Writing & Media

Arguments, not announcements.

Most of what I write is an attempt to make one of two things obvious: that complexity is doing more damage than most attackers are, and that automation which cannot explain itself is not worth deploying.

01Articles

Selected pieces

AI & InfrastructureTotal UptimeOct 29, 2026

AI Agent Governance: Secure Infrastructure Automation

Giving an AI assistant access to information is one thing. Letting it change production infrastructure is another — so identity, least privilege and human accountability have to be built in from day one.

AI & InfrastructureTotal UptimeOct 22, 2026

MCP for Enterprise Infrastructure

What changes when AI stops only explaining a problem and starts investigating it across DNS, load balancers, security controls and telemetry — and what that means for running infrastructure.

AssuranceTotal UptimeSep 25, 2026

SOC 2 Type 2 and Operational Resilience

Any provider can claim its platform is secure and resilient. The harder question is whether the controls behind that claim have been independently examined over time — and why that matters for mission-critical services.

AI & Offensive SecurityBlockAPTJun 8, 2026

AI-Powered Red Teaming Meets Cybersecurity Mesh: The Future of Offensive Security

How AI-assisted penetration testing, attack-path analysis and remediation can work alongside monitoring and response in one cybersecurity mesh — turning occasional assessments into continuous security validation.

ResearchMediumJun 9, 2026

AI-Powered Red Teaming Meets Cybersecurity Mesh: The Future of Offensive Security

What happens when offensive automation is pointed at a mesh architecture instead of a flat network.

OpinionMediumJun 3, 2026

SMEs Don't Need More Cyber Noise. They Need Self-Defending Businesses.

The argument that smaller organisations are sold more alerts when what they need is a system that acts.

MeditationsMediumJan 7, 2026

Meditations on the Future of AI — AI-MED-001: Don't Be the Horse

When cars replaced horses, no one asked the horses for permission. A short meditation on adaptation.

AnalysisMediumNov 19, 2025

Self-Defending Networks: Reality or Fiction?

How much of the autonomous-network promise is engineering, and how much is marketing.

Autonomous DefenceBlockAPTNov 13, 2025

Self-Defending Networks: Reality or Fiction?

Why APIs, AI and automation make coordinated network defence more practical today: connecting multi-vendor tools through central management, shared analytics and orchestrated incident response instead of isolated security silos.

GuideMediumJan 7, 2024

Interested in learning how to become an ethical hacker and protect systems?

A practical starting point for people who want to break things professionally.

PublicationMediumFeb 9, 2022

Cybersecurity Trends ePublication Q1Y22

A curated edition of security content, insights and thought-leadership from across the industry.

ExplainerMediumAug 24, 2020

InfoSec Bites — SSL/TLS Offloading Explained

A short video explainer on where TLS offloading helps and where it quietly hurts.

02Videos, podcasts & training

Conversations on the future of security

Life’s A Breach podcast artwork from Cyber Fusion Distribution, with host Steve Mullan

Life's A Breach

Podcast

Quantum threats and the future of secure communications

Cyber Fusion Distribution

IPSec VPNs have long been the backbone of secure point-to-point communication. In this Life’s A Breach conversation, we explore the quantum threat and how to stay ahead as secure communications evolve.

Watch on YouTube
Frame from the Paroles d’Experts studio interview, with the episode title displayed on screen

Paroles d'Experts

Interview

Cybersecurity: a sovereignty issue and a data governance challenge

Season 2, Episode 5

Thon Hotel Bristol Stephanie, Brussels

The more our society digitalises, the more critical the stakes: the internet and digital services sit at the heart of resilience, sovereignty, governance and even economic competitiveness. Cyberattack attempts have kept rising with the covid crisis and the war in Ukraine, and beyond their number and impact, the very nature of threats is evolving as attackers exploit the uncertainty and fears of organisations. In this episode we take stock of cybersecurity, particularly data sovereignty and governance, with Marco Essomba, CTO of BlockAPT, a central cybersecurity platform that protects websites, e-commerce sites, web portals and critical online business applications.

Watch on YouTube
BlockAPT and Transatlantic Cyber Security Business Network co-branded title card

TCBN Interview

Interview

In conversation with Andy Williams, Chair of TCBN

Transatlantic Cyber Security Business Network

Andy Williams, Chair of the Transatlantic Cyber Security Business Network, interviews Marco Essomba, Founder & CTO at BlockAPT.

Watch on YouTube
Marco Essomba writing “SSL offload” on a flipchart while teaching an InfoSec Bites training session

InfoSec Bites

Training session

SSL/TLS offloading explained

Marco Essomba on YouTube

13,276 views

A collection of tech bites videos covering network and cybersecurity topics. Marco Essomba, Founder & CTO at BlockAPT, is a Certified Application Delivery Networking and Cyber Security Expert with an industry-leading reputation, and the 2017 runner-up for the UK Cyber Security Awards Personality of the Year.

Watch on YouTube
03In the media

Expert commentary, interviews and stages

Where journalists, broadcasters and event organisers have asked for my view on cyber threats, AI and resilience.

Headlines are shown in the outlet's original wording.