Skip to content
terminals&coffee

Austin · cloud security · labs in public

Terminals & Coffee

Cloud security, application/API protection, and AI security research — learned in public, served with coffee.

Read on Medium → Open GitHub

Rafael M · writes, builds, and pours from Austin

About

I’m Terminals & Coffee — a builder who sits with how applications and APIs really behave, then makes them harder to abuse. My work lives in cloud security, application/API security, AI security research, and the labs that prove ideas before they hit production.

Public work is the lab bench: detection-as-code, AI/LLM threat models, cloud automation, architecture notes. Not a highlight reel — technical experimentation where the seams show.

What I care about

Cloud AppSec & APIs

How web apps and APIs actually break at the edge — and what holds when traffic gets weird.

Detections that matter

Hands-on detection work: fewer false positives, clearer signal, and rules you can actually validate.

Labs in public

Reproducible benches — Terraform, detection-as-code, AI/LLM security — seams visible on purpose.

Writing

Notes on cloud security, APIs, Terraform, and AI security research that prefer clarity over theater.

Selected work

Public labs on GitHub — open the repo if you want the seams.

detection-engineering-lab

Wazuh, Sysmon, Elastic/KQL rules, ATT&CK mappings, and reproducible validation workflows.
detection-engineering

Hands-on fundamentals for detection engineering — blue-team practice in the open.
ai-security-architecture

Threat models, trust boundaries, secure RAG/agent design, and architecture review exercises.
CloudAutomationProjects

Multi-cloud automation scripts in Python, PowerShell, and Bash for AWS and Azure.
terraform-associate-study

Study notes and labs for Terraform fundamentals and HashiCorp Associate prep.
security-architecture-fundamentals

Cloud design, threat modeling, risk assessment, and framework-driven decisions.

Writing

I Audited a Popular Open-Source AI Assistant. I Found a Container Escape — My First Accepted AI Security Vulnerability Report Building a Cloud-Native Detection Engineering Lab with Terraform and AWS

All posts on Medium →

Building secure cloud

Secure Cloud Academy

I build learning paths for people who want cloud security skills they can actually use — attack-and-defend labs, cloud engineering fundamentals, and the habits that keep environments harder to break. Same vibe as Terminals & Coffee: practical, public, no fluff.

Visit Secure Cloud Academy →

Say hello

The places I publish, ship labs, and keep building.

Medium GitHub Secure Cloud Academy hello@terminalsandcoffee.com