· Security of internal tools · 2 min read
Layered security for small internal tools: identity at the edge and failing closed
An internal tool does not need a VPN or an exposed server. It needs identity before anything can be reached, a service that fails closed when configuration is missing, and tunnels instead of open ports.
