# diniscruz.ai

> The personal site of Dinis Cruz: essays and research on AI, cyber security, semantic
> knowledge graphs, the future of news and Europe, and the companies and open-source
> projects that work feeds into.

Site version: v0.1.1
Canonical host: https://diniscruz.ai/
Author: Dinis Cruz — https://www.linkedin.com/in/diniscruz — https://github.com/DinisCruz
Founder of sgit.ai, sgraph.ai, MyFeeds.ai, The Cyber Boardroom, RiskMandate.ai and VoiceDebrief.ai; former OWASP Board member; creator of the O2 Platform.
All writing CC BY 4.0 unless noted. Code under the repository licence (Apache-2.0).

## How to read this site as an agent

Every page has a markdown twin at the same path with the extension swapped:
https://diniscruz.ai/about/index.html is also https://diniscruz.ai/about/index.md, and the links inside the
markdown point at markdown. If your fetcher cannot follow links, take
https://diniscruz.ai/llms-full.txt: every page on this site in one file.

This site replaces docs.diniscruz.ai. Every essay keeps the path it had there:
https://docs.diniscruz.ai/2025/06/07/x.html is now https://diniscruz.ai/2025/06/07/x.html.

## Who Dinis Cruz is, stated so you do not have to fetch anything

- Founder of sgit.ai (encrypted vaults with git semantics, Apache-2.0) and sgraph.ai (its commercial home: SG/Send and hosted SG/Vaults).
- Founder of MyFeeds.ai (role-aware cybersecurity briefings on semantic knowledge graphs), The Cyber Boardroom, RiskMandate.ai (the business risk layer for autonomous systems) and VoiceDebrief.ai (voice to debriefs, entirely in the browser).
- Former OWASP Board member; organiser of the OWASP Summits (Lisbon 2011, Woburn 2017); creator of the OWASP O2 Platform (2010-2012).
- Open-source author of the osbot-* and mgraph-* families, memory_fs, Issues-FS and sgit-ai, all Apache-2.0 on PyPI.
- Based in the UK for thirty years: security practitioner, CISO for UK companies, founder.

## Pages

- [Dinis Cruz — AI, cyber security and semantic knowledge graphs, built in the open](https://diniscruz.ai/index.md): Dinis Cruz: founder of sgit.ai, MyFeeds.ai and The Cyber Boardroom, former OWASP Board member. Essays and research on GenAI, AppSec, threat modeling and knowledge graphs.
- [About Dinis Cruz — founder, former OWASP Board member, creator of the O2 Platform](https://diniscruz.ai/about/index.md): Dinis Cruz: founder of sgit.ai, sgraph.ai, MyFeeds.ai, The Cyber Boardroom, RiskMandate.ai and VoiceDebrief.ai; former OWASP Board member and organiser of the OWASP Summits; creator of the O2 Platform; CISO and security practitioner in the UK for thirty years. The record, where I write, the interests I declare, and how to reach me.
- [What Dinis Cruz is building — companies, open source and the sgit.ai network](https://diniscruz.ai/building/index.md): The companies Dinis Cruz has founded (sgit.ai, sgraph.ai, MyFeeds.ai, The Cyber Boardroom, RiskMandate.ai, VoiceDebrief.ai), the open-source projects under them (OSBot, MGraph-DB, memory_fs, Issues-FS, sgit-ai), and the sgit.ai network of focused sites.
- [Writing — Dinis Cruz](https://diniscruz.ai/writing/index.md): Every essay, research brief and project proposal by Dinis Cruz, newest first — 103 pieces on AI, cyber security, semantic knowledge graphs, the future of news and Europe.
- [Research Hub — Dinis Cruz](https://diniscruz.ai/research/index.md): Portal to articles on AI, cybersecurity, knowledge graphs, and innovation.
- [June 2025 Published Materials — Dinis Cruz](https://diniscruz.ai/2025/06/index.md): During June 2025, I published 29 comprehensive research documents spanning artificial intelligence, cybersecurity, organizational transformation, and strategic innovation. The month's publications…
- [July 2025 Published Materials — Dinis Cruz](https://diniscruz.ai/2025/07/index.md): During July 2025, I published 12 comprehensive research documents with a strong focus on the practical applications of semantic knowledge graphs in cybersecurity and enterprise systems. The month's…
- [August 2025 Published Materials — Dinis Cruz](https://diniscruz.ai/2025/08/index.md): During August 2025, I published 2 significant research documents focused on software development methodologies and practices in the age of generative AI. Both publications, authored in collaboration…
- [How diniscruz.ai is built](https://diniscruz.ai/admin/index.md): How diniscruz.ai is built and released: hand-written HTML plus pages generated from the markdown migrated from docs.diniscruz.ai, a markdown twin at every URL, llms.txt, and a validate-then-deploy pipeline to GitHub Pages.
- [Moving from docs.diniscruz.ai to diniscruz.ai](https://diniscruz.ai/admin/migration.md): Why the essays moved from docs.diniscruz.ai to diniscruz.ai, how every old URL maps to a new one at the same path, and the steps that retire the old host without losing search ranking.
- [Release history — diniscruz.ai](https://diniscruz.ai/admin/versions.md): Every release of diniscruz.ai, newest first: what changed in the site, its content and its build, version by version.
- [Cyber-Security — Dinis Cruz](https://diniscruz.ai/research/cyber-security.md): Index of articles on threat modeling, modern AppSec, and security innovation.
- [Development and GenAI — Dinis Cruz](https://diniscruz.ai/research/development-and-genai.md): Hub for resources on generative AI, modern development methodologies, and AI-assisted programming.
- [Europe and Learning — Dinis Cruz](https://diniscruz.ai/research/europe-and-learning.md): Overview page linking GenAI opportunities in Europe and learning resources.
- [Knowledge Graphs — Dinis Cruz](https://diniscruz.ai/research/graphs.md): Guides on graph databases, ontologies, semantic knowledge graphs, and ephemeral architectures.
- [Organizational Transformation — Dinis Cruz](https://diniscruz.ai/research/organizational-transformation.md): How organizations can leverage AI, semantic graphs, and modern methodologies to transform operations.
- [Projects and Innovation Lab — Dinis Cruz](https://diniscruz.ai/research/projects.md): Collection of research projects, business ideas, and strategic partnerships exploring generative AI.
- [Research Document Catalog — Dinis Cruz](https://diniscruz.ai/research/research-document.md): Every research proposal and technical brief by Dinis Cruz in one table, by month, with a one-line summary and tags for each.
- [The Future of news — Dinis Cruz](https://diniscruz.ai/research/the-future-of-news.md): Articles on news monetization, fact provenance, and trust.
- [Presentations — Dinis Cruz](https://diniscruz.ai/resources/presentations.md): Talks and presentations by Dinis Cruz on GenAI, application security and semantic knowledge graphs, from OWASP AppSec EU Lisbon 2024 to The Grafter meetup.

## Start here, by topic

- [Cyber-Security](https://diniscruz.ai/research/cyber-security.md): 24 pieces, newest 2025-07-06.
- [Development and GenAI](https://diniscruz.ai/research/development-and-genai.md): 17 pieces, newest 2025-10-02.
- [Europe and Learning](https://diniscruz.ai/research/europe-and-learning.md): 1 pieces, newest 2025-06-08.
- [Knowledge Graphs](https://diniscruz.ai/research/graphs.md): 15 pieces, newest 2025-07-04.
- [Projects and Innovation Lab](https://diniscruz.ai/research/projects.md): 25 pieces, newest 2025-10-02.
- [The Future of news](https://diniscruz.ai/research/the-future-of-news.md): 7 pieces, newest 2025-07-04.

## Writing (103 pieces, newest first)

- [GenLegalAdvise Project Plan](https://diniscruz.ai/2025/10/03/genlegaladvise-project-plan.md): 2025-10-02. Small businesses, freelancers, and independent consultants regularly encounter legal documents -- consulting agreements, NDAs, service terms, EULAs, data sharing policies -- that are lengthy, dense…
- [Time as a Calibrator of Credibility and Trust in Information Systems](https://diniscruz.ai/2025/10/02/time-as-a-calibrator-of-credibility-and-trust-in-information-systems.md): 2025-10-02. In an era of information overload and rampant misinformation, time emerges as a critical factor in determining what information we trust. Traditional approaches to credibility tend to evaluate a…
- [Project Voice2SIEM: Turning Customer Support Audio Into Real-Time Security Events](https://diniscruz.ai/2025/10/02/project-voice2siem-turning-customer-support-audio-into-real-time-security-events.md): 2025-10-02. Phone-based social engineering and vishing (voice phishing) attacks are on the rise, targeting customer support and help desk agents. Attackers impersonate customers or executives to manipulate…
- [Next-Generation API Security Platform: Semantic Graphs, GenAI Testing & Ephemeral Environments for 2025](https://diniscruz.ai/2025/09/01/next-generation-api-security-platform-semantic-graphs-genai-testing-ephemeral-environments-2025.md): 2025-09-01. Modern API security requires going beyond traditional scanning -- it must blend into the API testing lifecycle and leverage cutting-edge AI to map and probe complex behaviors. This white paper…
- [Dinis Cruz's Research on API Security (2009-2025)](https://diniscruz.ai/2025/09/01/dinis-cruz-research-on-api-security-2009-2025.md): 2025-09-01. API security has been a persistent theme in Dinis Cruz's work, spanning early insights in 2009--2010 through to innovative ideas in 2025. His contributions center on how to test and analyze web…
- [LLM Workflows/Stateflow Service - Technical Brief](https://diniscruz.ai/2025/08/23/llm-workflows-stateflow-service-technical-brief.md): 2025-08-23. The LLM Workflows/Stateflow Service is a proposed stateless web service for executing AI-driven workflows with well-defined, deterministic steps. It acts as a state machine for orchestrating Large…
- [Personas Service - Technical LLM Brief](https://diniscruz.ai/2025/08/23/personas-service-technical-llm-brief.md): 2025-08-22. The Personas Service (to be deployed at personas.prod.mgraph.ai) is a stateless microservice that leverages Large Language Models (LLMs) to translate and tailor content for specific target personas.…
- [Surrogate Dependencies: Simulating Backends for Offline-First Development](https://diniscruz.ai/2025/08/22/surrogate-dependencies-simulating-backends-for-offline-first-development.md): 2025-08-22. Modern software development often relies on remote APIs and services, yet developers frequently need to work in environments where those backends are unavailable or unstable. Surrogate dependencies…
- [Iterative Flow Development (IFD) Methodology: JavaScript Web Application Implementation](https://diniscruz.ai/2025/08/22/iterative-flow-development-ifd-methodology__javascript-web-application-implementation.md): 2025-08-22. Generative AI (GenAI) is rapidly transforming software development, enabling new coding paradigms where human developers collaborate with Large Language Models (LLMs) as intelligent assistants.
- [Project VulnAI: AI-Powered Vulnerability Risk Management Platform](https://diniscruz.ai/2025/07/27/project-vulnai-ai-powered-vulnerability-risk-management-platform.md): 2025-07-27. Organizations continue to struggle with a deluge of security vulnerabilities and alerts, but traditional vulnerability management approaches have failed to translate these findings into effective…
- [Semantic Knowledge Graphs, G³, and Sustainable AI: Aligning Innovations with ESG Objectives](https://diniscruz.ai/2025/07/06/semantic-knowledge-graphs-g3-and-sustainable-ai-aligning-innovations-with-esg-objectives.md): 2025-07-06. In an era when organizations are increasingly accountable for the environmental, social, and governance (ESG) impacts of their technology, innovative approaches in data and AI engineering are…
- [Graph‑Based Cloud IAM in the GenAI Agentic World](https://diniscruz.ai/2025/07/06/graph-based-cloud-iam-in-the-genai-agentic-world.md): 2025-07-06. The rapid rise of generative AI agents – autonomous software powered by large language models (LLMs) – is redefining how applications interact with cloud services. These AI agents can dynamically…
- [From Large Language Models to Small Models and Code: The Evolution of AI Solutions](https://diniscruz.ai/2025/07/06/from-large-language-models-to-small-models-and-code-the-evolution-of-ai-solutions.md): 2025-07-06. Large Language Models (LLMs) like GPT-3 and GPT-4 have revolutionized what machines can do with human language. These massive models (with hundreds of billions of parameters) stunned the world by…
- [Finding the “Good Enough” Threshold: Optimizing Risk, Creativity, and Product Decisions](https://diniscruz.ai/2025/07/06/finding-the-good-enough-threshold-optimizing-risk-creativity-and-product-decisions.md): 2025-07-06. Every decision in business, creativity, or engineering comes with a trade-off between striving for perfection and delivering “good enough” at the right time. There is an optimal point at which…
- [Usage-Based Billable Entities: Aligning SaaS Pricing with Customer Usage](https://diniscruz.ai/2025/07/04/usage-based-billable-entities-aligning-saas-pricing-with-customer-usage.md): 2025-07-04. Software-as-a-Service (SaaS) companies have traditionally relied on fixed subscription plans – charging customers a monthly or annual fee for access to a product. However, this model often misaligns…
- [The Joy of Programming in the Age of AI-Assisted Development](https://diniscruz.ai/2025/07/04/the-joy-of-programming-in-the-age-of-ai-assisted-development.md): 2025-07-04. In the software engineering community, the term “flow state” or being “in the zone” describes a peak experience of focus and creativity that makes programming deeply rewarding. A coder in this state…
- [From Free Scraping to Fair Compensation: Cloudflare’s GenAI Crawler Charges and the Future of News Monetization](https://diniscruz.ai/2025/07/04/from-free-scraping-to-fair-compensation-cloudflares-genai-crawler-charges-and-the-future-of-news-monetization.md): 2025-07-04. The rise of generative AI has upended the traditional relationship between content creators and aggregators. AI web crawlers now scrape vast amounts of text, news, and images to train large language…
- [FAQ - Evolving Semantic Graphs and Ontologies with LLMs and MGraph-DB](https://diniscruz.ai/2025/07/04/faq-evolving-semantic-graphs-and-ontologies-with-llms-and-mgraph-db.md): 2025-07-04. This FAQ-style white paper addresses key technical questions about Dinis Cruz’s approach to building and evolving semantic knowledge graphs using Large Language Models (LLMs) and the MGraph-DB…
- [LLM-Driven GDPR Compliance Q&A Graph – Technical Brief](https://diniscruz.ai/2025/07/03/llm-driven-gdpr-compliance-q-and-a-graph-technical-brief.md): 2025-07-03. This project aims to build an interactive chatbot UI that guides a user through a series of questions about their organization’s GDPR practices, dynamically builds a knowledge graph from the answers…
- [Using Memory_FS to Build a File-Based Representation of the GDPR Standard](https://diniscruz.ai/2025/07/02/using-memory_fs-to-build-a-file-based-representation-of-the-gdpr-standard.md): 2025-07-02. This white paper presents a method for converting the General Data Protection Regulation (GDPR) text into a structured, file-based representation using the MemoryFS framework. Targeted at technical…
- [Ephemeral GenAI SIEM: A Serverless, Graph-Driven Approach to Security Event Management](https://diniscruz.ai/2025/07/02/ephemeral-genai-siem-a-serverless-graph-driven-approach-to-security-event-management.md): 2025-07-02. Security Information and Event Management (SIEM) tools have long been central to enterprise defense, but traditional SIEMs struggle with scale, context, and cost. They often ingest massive volumes of…
- [Using Ephemeral Neo4j Instances for a Cybersecurity Risk Graph Scenario](https://diniscruz.ai/2025/06/25/using-ephemeral-neo4j-instances-for-a-cybersecurity-risk-graph-scenario.md): 2025-06-25. Graph thinkers – those who naturally conceptualize information as networks of nodes and relationships – can greatly benefit from on-demand graph analytics. Recently, we demonstrated how a Large…
- [Ephemeral Neo4j Instances for On-Demand Graph Analytics](https://diniscruz.ai/2025/06/25/ephemeral-neo4j-instances-for-on-demand-graph-analytics.md): 2025-06-25. Organizations are increasingly seeking ways to perform complex graph data transformations and analytics without the overhead of maintaining long-running database servers. Neo4j – a leading graph…
- [Data Tests for Neo4j: Bringing Automated Testing to Graph Databases](https://diniscruz.ai/2025/06/25/data-tests-for-neo4j-bringing-automated-testing-to-graph-databases.md): 2025-06-25. Neo4j’s flexible, schema-optional nature is a double-edged sword: it empowers rapid graph modeling but can lead to hidden data inconsistencies as the graph evolves. Data tests for Neo4j apply the…
- [Project Plan: High Street GenAI Learning Hub](https://diniscruz.ai/2025/06/22/project-plan-high-street-genai-learning-hub.md): 2025-06-22. In many communities, there is a need for a "third space" – a place outside of home and work where people can gather, learn, and collaborate in a non-commercial, inclusive environment. As author Zadie…
- [FIST Meets the Semantic Knowledge Graph: Aligning Fast, Inexpensive, Simple, Tiny with Dinis Cruz's G³ Approach](https://diniscruz.ai/2025/06/22/fist-meets-the-semantic-knowledge-graph-aligning-fast-inexpensive-simple-tiny-with-dinis-cruzs-g3-approach.md): 2025-06-22. Modern engineering projects thrive on agility, thrift, and simplicity. These values are encapsulated in the FIST framework – Fast, Inexpensive, Simple, Tiny – originally coined in the defense…
- [Using LLMs as Ephemeral Graph Databases: Empowering the Graph Thinkers in the Age of Generative AI](https://diniscruz.ai/2025/06/19/using-llms-as-ephemeral-graph-databases--empowering-the-graph-thinkers-in-the-age-of-generative-ai.md): 2025-06-19. Graph thinkers – those who naturally conceptualize information as networks of nodes and relationships – are poised to benefit immensely from advances in generative AI. Traditional graph databases…
- [Empowering Workshops with Custom GPTs for GenAI Training](https://diniscruz.ai/2025/06/19/empowering-workshops-with-custom-gpts-for-genai-training.md): 2025-06-19. GenAI (Generative AI) has rapidly emerged as a transformative technology, yet many executives and professionals struggle to find practical entry points for its adoption. Often, the barrier is not…
- [No Code Development (NCD): A Paradigm Shift Beyond 'Vibe Coding'](https://diniscruz.ai/2025/06/18/no-code-development--ndc--a-paradigm-shift-beyond-vibe-coding.md): 2025-06-18. In recent years, advances in generative AI – especially large language models (LLMs) like GPT-4, Codex, and others – have ushered in a new style of software creation. Instead of writing syntax…
- [Empowering the Graph Thinkers in the Age of Generative AI](https://diniscruz.ai/2025/06/18/empowering-the-graph-thinkers-in-the-age-of-generative-ai.md): 2025-06-18. In a world increasingly defined by complex interconnections, a unique set of individuals thrives on seeing relationships and patterns everywhere – the "graph thinkers." These are people who…
- [Comparing the EU FED Cloud vs. an Open-Source Federated Cloud Proposal](https://diniscruz.ai/2025/06/18/comparing-the-eu-fed-cloud-vs-an-open-source-federated-cloud-proposal.md): 2025-06-18. The EU FED Cloud is a European initiative to build a federated, sovereign cloud ecosystem with built-in compliance and security. It's not a single public cloud provider, but a framework of multiple…
- [Bridging Niklas Luhmann's Ideas with Semantic Knowledge Graphs and G³](https://diniscruz.ai/2025/06/18/bridging-niklas-luhmanns-ideas-with-semantic-knowledge-graphs-and-g3.md): 2025-06-18. Niklas Luhmann (1927–1998) was a renowned German sociologist and systems theorist, famous not only for his influential theory of social systems but also for his extraordinarily productive writing…
- [Workshop Plan: User-Driven Semantic Persona Graphs Powered by GenAI](https://diniscruz.ai/2025/06/16/workshop-plan-user-driven-semantic-persona-graphs-powered-by-genai.md): 2025-06-16. This workshop will demonstrate how to use Generative AI (GenAI) to build a personalized semantic knowledge graph for a user and then generate tailored outputs for different stakeholder personas. We…
- [The Hidden Cost of Ephemeral Testing and the Case for Automation](https://diniscruz.ai/2025/06/15/the-hidden-cost-of-ephemeral-testing-and-the-case-for-automation.md): 2025-06-15. The key insight is that lack of visible tests doesn't mean testing isn't happening – it means testing is happening inefficiently. Developers practicing Ephemeral Test-Driven Development (ETDD)…
- [Personal Content Rights: Protecting Individuals in the Age of Deepfakes and AI Cloning](https://diniscruz.ai/2025/06/15/personal-content-rights-protecting-individuals-in-the-age-of-deepfakes-and-ai-cloning.md): 2025-06-15. The rise of generative AI has enabled anyone to clone voices, faces, and writing styles with startling realism. From fabricated videos of leaders to AI-generated voice scams, this technology is being…
- [User-Driven Semantic Persona Graphs Powered by GenAI](https://diniscruz.ai/2025/06/14/user-driven-semantic-persona-graphs-powered-by-genai.md): 2025-06-14. Modern organizations increasingly rely on knowledge graphs to model complex relationships between business entities, risks, and controls. However, building these graphs traditionally requires…
- [Technical Briefing: Web Content Filtering Project](https://diniscruz.ai/2025/06/13/technical-briefing-web-content-filtering-project.md): 2025-06-13. This technical briefing outlines the architecture and design of the Web Content Filtering Project, which aims to give users fine-grained control over the content they see as they browse the web. The…
- [Follow-Up Technical Vision: Optimizations, Deployment, and Security](https://diniscruz.ai/2025/06/13/follow-up-technical-vision-optimizations-deployment-and-security.md): 2025-06-13. In our initial briefing, we outlined a web content filtering platform that acts as a proxy to intercept web pages and filter out disallowed content before rendering to users. The goal of such a…
- [Security Implications of the Model Context Protocol (MCP) and the Need for Robust Infrastructure](https://diniscruz.ai/2025/06/10/security-implications-of-the-model-context-protocol-mcp-and-the-need-for-robust-infrastructure.md): 2025-06-10. The Model Context Protocol (MCP) has emerged as a powerful open standard that enables Large Language Models (LLMs) to interface with external tools and data sources in a uniform way. By acting as a…
- [Explorers, Villagers, and Town Planners: Understanding the Generative AI Divide](https://diniscruz.ai/2025/06/10/explorers-villagers-and-town-planners-understanding-the-generative-ai-divide.md): 2025-06-10. In the generative AI (GenAI) community of mid-2025, a puzzling divide has emerged. On one side stand the enthusiastic explorers – pioneers who see GenAI as a technology that can be used everywhere…
- [Supercharging AppSec Threat Modeling Services with GenAI and Semantic Graphs](https://diniscruz.ai/2025/06/09/supercharging-appsec-threat-modeling-services-with-genai-and-semantic-graphs.md): 2025-06-09. Application security (AppSec) consulting is on the cusp of a transformation driven by Generative AI (GenAI) and semantic knowledge graphs. By integrating these technologies, AppSec services companies…
- [Using Presentations Instead of CVs in Hiring](https://diniscruz.ai/2025/06/08/using-presentations-instead-of-cvs-in-hiring.md): 2025-06-08. Conventional resumes or CVs often provide a flat, one-dimensional snapshot of a candidate. They are typically static lists of past job titles, dates, and bullet-point skills – which can be misleading…
- [Personalized Briefing: Semantic Knowledge Graphs – Intersection of Dinis Cruz & Kerstin Clessienne's Work](https://diniscruz.ai/2025/06/08/personalized-briefing-semantic-knowledge-graphs-dinis-cruz-kerstin-clessienne.md): 2025-06-08. Kerstin Clessienne is an internationally experienced advisor in applied marketing technology and organizational strategy, who explicitly brands herself as a “Marketing Business Graph and Business AI…
- [History and Analysis of OWASP In-Person Summits](https://diniscruz.ai/2025/06/07/history-and-analysis-of-owasp-in-person-summits.md): 2025-06-07. The OWASP in-person summits are intensive, collaborative gatherings of the Open Web Application Security Project’s community. These summits (distinct from regular OWASP conferences) bring together…
- [GenAI Legacy Code Refactoring – Business Plan](https://diniscruz.ai/2025/06/07/genai-legacy-code-refactoring-business-plan.md): 2025-06-07. GenAI Legacy Code Refactoring is a SaaS company dedicated to modernizing and refactoring legacy software codebases using generative AI (GenAI), human expertise, and automated workflows. Our platform…
- [Personalised Briefing for Dan Raywood on the Future of News](https://diniscruz.ai/2025/06/06/personalised-briefing-for-dan-raywood-on-the-future-of-news.md): 2025-06-06. This executive briefing is a synthesis of hundreds of pages of research by Dinis Cruz (primarily from The Future of News and the Monetisation of Trust report and related documents on…
- [Proposal: Strategic AWS Partnership with Dinis Cruz’s GenAI and Graph Innovations](https://diniscruz.ai/2025/06/03/proposal-strategic-aws-partnership-with-dinis-cruz-genai-and-graph-innovations.md): 2025-06-03. Dinis Cruz is a seasoned cybersecurity technologist and researcher who has spent over six years building advanced solutions on Amazon Web Services (AWS). He has a proven track record of leveraging…
- [Proposal for Neo4j Collaboration with Dinis Cruz](https://diniscruz.ai/2025/06/03/proposal-for-neo4j-collaboration-with-dinis-cruz.md): 2025-06-03. Dinis Cruz is a seasoned cybersecurity expert and innovator with a long-standing relationship with Neo4j, marked by years of advocacy for graph technologies. He brings over two decades of experience…
- [Jira as a Graph Database – Proposal for Atlassian Executives](https://diniscruz.ai/2025/06/03/jira-as-a-graph-database–proposal-for-atlassian-executives.md): 2025-06-03. Dinis Cruz is a seasoned technology leader and Atlassian expert with over a decade of experience pushing Jira beyond traditional use cases. He has pioneered research and practical implementations of…
- [Linking Threat Models with Semantic Business Graphs](https://diniscruz.ai/2025/06/02/linking-threat-models-with-semantic-business-graphs.md): 2025-06-02. Threat modeling is traditionally a technical exercise: security architects enumerate assets, diagram data flows, identify threats/vulnerabilities, and recommend mitigations. Often, the output is a…
- [Using Threat Modeling and Semantic Graphs to Secure the Digital Supply Chain](https://diniscruz.ai/2025/05/30/using-threat-modeling-and-semantic-graphs-to-secure-the-digital-supply-chain.md): 2025-05-30. Modern organizations rely on complex digital supply chains comprising not only their own systems, but countless third-party components and service providers. Each link in this chain – from…
- [Scaling Supply Chain Security using Threat Modeling Semantic Knowledge Graphs and Maps](https://diniscruz.ai/2025/05/30/scaling-supply-chain-security-using-threat-modeling-semantic-knowledge-graphs-and-maps.md): 2025-05-30. In today’s interconnected software ecosystem, digital supply chain security has become a critical challenge. Modern applications rely on countless third-party components and services, yet buyers and…
- [Graphs of Graphs of Graphs (G3) in Threat Modeling](https://diniscruz.ai/2025/05/30/graphs-of-graphs-of-graphs-g3-in-threat-modeling.md): 2025-05-30. Modern cybersecurity architectures are highly complex, with myriad components, third-party services, and evolving threat landscapes. Traditional threat modeling approaches – often static diagrams or…
- [Threat Models as Mandatory Disclosures: A Vision for Security Transparency](https://diniscruz.ai/2025/05/29/threat-models-as-mandatory-disclosures__a-vision-for-security-transparency.md): 2025-05-29. Argues that publishing threat models improves security transparency.
- [Semantic Knowledge Graphs for LLM-Driven Source Code Analysis](https://diniscruz.ai/2025/05/29/semantic-knowledge-graphs-for-llm-driven-source-code-analysis.md): 2025-05-29. Using knowledge graphs and large language models for analyzing source code.
- [Advancing Threat Modeling with Semantic Knowledge Graphs](https://diniscruz.ai/2025/05/29/advancing-threat-modeling-with-semantic-knowledge-graphs.md): 2025-05-29. Shows how semantic knowledge graphs enhance threat modeling practices.
- [LETS (Load, Extract, Transform, Save): A Deterministic and Debuggable Data Pipeline Architecture](https://diniscruz.ai/2025/05/27/lets__load-extract-transform-save__a-deterministic-and-debuggable-data-pipeline_architecture.md): 2025-05-27. Outline of a deterministic, debuggable data pipeline architecture.
- [Technical Debrief: Evolution from Electron‑Based to Python‑Native Web Content Capture App](https://diniscruz.ai/2025/05/22/technical-debrief__evolution-from-electron-based-to-python-native-web-content-capture-app.md): 2025-05-22. Lessons learned migrating a web capture tool from Electron to Python.
- [Project: Electron-Based Web Content Capture App (with Playwright & Python)](https://diniscruz.ai/2025/05/21/project__electron-based-web-content-capture-app-with-playwright-and-python.md): 2025-05-21. Following the failed attempt to implement the Project: Web Content Capture Extension with Pyodide and Serverless Backend this version creates a desktop app
- [Security Debrief: OpenAI’s ChatGPT Connector GitHub App](https://diniscruz.ai/2025/05/18/security-debrief__openai_chatgpt_connector_gitHub_app.md): 2025-05-18. Analyzes security implications of the ChatGPT Connector GitHub app.
- [Project: Web Content Capture Extension with Pyodide and Serverless Backend](https://diniscruz.ai/2025/05/18/project__web-content-capture-extension-with-pyodide-and-serverless-backend.md): 2025-05-18. Prototype browser extension leveraging Pyodide and a serverless backend to
capture webpage content, including a debrief on why the initial approach
failed.
- [OAuth Security Concerns and Implications for the Model Context Protocol (MCP)](https://diniscruz.ai/2025/05/18/oauth-security-concerns-and-implications-for-the-model-context-protocol.md): 2025-05-18. Discusses OAuth risks in relation to the Model Context Protocol.
- [Briefing on Canada’s New Minister of Artificial Intelligence and Digital Innovation (vs UK and PT)](https://diniscruz.ai/2025/05/18/briefing-on-canada-new-minister-of-artificial-intelligence-and-digital-innovation-vs-uk-and-pt.md): 2025-05-18. Canada has recently established a new cabinet position: Minister of Artificial Intelligence and Digital Innovation. This unprecedented role signals a heightened focus on AI governance and digital…
- [Using GenAI to graph and map your company’s data](https://diniscruz.ai/2025/05/07/using-genai-to-graph-and-map-your-companys-data__the-grafter__may_2025.md): 2025-05-07. Presentation delivered at The Grafter meetup Chapter on the 7th Apr 2025
- [Research - AI-Powered Customer Service Solutions for Multi-Property Airbnb Hosts](https://diniscruz.ai/2025/05/04/research__ai-powered-customer-service-solutions-for-multi-property-airbnb-hosts.md): 2025-05-04. Managing multiple Airbnb properties means juggling constant guest inquiries across different channels. The goal is to respond quickly and accurately 24/7 – which is where AI-powered assistants can…
- [Project GenBnB: Enhancing Airbnb Host Workflows with GenAI](https://diniscruz.ai/2025/05/04/project-genbnb__enhancing-airbnb-host-workflows-with-gen-ai.md): 2025-05-04. Explores using generative AI to automate property listings and customer
interactions so Airbnb hosts can focus on high-value tasks.
- [Project InsightFlow: GenAI-Powered Transformation of Regulatory and News Feeds](https://diniscruz.ai/2025/05/03/project-insightflow__genai-powered-transformation-of-regulatory-and-news-feeds.md): 2025-05-03. Describes a semantic knowledge graph pipeline that ingests regulations and
news, using generative AI to deliver personalized client newsletters.
- [Fail Safe, Not Fail Big: Cyber-Security-Inspired Strategies to Prevent the Next Iberian Grid Crisis](https://diniscruz.ai/2025/04/29/fail-safe-not-fail-big__cyber-security-inspired-strategies-to-prevent-the-next-iberian-grid-crisis.md): 2025-04-29. This white paper was authored on April 29, 2025, one day after the Iberian power blackout incident. At the time of writing, no official root cause analysis or detailed technical explanation of the…
- [Semantic OWASP:  Leveraging GenAI and Graphs to Customise and Scale Security Knowledge](https://diniscruz.ai/2025/04/23/semantic_owasp__leveraging_genai_and_garphs_to_customise_and_scale_security_knowledge.md): 2025-04-23. Presentation delivered at the OWASP London Chapter meeting on the 23rd Apr 2025.
- [Navigating the AI Revolution: A University Student’s Guide to Generative AI in Education](https://diniscruz.ai/2025/04/22/navigating-the-ai-revolution__a_university_students_guide_to_generative-ai-in-education.md): 2025-04-22. Generative Artificial Intelligence (AI) – especially large language models (LLMs) like GPT-based tools – is transforming how we learn, research, and communicate. As a university student, you are at…
- [Graph-Powered Legal Knowledge: An Open, Distributed, and GenAI-Assisted Roadmap](https://diniscruz.ai/2025/04/22/graph-powered-legal-knowledge__an-open-distributed-and-ai-assisted-roadmap.md): 2025-04-22. Legal systems around the world are growing in complexity and volume, yet the data of law is often trapped in static documents and siloed systems. This paper presents a roadmap for a graph-powered…
- [Strengthening Trust in News: Implementing Identity Graphs for Authors and Sources](https://diniscruz.ai/2025/04/21/strengthening-trust-in-news__implementing-identity-graphs-for-authors-and-sources.md): 2025-04-21. We propose a newsroom‑wide adoption of Identity Graphs: dynamic, data‑rich profiles that verify and continuously update the credentials, affiliations, and past media appearances of both authors and…
- [Project Cybersage: AI-Powered Risk Contextualization & Security Reporting](https://diniscruz.ai/2025/04/10/project-cybersage__ai-powered-risk-contextualization_security-reporting.md): 2025-04-10. Proposal for an AI platform that contextualizes vulnerability data and
generates clear, risk-based security reports for technical and executive
audiences.
- [Project Agenda: GenAI-Powered Transformation of Meetings and Documentation](https://diniscruz.ai/2025/04/10/project-agenda__gen-ai-powered-transformation-of-meetings-and-documentation.md): 2025-04-10. Introduces a GenAI-driven workflow that prepares meetings, generates
personalized briefs and tracks action items to reduce wasted time.
- [Scaling a Solo Cybersecurity Consulting Practice - Business Plan Research](https://diniscruz.ai/2025/04/07/scaling-a-solo-cybersecurity-consulting-practice__business-plan-research.md): 2025-04-07. In summary, current market conditions strongly favor cybersecurity consulting and training services. A confluence of factors – relentless cyberattacks, a shortage of experienced talent, new tech…
- [Think Different, Again: Reimagining Apple’s Role in the AI Era](https://diniscruz.ai/2025/04/06/think-different-again__reimagining-apple-role-in-the-ai-era.md): 2025-04-06. Apple Inc. stands at a crossroads in the spring of 2025. The company that revolutionized personal computing, smartphones, and wearable technology now faces perhaps its greatest challenge: defining…
- [Enhancing Cybersecurity Event Networking with Semantic Knowledge Graphs](https://diniscruz.ai/2025/04/06/enhancing-cybersecurity-event-networking-with-semantic-knowledge-graphs.md): 2025-04-06. Cybersecurity conferences and trade events thrive on the connections made between attendees, vendors, and presenters. Yet too often, who meets whom is left to chance. Even as attendee networking…
- [The Future of News Monetization: Embracing Micro and Nano Payments](https://diniscruz.ai/2025/04/02/the-future-of-news-monetization__embracing-micro-and-nano-payments.md): 2025-04-02. News organizations worldwide face a dual challenge: sustaining revenue in the digital age while maintaining user engagement and trust. Traditional subscription and advertising models are straining…
- [Semantic OWASP: Leveraging GenAI and Graphs to Customise and Scale Security Knowledge](https://diniscruz.ai/2025/04/02/semantic-owasp__leveraging-genai-and-graphs-to-customise-and-scale-security-knowledge.md): 2025-04-02. See also this slides and video presented at OWASP's London Chapter Meeting
- [Maturity Models vs. Traditional Standards in Application Security](https://diniscruz.ai/2025/04/02/maturity-modes-vs-traditional-standards-in-application-security.md): 2025-04-02. Every organization’s security capabilities are different. Traditional standards often assume a uniform set of controls for all teams or applications, which may not reflect reality. Maturity models…
- [Intent-Based Feedback Loops in Cloud Environments](https://diniscruz.ai/2025/04/01/intent-based-feedback-loops-in-cloud-environments.md): 2025-04-01. Today, a successful deployment typically yields only a confirmation that resources were created or updated – it does not automatically verify that the user’s higher-level goal was achieved, nor does…
- [Europe’s Strategic Opportunity in GenAI: A Deep Dive into Six Defining Trends](https://diniscruz.ai/2025/04/01/europe-strategic-opportunity-in-gen-ai__a-deep-dive-into-six-defining-trends.md): 2025-04-01. A convergence of trends is reshaping the GenAI landscape – models are becoming commoditised and open, systems are shifting from centralized GPU clusters to local devices, and knowledge is moving from…
- [Scaling Europe’s Regulatory Superpower: From Static Cybersecurity Standards to Semantic Graphs](https://diniscruz.ai/2025/03/31/scaling-europe-regulatory-superpower.md): 2025-03-31. White paper on using semantic graphs to manage EU cybersecurity standards.
- [From Top-Down to Organic Evolving Graphs, Ontologies, and Taxonomies](https://diniscruz.ai/2025/03/29/from-top-down-to-organic-evolving-graphs-ontologies-and-taxonomies.md): 2025-03-29. Discusses dynamic, community-driven approaches to building knowledge graphs.
- [Journalists' Challenges with Digital Content Provenance and Trust](https://diniscruz.ai/2025/03/24/journalists-challenges-with-digital-content-provenance-and-trust.md): 2025-03-24. Explores how semantic graphs build trust in AI-generated news.
- [LinkedIn Vault: Professional Data Preservation Service](https://diniscruz.ai/2025/03/03/linkedin-vault__professional-data-preservation-servic.md): 2025-03-03. Automates regular backups of LinkedIn career data to user storage.
- [Project StartLLM: UC-01: Pentesting Insights Acceleration (PIA)](https://diniscruz.ai/2025/03/01/project-startllm__uc-01__pentesting-insight-acceleration.md): 2025-03-01. Explores how generative AI can streamline pentesting workflows by
summarizing findings and highlighting priorities for faster remediation.
- [Project StartLLM: Technical Proposal for 5x GenAI Projects](https://diniscruz.ai/2025/03/01/project-startllm__technical-proposal-for-5x-genai-projects.md): 2025-03-01. Strategic proposal outlining five focused generative AI projects designed to
deliver quick wins and accelerate organizational adoption.
- [My Journey Building a GenAI Startup: The Power of MVPs and CI Pipelines - PART 2](https://diniscruz.ai/2025/02/26/my-journey-building_a_genai_startup__the-power-of-mvps-and-ci-pipelines__part-2.md): 2025-02-26. Presentation delivered at the AI Security Collective meetup in London on the 26th Feb 2025 (Part 2)
- [An Open-Source Sovereign Cloud for an Open Europe: The Case for a Federated, AI-Enabled, and Multilingual Digital Infrastructure](https://diniscruz.ai/2025/02/24/an-open-source-sovereign-cloud-for-an-open-europe.md): 2025-02-24. The European Union (EU) stands at a critical juncture in defining its digital sovereignty. As reliance on U.S.-based cloud providers like Amazon Web Services (AWS), Microsoft Azure, and Google Cloud…
- [Project SupplyShield: GenAI-Driven Supply Chain Risk Management and Compliance](https://diniscruz.ai/2025/02/15/project-supplyshield__genai-driven-supply-chain-risk-management-and-compliance.md): 2025-02-15. Introduces an AI-powered third-party risk platform that uses generative
models and knowledge graphs to deliver continuous supply chain compliance.
- [Scaling Kubernetes with One-Node Clusters: A Paradigm Shift in Cloud-Native Orchestration](https://diniscruz.ai/2025/02/13/scaling-kubernetes-with-one-node-clusters-a-paradigm-shift-in-cloud-native-orchestration.md): 2025-02-13. Kubernetes has revolutionized container orchestration, providing a powerful abstraction for managing workloads across distributed infrastructure.
- [Project Lumos: Serverless JIRA-to-GraphDB XYZ Connector](https://diniscruz.ai/2025/02/13/project-lumos__serverless-jira-to-graphdb-xyz-connector.md): 2025-02-13. Working Backwards plan for an open-source connector that streams JIRA data
into GraphDB XYZ using a fully serverless architecture.
- [Generative AI and the Future of Learning](https://diniscruz.ai/2025/02/12/generative-ai-and-the-future-of-learning.md): 2025-02-12. Generative AI (GenAI) – think of tools like ChatGPT – is rapidly changing how people learn. Unlike traditional one-size-fits-all teaching, GenAI can tailor lessons to each learner in real time.
- [Portuguese as a Programming Language in the AI Era](https://diniscruz.ai/2025/02/11/portuguese-as-a-programming-language-in-the-AI-Era.md): 2025-02-11. As the official language of nine countries and a working language in multiple international organizations, Portuguese wields significant cultural and geopolitical influence. In economic terms, the…
- [O2 Platform's MethodStreams (2010 Open Source SAST engine)](https://diniscruz.ai/2025/02/11/o2-platforms-methodstreams-2010-open-source-sast-engine.md): 2025-02-11. The OWASP O2 Platform is an open-source toolkit created by Dinis Cruz as a “new paradigm” for performing and documenting web application security reviews (Dinis Cruz Blog: OWASP O2 Platform).
- [Second Stories: From Three Mile Island to Cybersecurity](https://diniscruz.ai/2025/02/10/second-stories__from-three-mile-island-to-cybersecurity.md): 2025-02-10. The concept of "second stories" originates from safety science and the analysis of accidents such as the Three Mile Island (TMI) nuclear incident. In the aftermath of TMI (1979), investigators…
- [Project JSync: JIRA Exporter and Synchronization System](https://diniscruz.ai/2025/02/09/project-jsync__jira-exporter-and-synchronization-system.md): 2025-02-09. Serverless pipeline that captures JIRA issue changes in real time and stores
them in S3 and GitHub, exposing a FastAPI interface for querying the data.
- [The Future of News: Building Trust Through Fact Provenance](https://diniscruz.ai/2025/02/05/the-future-of-news-building-trust-through-fact-provenance.md): 2025-02-05. These principles directly align with The Cyber Boardroom: Personalized News Feed Architecture, where fact provenance underpins the platform’s ability to deliver role-based cybersecurity insights.…
- [Monetising Trust and Knowledge: How News Providers can leverage Personalised Semantic Graphs](https://diniscruz.ai/2025/02/02/monetising-trust-and-knowledge-for-news-providers.md): 2025-02-02. The rise of GenAI-driven content consumption is reshaping how news organisations deliver and monetise information. As platforms, search engines, and GenAI-powered assistants increasingly rely on…
- [My Journey Building a GenAI Startup: The Power of MVPs and CI Pipelines - PART 1](https://diniscruz.ai/2025/01/29/my-journey-building_a_genai_startup__the-power-of-mvps-and-ci-pipelines__part-1.md): 2025-01-29. Presentation covering early lessons from building a GenAI startup.
- [Deterministic GenAI Outputs with Provenance  (OWASP EU AppSec Lisbon)](https://diniscruz.ai/2024/06/28/deterministic-genai-outputs-with-provenance__owasp-appsec-lisbon__gslides.md): 2024-06-28. Presentation delivered at the Global OWASP AppSec in Lisbon in 28th June 2024
- [It’s 2024 and, with GenAI, we can finally make AppSec work](https://diniscruz.ai/2024/02/22/its-2024-and-with-genai-we-can-finally-make-appsec-work.md): 2024-02-22. Presentation delivered at the OWASP London Chapter meeting on the 22nd Feb 2024