BlogsExperimentsTalks
Gufran Mirza

I build and break systems.

Systems & security engineer working on confidential computing, hardware roots of trust, and the low levels of the stack. I write about what I learn along the way.

Read the blogGet in touch
GitHubXLinkedIn
Gufran Mirza

Latest writing

All posts →
Security

No Rule Was Broken

Every control around the browser sees where you went and what bytes moved. Identity tells you whose credentials were used, never who was driving. A human, or an AI agent?

Aug 2026 · 8 min read
Confidential Computing

TLS with Remote Attestation (aTLS) | Machine-to-Machine Secure Channel

An Attested TLS channel is a TLS channel that integrates remote attestation validation as part of the TLS channel establishing process.

Apr 2024 · 5 min read
Confidential Computing

Managing the cryptographic keys within Trusted Execution Environment

High level overview of the cryptographic keys management in the Trusted Execution Environment.

Feb 2024 · 2 min read

Explore

Experiments

3

Proofs of concept and things I've hacked on — portable operating systems, cloud desktops, and compute sticks.

View projects →

Talks

8

Conference sessions, guest lectures, and meetup talks on Go, service meshes, and systems security.

View talks →

Where I've worked

Senior Staff Engineer · Palo Alto NetworksAug 2025 — PresentSan Fracisco, CA · Runtime security for enterprise AI — protecting models, agents, and inference in production.Senior Software Engineer · Protect AIAug 2024 — Sep 2025Seattle, WA · AI infrastructure and security, through to the Palo Alto Networks acquisition.Co-Founder · TrustCore SystemsAug 2022 — Jul 2024San Francisco, CA · Confidential computing for the enterprise — TEEs, confidential VMs, containers, and Kubernetes.Senior Software Engineer · IBM / RedHatMar 2021 — Aug 2022Bengaluru, India · NIST-compliant cloud infrastructure — Terraform providers, Kubernetes operators, and Istio / Linkerd service mesh.Software Engineer · ConnectWiseJul 2019 — Mar 2021Pune, India · Microservices and APIs — introduced gRPC for ~7× throughput and built a CDN for software and OS-patch delivery.

New posts, now and then.

No newsletter, no spam — just deep dives on systems and security when I finish one. Follow along wherever you already are.

Follow on GitHubGet in touch