© Mapbox, © OpenStreetMap
Arnav Tripathy

Arnav Tripathy

Security Operations at Kaseya. Breaking things in Dev, Sec, and Ops — usually all three at once

Dublin, Ireland

Actions

Arnav Tripathy is a Cloud Security Engineer based in Dublin with over three years of experience across DevSecOps, DevOps, and incident response. He's worked across the full stack of securing modern engineering — from embedding security into pipelines and cloud infrastructure to being the person on call when things go sideways at 3am.
OSCP certified and a Kubestronaut, he brings both the attacker mindset and the engineering depth to understand how systems actually break in production — not just in theory.
He builds open source security tools on the side, most recently Kubedecoy, a lightweight Kubernetes honeypot for threat detection which has been presented at community conferences across Ireland and the UK.
When he's not responding to incidents or breaking his own infrastructure, he's usually travelling somewhere new.

Area of Expertise

  • Information & Communications Technology

Topics

  • Security
  • Cloud Security
  • DevSecOps
  • cyber security

Building a digital beehive: The cluster that wasn't real, but the attacks were

Kubernetes is everywhere now—and so are attacks against it. Misconfigurations, exposed APIs, and overly permissive RBAC have made clusters a prime target, while most security tools stop at scanning images and YAML instead of showing what attackers do after they get in.

This talk introduces KubeDecoy – a lightweight, open-source Kubernetes honeypot built from familiar components: vcluster, Falco, Falcosidekick, and NGINX. The goal is simple: stand up a convincing fake cluster, expose realistic attack surfaces, and quietly observe how real adversaries interact with them.

We’ll walk through the architecture, a live-style deployment on Minikube, and practical workarounds for vcluster’s limitations using only open-source components. Along the way, we’ll map KubeDecoy’s detections to the Kubernetes Threat Matrix, highlight where it shines (and where it doesn’t), and show how you can apply these ideas in your own clusters—whether you’re blue team, red team, or somewhere in between.

Cloud Native Days Poland 2026 Sessionize Event Upcoming

October 2026 Warsaw, Poland

BSides Kraków 2026 Sessionize Event Upcoming

September 2026 Kraków, Poland

Manchester Cloud Native Meetup User group Sessionize Event

June 2026 Manchester, United Kingdom

Bsides Galway 2026 Sessionize Event

February 2026 Galway, Ireland

Arnav Tripathy

Security Operations at Kaseya. Breaking things in Dev, Sec, and Ops — usually all three at once

Dublin, Ireland

Actions

Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.

Jump to top