Welcome to the garden
What this site is, why I built it as a garden and not a blog, and what I hope grows here.
This is a small corner of the internet where I’m learning software security in public.
I’m Eden. I have a software engineering degree and an MSc in Applied Cybersecurity from a joint programme between Kadir Has University in Istanbul and SRH Berlin, and I’ve spent the last year deep inside software supply chain security — the plumbing that decides whether the code running in production is the code someone actually wrote.
I could have started a blog. But blogs have a rhythm I don’t have yet. They reward you for publishing finished things on a schedule. And most of what I know about this field is still forming.
So this is a garden instead.
What a digital garden means here
The idea isn’t mine — Maggie Appleton has written the definitive history, and it’s worth reading. The short version: instead of dated posts you never revisit, you plant notes that you tend over time. Some stay small forever. Some grow into essays. Some die, and that’s fine.
Every note here carries a stage:
- Seedling — a rough thought, mostly questions. Read with generosity.
- Growing — being tended, expanding, still moving.
- Evergreen — mature enough that I’d stand behind it, though I still edit when I learn more.
If you find something at seedling stage and it’s wrong, tell me. That’s what the stage is for.
What I write about
Software supply chain security is the through-line — build systems, package registries, runtime detection, the boring plumbing that turns out to matter enormously. Around it: web security, eBPF, detection engineering, the Cyber Resilience Act, and whatever else I’m currently learning.
Some of it is technical. Some of it is about being a career-changer in this field — someone who came from software engineering, moved to Berlin on a job-seeker visa, and is figuring out how to belong in an industry with its own strange dialect.
What lives elsewhere
Videos on YouTube, shorter thoughts on TikTok and Instagram, longer essays cross-posted to Substack where you can subscribe by email.
Thanks for wandering by. Take a look around.