Pete Markowsky
banner
plm.bsky.social
Pete Markowsky
@plm.bsky.social
Cofounder & CEO @northpolesec.bsky.social

Prev: @google working on Security Agents including Santa. Cofounder and Chief Architect @capsule8 (tweets are my own.)

Personal Blog: https://blog.markowsky.us
Company Website: https://northpole.security
Reposted by Pete Markowsky
Join us in celebrating North Pole Security's first anniversary! 🎉

Reflect on a year of innovation, growth, & unwavering commitment to livable security with Santa and Workshop. Read about our journey and what's next! #FirstAnniversary #Santa #Workshop

northpole.security/blog/one-yea...
October 9, 2025 at 5:45 PM
Headed to hacker summer camp looking first to seeing people and sharing @northpolesec.bsky.social’s Workshop with people.
August 3, 2025 at 2:42 PM
It's not just one release, it's two!
July 31, 2025 at 4:04 PM
It's been an 11 month journey to build Workshop, the integrated backend Santa always deserved

Lots of things we'd always wanted at Google are now real

The MVP's already powerful & we're just getting started

Thank you to Zane & the team at A16Z, Royal Hansen and the team @northpolesec.bsky.social
🎉 It's Christmas in July!

We raised $4M to make proactive macOS security scalable for everyone.

Workshop is the first commercial platform built for Santa. Finally making allowlisting usable at scale.

Thanks to A16Z & everyone's who's believed in our mission.
July 30, 2025 at 2:48 PM
I made this gist gist.github.com/pmarkowsky/9... to show how @northpolesec.bsky.social Santa FAA rules lockdown the Spotlight importers used in Sploitlight microsoft.com/en-us/securi... &
@theevilbit.bsky.social's persistence trick.

I also added an example rule for blocking access to the DBs.
Santa FAA rule to prevent spotlight plugins from being registered
Santa FAA rule to prevent spotlight plugins from being registered - sploitlight.md
gist.github.com
July 29, 2025 at 4:21 PM
Going to be attending @bsideslv.org and around. Summer camp.

If you’re around say hello.
July 24, 2025 at 12:14 PM
This was a big release. Getting CEL in opens up so many possibilities and like all good things it's a take what you need.

Really looking forward to seeing what people do with this.
July 8, 2025 at 1:36 PM
Lots of great features in 2025.5.

Santa is now easier to use without having to drop to the command line.

Be sure to check out the videos in the 🧵
May 29, 2025 at 1:13 PM
Have to admit it's exciting to see years of work coming together.
May 8, 2025 at 2:05 PM
Reposted by Pete Markowsky
Very exciting to see Santa called out as a tool that works in the
@specterops.io SO-Con talk on Modern macOS Red Teaming Tactics by Lance Cain and @werdhaihai.bsky.social

www.youtube.com/watch?v=t_L2...
Modern macOS Red Teaming Tactics | SO-CON 2025
YouTube video by SpecterOps
www.youtube.com
May 8, 2025 at 1:41 PM
Reposted by Pete Markowsky
📢 Last week we released Santa v2025.4 github.com/northpolesec...

Along with some big changes 🧵
Release v2025.4 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Announcements 📣 Opt-In Stats Collection...
github.com
May 5, 2025 at 5:52 PM
Reposted by Pete Markowsky
Today we released Santa v2025.3 on GitHub github.com/northpolesec....

This release includes a handful of new features.
Release v2025.3 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Announcements 📣 Opt-In Stats Collection...
github.com
April 1, 2025 at 6:37 PM
In order to learn MCP I wrote a quick server on top of
@northpolesec.bsky.social's Santa github.com/pmarkowsky/s... it provides readonly functionality and debugging.
GitHub - pmarkowsky/santa-mcp: A PoC MCP Server for Santa
A PoC MCP Server for Santa. Contribute to pmarkowsky/santa-mcp development by creating an account on GitHub.
github.com
March 31, 2025 at 5:50 PM
Reposted by Pete Markowsky
We agree with CISA and think you should use Santa too

www.cisa.gov/sites/defaul...
March 5, 2025 at 2:43 PM
Today in adventures in open source. We've had one user make a PR to update docs 🎉

And on a call a user said thank you for what you folks are doing in the community.

Not gonna lie this is pretty great to be on the receiving end of this.
March 3, 2025 at 9:11 PM
Reposted by Pete Markowsky
📣 We’ve just released Santa v2025.2 on GitHub. github.com/northpolesec...

Some highlights include:

- Process-centric File Access Authorization rules are now in Beta!

This means FAA rules can now target all access from a given process without knowing the files that will be accessed ahead of time.
Release v2025.2 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Announcements 📣 Opt-In Stats Collection...
github.com
February 28, 2025 at 2:44 AM
Reposted by Pete Markowsky
Last night we released Santa 2025.1

github.com/northpolesec...

Notable features include:

Entitlements in the Sync Protocol

This allows you to avoid authorizing or see which applications are disabling code signing on libraries.
Release v2025.1 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Fixed ❗ Fixed an issue where santactl c...
github.com
January 28, 2025 at 4:19 PM
Reposted by Pete Markowsky
Today we're excited to release Santa v2024.11!

github.com/northpolesec...

Highlights:

1. Our initial beta for standalone mode: This lets you authorize binaries using TouchID. So you can live in lockdown mode.

www.youtube.com/watch?v=Hd4t...
Santa Standalone Mode w/Swift UI
YouTube video by Pete Markowsky
www.youtube.com
December 10, 2024 at 6:01 PM
Le sigh, I clearly need an edit button. The typos will continue until my ADHD subsides.
November 29, 2024 at 5:54 PM
I want to see the next startup show in which the first thing a founder does is go oh shit how do I setup quickbooks and payroll? We need a company credit card!?
November 27, 2024 at 10:15 PM
Reposted by Pete Markowsky
Reposted by Pete Markowsky
Today is Santa's 10th Birthday 🎂🎉.

The first commit was from Russell Hancox at 4:23 PM
November 20, 2024 at 2:04 PM
This was really really interesting dynomight.net/chess/

TL;DR one model out of the set does well the rest do very poorly vs. the Chess AI stockfish on the lowest setting.

I didn't expect chat-gpt-3.5-turbo-instruct to do so well.
Something weird is happening with LLMs and chess
are they good or bad?
dynomight.net
November 15, 2024 at 7:46 PM
As seen from @ddz.bsky.social on X:

The entire 3rd-edition of Ross Anderson's "Security Engineering" is available free as PDFs now!
cl.cam.ac.uk/archive/rja1...
cl.cam.ac.uk
November 13, 2024 at 4:33 PM
Really proud to be working with the team on this.
Last week we made our first Open Source release of Santa version 2024.10 github.com/northpolesec...

Highlights:

1. Streamlined UI with silencing options and added a button to copy relevant data to the clipboard to help users report issues / blocks to security
November 11, 2024 at 11:50 PM