Hello, World. Hello, Security.

I’ve always believed that every journey worth taking leaves clues behind. This blog is me leaving mine; not polished, not perfect, but real, practical, and hopefully useful for anyone who finds themselves where I once stood: curious, ambitious, and sometimes a little overwhelmed by cybersecurity.

For the past 12 weeks, I’ve been immersed in API security training with Cybergirls, a program that stretched me, challenged me, and required me to document every single week of learning. We tackled fundamentals such as authentication, authorization, gateway security, penetration testing, and securing AI-powered APIs. It wasn’t just theory. It was hands-on, report-driven, post-it-on-LinkedIn-or-it-didn’t-happen kind of learning.

Now that it’s over, I don’t want those reports to sit in a folder gathering digital dust. Knowledge is only powerful when it’s shared, stress-tested, and applied. That’s why I’ve started this publication.

---

Why This Blog Exists

Because DevSecOps, API security, and AI security shouldn’t feel like mysteries locked away for “experts only.” They should be practical, learnable, and something you can implement today.

This blog is my sandbox and my journal; a place where I’ll translate what I’m learning into stories, labs, and lessons you can use. Sometimes it’ll be technical breakdowns, sometimes reflections on my journey, and other times, simple notes on how I connect security concepts to bigger questions about technology and society.

---

Who This Blog is For

• If you’re an early-career professional trying to find your footing in cybersecurity.

• If you’re a builder who wants to bake security into what you’re creating.

• If you’re just curious about how the pieces of DevSecOps, APIs, and AI fit together.

This space is for you.

---

What’s Ahead

Think of this first post as the welcome mat. Next, I’ll start publishing my API security reports in a more digestible format, turning what I learned each week into bite-sized but actionable blogs. From authentication best practices to hands-on API penetration testing, you’ll see not just what I did, but how you can replicate or adapt it.

Beyond that, I’ll be sharing my explorations into areas like:

• Mobile hacking

• Bug bounty experiments

• LLM and AI security

• And the portfolio projects I’m building along the way.

This is the beginning of a bigger journey; one that I hope leads me into boardrooms, working with CISOs, shaping secure digital ecosystems, and building the dream life I know God is guiding me toward.

---

The Invitation

I don’t have all the answers, and that’s exactly why I’m writing. This is a conversation, not a monologue. So, as you read, feel free to comment, challenge, and share your own lessons.

Security isn’t just about defending systems. It’s about building trust in the technology that powers our lives. And that’s a mission worth documenting.

So here we are.
Post one.
The start of my DevSecOps Journal.

With grit, grace, and God, we build safer systems.
Until the next entry, stay curious and stay secure.

— Blessing Agbor