for me. So if I'm cooking I really do care for you because I pretend I can't cook most times