--- title: "Tracenyx Team (@tracenyx) | Hashnode" description: "Kernel-native network security for every node in your cluster — including Windows. Read the latest articles by Tracenyx Team on Hashnode." url: "https://hashnode.com/@tracenyx" --- @tracenyx # Tracenyx Team @tracenyx · Joined April 2026 Kernel-native network security for every node in your cluster — including Windows. ### [Anything can talk to anything: the Kubernetes default quietly expanding your blast radius](https://blog.tracenyx.ai/anything-can-talk-to-anything-the-kubernetes-default-quietly-expanding-your-blast-radius?utm_source=hashnode&utm_medium=feed) Part of the Kernel-Native Kubernetes Security series. This one is not specifically about Nyx. It is about a security assumption hiding inside many Kubernetes clusters, and a free hands-on lab you can run on your laptop in about an hour. 8 min read · [blog.tracenyx.ai](https://blog.tracenyx.ai/anything-can-talk-to-anything-the-kubernetes-default-quietly-expanding-your-blast-radius?utm_source=hashnode&utm_medium=feed) [3](https://hashnode.com/posts/anything-can-talk-to-anything-the-kubernetes-default-quietly-expanding-your-blast-radius/6a6a7661d589bd8a6fdb7e71) [Jul 29](https://hashnode.com/posts/anything-can-talk-to-anything-the-kubernetes-default-quietly-expanding-your-blast-radius/6a6a7661d589bd8a6fdb7e71) ### [Getting a kernel driver through Microsoft certification as a bootstrapped startup](https://blog.tracenyx.ai/hlk-certification-kernel-driver-startup-journey?utm_source=hashnode&utm_medium=feed) Part of the Kernel-Native Kubernetes Security series. Friday's post explained why Nyx's Windows enforcement runs as a Windows Filtering Platform callout driver in the kernel. This one is about what it took to make that driver legitimate — the certification gauntlet Microsoft requires before a production Windows Server kernel will load your code. It's a story about walls, and about the tool we built and open-sourced when we hit the last one. 8 min read · [blog.tracenyx.ai](https://blog.tracenyx.ai/hlk-certification-kernel-driver-startup-journey?utm_source=hashnode&utm_medium=feed) [Jul 6](https://hashnode.com/posts/hlk-certification-kernel-driver-startup-journey/6a4c25630c79a75faee1ec1d) ### [Why eBPF stops at the Windows node boundary — and what we built instead](https://blog.tracenyx.ai/why-ebpf-stops-at-the-windows-node-boundary?utm_source=hashnode&utm_medium=feed) Day two of Nyx being public. Yesterday was the announcement; today is the technical story behind the one claim in it that raises eyebrows: kernel-level network security with behavioural parity across Linux and Windows Server nodes. This post explains why that's rare, why it's hard, and how we approached it. 7 min read · [blog.tracenyx.ai](https://blog.tracenyx.ai/why-ebpf-stops-at-the-windows-node-boundary?utm_source=hashnode&utm_medium=feed) [Jul 2](https://hashnode.com/posts/why-ebpf-stops-at-the-windows-node-boundary/6a46e0e70586e42bea1ee6f4) ### [How Zero Trust Egress Policy Contains a Supply Chain Attack — The Axios npm Case](https://blog.tracenyx.ai/axios-npm-supply-chain-zero-trust-egress?utm_source=hashnode&utm_medium=feed) An honest look at what zero trust egress policy stops in the Axios npm supply chain attack — and what it can't. With real NyxNetworkPolicy exmapless 7 min read · [blog.tracenyx.ai](https://blog.tracenyx.ai/axios-npm-supply-chain-zero-trust-egress?utm_source=hashnode&utm_medium=feed) [Apr 10](https://hashnode.com/posts/axios-npm-supply-chain-zero-trust-egress/69d84b49fa7251682e24e3fa)