https://securityarchitects.com/post/ Recent content in News on Security Architects Hugo en-us Tue, 21 Jul 2026 09:00:00 -0700 https://securityarchitects.com/post/introducing-cone-of-silence/ Tue, 21 Jul 2026 09:00:00 -0700 https://securityarchitects.com/post/introducing-cone-of-silence/ <p>Today we&rsquo;re opening early access to <strong><a href="https://securityarchitects.com/products/cone-of-silence/">Cone of Silence</a></strong> — agent pods secure enough for the original Chief and Agent.</p> <p>A pod is your own always-on AI agent: Claude, working for you around the clock on a dedicated, hardened machine, reachable from your phone over Telegram. Message it like a person; it reads, researches, codes, and runs real tools — while everything it touches stays inside a security boundary we built and operate.</p> https://securityarchitects.com/post/sandbox-by-default/ Sat, 18 Jul 2026 10:00:00 -0700 https://securityarchitects.com/post/sandbox-by-default/ <p>The always-on personal AI agent is the most exciting thing happening in computing right now — and the most exposed. Between late January and early February of this year, <a href="https://www.bitsight.com/blog/openclaw-ai-security-risks-exposed-instances">Bitsight&rsquo;s internet-scale scanning</a> observed <strong>more than 31,000 distinct exposed instances</strong> of the most popular personal-agent stack, listening on its default port across technology, healthcare, finance, government, and insurance networks. Independent scanning teams reported even larger numbers, including thousands of instances vulnerable to remote code execution.</p> https://securityarchitects.com/post/authinator3-open-source/ Tue, 14 Jul 2026 10:00:00 -0700 https://securityarchitects.com/post/authinator3-open-source/ <p>We&rsquo;ve published the core of <strong>Authinator3</strong> as open source under the ISC license: <a href="https://gitlab.com/jowolf/authinator3">gitlab.com/jowolf/authinator3</a>.</p> <p>Authinator is a web login gateway for firewalls. Authenticate over HTTPS, click once, and your current IP address is granted passage through the firewall — everyone else sees a wall. It replaces both permanently-open management ports and brittle port-knocking schemes with something anyone can operate from a phone: a login page.</p> <p>Authinator has guarded our own production gateways in one form or another since 2007. Authinator3 is the modernized cross-platform release: a single self-contained Go binary per platform, driving OpenBSD <code>pf</code> tables (confined by <code>pledge</code>/<code>unveil</code>, no sudo, no shell calls) or Linux <code>nftables</code> sets (under a locked-down systemd service). Default-deny, explicit allow, with an audit view of every address currently cleared through.</p>