Hi, I'm
Harsha Sanjeeva.
I measure what actually matters in production Kubernetes.
I'm a Senior Engineer at Cisco building open-source security tools for Kubernetes. I focus on the gap between what vulnerability scanners report and what's actually exploitable — runtime state, blast radius, delegation chains, and the infrastructure constraints that make textbook solutions impossible to deploy.
01. About
I'm a Senior Engineer at Cisco, where I build network access control solutions for Meraki — the platform that manages millions of network devices worldwide. Our services deploy on Kubernetes, which is where my interest in container security started.
On the side, I build tools that answer the question security teams actually need answered: "Given what's running right now, how exposed are we?"
Most Kubernetes security tools stop at scanning. They'll tell you that you have 43,000 CVEs. They won't tell you that 64% of those CVEs are in packages that aren't even loaded in memory. They won't tell you that your ML inference pod has a ServiceAccount with secret access, pod creation, and resource deletion. They won't tell you that your AI agent's delegation chain widens RBAC scope at every hop.
I work on closing that gap. Runtime introspection without eBPF. Blast radius scoring that accounts for network topology. Delegation chain analysis for AI agent workloads. The stuff that matters when you're running a FIPS-hardened, air-gapped cluster where the fancy tools can't deploy.
Here are some technologies I work with:
- Kubernetes
- Go
- Container Security
- RBAC & NetworkPolicy
- AI Agent / MCP
- Runtime Analysis
- eBPF (& alternatives)
- Compliance Frameworks
02. Projects
Plexar
Open-source runtime security posture assessment for Kubernetes. Combines vulnerability scanning
(via Trivy), /proc-based runtime CVE filtering, composite blast radius scoring,
RBAC auditing, delegation chain analysis, and compliance mapping (SOC 2, PCI DSS, HIPAA, CIS, EU CRA).
Ships as a single Go binary — no DaemonSets, no eBPF, no privileged containers.
- Go
- Kubernetes
- Trivy
- MCP Server
- Apache 2.0
03. Publications & Talks
Papers
IEEE Security & Privacy Magazine — "Real-World Security" Special Issue
SubmittedACSAC 2026 — Poster / Work-in-Progress
SubmittedACSAC 2026 — Case Study Track
SubmittedIEEE 10th International Conference on Information and Communication Systems (ICICS) — Irbid, Jordan
PublishedTalks
CyberCon 2026
AI DevSummit 2026
04. Writing
I write weekly at Ship & Sleep about Kubernetes security, AI agent infrastructure, and the gap between security research and production.
05. Get In Touch
I'm always interested in hearing about interesting Kubernetes security challenges, speaking opportunities, or collaboration on open-source security tooling.
Say Hello