Hi, I'm

Harsha Sanjeeva.

I measure what actually matters in production Kubernetes.

I'm a Senior Engineer at Cisco building open-source security tools for Kubernetes. I focus on the gap between what vulnerability scanners report and what's actually exploitable — runtime state, blast radius, delegation chains, and the infrastructure constraints that make textbook solutions impossible to deploy.

01. About

I'm a Senior Engineer at Cisco, where I build network access control solutions for Meraki — the platform that manages millions of network devices worldwide. Our services deploy on Kubernetes, which is where my interest in container security started.

On the side, I build tools that answer the question security teams actually need answered: "Given what's running right now, how exposed are we?"

Most Kubernetes security tools stop at scanning. They'll tell you that you have 43,000 CVEs. They won't tell you that 64% of those CVEs are in packages that aren't even loaded in memory. They won't tell you that your ML inference pod has a ServiceAccount with secret access, pod creation, and resource deletion. They won't tell you that your AI agent's delegation chain widens RBAC scope at every hop.

I work on closing that gap. Runtime introspection without eBPF. Blast radius scoring that accounts for network topology. Delegation chain analysis for AI agent workloads. The stuff that matters when you're running a FIPS-hardened, air-gapped cluster where the fancy tools can't deploy.

Here are some technologies I work with:

  • Kubernetes
  • Go
  • Container Security
  • RBAC & NetworkPolicy
  • AI Agent / MCP
  • Runtime Analysis
  • eBPF (& alternatives)
  • Compliance Frameworks

02. Projects

43,243 CVEs scanned on production cluster
64.2% noise reduction via runtime filtering
99.6% reduction to actionable remediations
27 critical exploit chains identified

03. Publications & Talks

Papers

2026
From 43,000 CVEs to 75 Fixes: Runtime Security Posture Assessment in Production Kubernetes

IEEE Security & Privacy Magazine — "Real-World Security" Special Issue

2026
Runtime Security Posture Assessment in Production Kubernetes

ACSAC 2026 — Poster / Work-in-Progress

2026
Bridging the CVE Gap: A Case Study in Runtime Security Assessment

ACSAC 2026 — Case Study Track

2019
A Secure Collaborative Module on Distributed SDN

IEEE 10th International Conference on Information and Communication Systems (ICICS) — Irbid, Jordan

Talks

2026
Securing Kubernetes in Production: Runtime Vulnerability Analysis

CyberCon 2026

2026
AI Agent Security on Kubernetes: Delegation Chains and Blast Radius

AI DevSummit 2026

04. Writing

I write weekly at Ship & Sleep about Kubernetes security, AI agent infrastructure, and the gap between security research and production.

05. Get In Touch

I'm always interested in hearing about interesting Kubernetes security challenges, speaking opportunities, or collaboration on open-source security tooling.

Say Hello