Posts tagged: security
5 posts
All tagsHow I guardrail Claude Code for devops
Last week the Guardian ran a story about an AI coding agent that deleted a firm's production database in nine seconds. From the post-mortems, the only safeguards in place were project rules and the AI tool's built-in prompts. This post is about what I run on top of prompts when I let Claude Code drive devops on AWS: IAM, hooks, and a deterministic CLI.
Cookie is live
Cookie is a recipe app I built. It's now live at cookie.matthewdeaves.com for my own use, with a home hosting mode if you want to run your own copy. A short post about what it does and the work that went into making it ready for the 'sort of' open internet.
Three Levels of AI-Assisted Pentesting
A month spent pentesting two of my own projects with Claude. Three escalating levels: ad-hoc review, a curated suite wrapped in a harness, and HexStrike. Here is what worked, what did not, and how to set it up against your own repo.
My Virtual Pentest and DevOps Team
If you're building apps with AI and putting them live, you have to at least try to secure them. Here's how I did it with bash, open source tools, and Claude Code.
Pentesting with Rook
Anthropic added a companion to Claude Code called Buddy. Mine's an axolotl named Rook. I've been running a pentest suite against Cookie and its infrastructure over the past few evenings, and Rook kept catching things I was missing.