Skip to content

TODO

Working task list for security-zero-to-hero (Security Zero to Hero, https://security.noblerworks.com/). Read this at the start of a work session and keep it current as work completes - check items off with a date, add follow-ups as they surface. Stale TODOs are worse than none. Open actions only; history lives in git and CHANGELOG.md.

Split from cloud-data-ai-security-zero-to-hero

  • 2026-10-21 Split from cloud-data-ai-security-zero-to-hero on 2026-10-21: security-only README, Study Hub, home, learn/topic indexes, new learn/security-from-scratch.md, amber accent, new IndexNow key, social card, family cross-links.
  • Patrick: push, then confirm the Pages deploy serves https://security.noblerworks.com/ (custom domain + DNS are outside this repo).
  • After the first deploy: the "Notify IndexNow" step says IndexNow accepted (a first-run 403 SiteVerificationNotCompleted is normal; re-run notify-indexnow.py --all). Key file: https://security.noblerworks.com/<key>.txt.
  • Patrick: Search Console sc-domain:noblerworks.com -> submit https://security.noblerworks.com/sitemap.xml; Bing Webmaster Tools the same.
  • 2026-10-21 check-repo-metadata.py --fix run and topics set.
  • 2026-10-28 Patrick: upload assets/brand/social-preview-1280x640.png at GitHub Settings > General > Social preview (no API). Card is the shared Zero to Hero template (assets/brand/social-preview.html, 2026-10-21).
  • 2026-10-21 Primary button fill darkened to #b45309 (5.02:1 white text); cloud done the same day.

Tooling

  • 🟡 .github/scripts/site_hooks.py has drifted from ai-zero-to-hero's port - one canonical module all sites vendor (with a sync check), or record the fork. S-M, low.
  • 🟡 glossary-add-anchors.py, glossary-autolink.py, glossary-upgrade-existing-links.py are the documented manual glossary pipeline; delete only if it is retired.
  • No CI check for unbalanced code fences; fold heading-anchor validation into check-internal-links.py.

Author bio counts

  • Patrick: decide whether the home-page bio should carry a cert count again (would need a {{personal_certs}} token fed from one checked-in value).
  • 2026-11-05: Database Specialty lapses - README.md (top bio line and About the Author) goes from 19x multi-cloud / 14x AWS / 64 to 18x / 13x / 63 (source go-to-market/claims.md).

Exam changes (from the 2026-10-16 retired-exam sweep)

  • Successors: AZ-500 -> SC-500 (third-party only; confirm on learn.microsoft.com before writing); AWS SCS-C03 is open now [H]. Decide whether the retired SCS-C02 and AZ-500 guides stay as reference or are pruned.
  • Judge 2026-11-01: rebuild or date the guides whose outlines changed: CySA+ V4 (CS0-003 retiring 2026-12-22), Security+ V8 / SY0-801 (expected ~2026-11-17 [H]), CISM outline 2026-11-03 [H], CISSP outline 2027-04-15 [H], SC-100 / SC-200 / SC-900 (2026-10-21) and SC-300 (2026-10-28) content updates [H].
  • GitHub Advanced Security: confirm the 2-year validity stated in the guide [H].
  • PCNSA: Palo Alto's page no longer lists PCNSA and promotes Network Security Analyst; check retired vs renamed [M].
  • Unverified exams: HashiCorp boundary-associate is on no HashiCorp exam list [M]; the IBM Cloud Security Engineer code/title pairing is suspect [L]; OSCP content vs the current exam. Patrick or a fresh session: check the vendor pages by hand before editing.
  • New-guide candidate: HashiCorp Vault Operations Advanced (verify the code first) [L].

Content backlog (ranked)

  • AI governance + AI security certs (the niche, almost no free guides): IAPP AIGP, ISACA AAISM and AAIA, CSA TAISE - verify names/codes; cross-link ai.noblerworks.com/safety/.

  • Breach postmortems: Capital One 2019, Snowflake customer breaches 2024, SolarWinds, MOVEit.

  • Defensive labs: least-privilege IAM, cloud incident response, detection/SIEM pipeline, container scan with SBOM.
  • Cert gaps: CompTIA PenTest+, SecurityX (CASP+), ISC2 SSCP, Cisco CyberOps Associate, GIAC GSEC and GCLD, Google Professional Security Operations Engineer. EC-Council CEH is Patrick's to write (blocked by the safety check three times; drafts in ~/.cache/ceh-draft-2026-09-29/). New providers need entries in PROVIDER_HIGHLIGHTS / PROVIDER_EMOJI (build-provider-indexes.py).
  • Concept pages: OAuth/OIDC/SAML, encryption and KMS, logging and SIEM.
  • Compliance guides: NIST CSF 2.0, ISO 27001, NIS2/DORA, CMMC.
  • Topic indexes: detection and response; governance and compliance.

Distribution

  • Patrick: submit to awesome lists (awesome-security, awesome-cybersecurity, awesome-certifications) and post one useful page each to r/CompTIA, r/cybersecurity, r/cissp, linking back.