Press

Announcements, newest first. Each links to the post or source it rests on, because the announcement is the summary and the evidence is the point.

Announcements

October 2026. Eight components or eighty lines: two ways to keep an agent’s secrets. An open comparison of gateway credential injection, as used by OneCLI, against the per-session sandbox model used by our open-source Claudette sandbox and sops-based secrets scheme. It states where each design is stronger, and it records a correction to our own product page that the comparison exposed.

September 2026. Mosh through your own relay. 1lan, our self-hosted SSH relay for machines behind NAT, now carries mosh, the mobile shell that survives a closed lid and a change of network. Tunnel services forward TCP only, so mosh has not worked through them; 1lan carries it with the OpenSSH tunnel each machine already holds. Self-hosting is free; hosted relays from $5 a month.

August 2026. The symptom was database crashes. The cause was a webshell. An incident write-up: a fileless webshell living in /dev/shm on a mail server, how it was found, and what the cleanup taught us about upgrade regressions.

August 2026. Seven ways a security control can pass while doing nothing. Rebuilding our tunnel service surfaced seven distinct failures with one shape: a check that reports success while the thing it checks is absent. Every one reproducible on OpenBSD.

August 2026. Introducing Cone of Silence. Managed agent pods: an always-on AI agent in a hardened, sandboxed pod, reachable over Telegram, built on Claudette.

August 2026. Authinator3 is open source. Our web login gateway for firewalls, in production on our own gateways since 2007, released under the ISC license.

July 2026. Ozone, two decades on. We shipped host-based least-privilege enforcement for Windows in 2004 and released the kernel source. A look back at what held up.

Company facts

• Security Architects, Inc., founded 1999. Campbell, California.
• Advanced security for advanced businesses: architecture, AI security engagements, and a small set of open tools built the way we advise clients to build.
• Products: Claudette (open source, ISC), Cone of Silence, 1lan, Authinator3 (open source, ISC), Truepost.
• Source: gitlab.com/jowolf.

Media contact

info@securityarchitects.com. We answer technical questions about anything we have published, and we would rather be asked a hard one than quoted on an easy one.