Posts tagged: security

# security

5 posts

Case Study - Developer Tooling

How I guardrail Claude Code for devops

Last week the Guardian ran a story about an AI coding agent that deleted a firm's production database in nine seconds. From the post-mortems, the only safeguards in place were project rules and the AI tool's built-in prompts. This post is about what I run on top of prompts when I let Claude Code drive devops on AWS: IAM, hooks, and a deterministic CLI.

Read more
Case Study - Solo Development

Cookie is live

Cookie is a recipe app I built. It's now live at cookie.matthewdeaves.com for my own use, with a home hosting mode if you want to run your own copy. A short post about what it does and the work that went into making it ready for the 'sort of' open internet.

Read more
Case Study - Developer Tooling

Three Levels of AI-Assisted Pentesting

A month spent pentesting two of my own projects with Claude. Three escalating levels: ad-hoc review, a curated suite wrapped in a harness, and HexStrike. Here is what worked, what did not, and how to set it up against your own repo.

Read more
Case Study - Developer Tooling

My Virtual Pentest and DevOps Team

If you're building apps with AI and putting them live, you have to at least try to secure them. Here's how I did it with bash, open source tools, and Claude Code.

Read more
Case Study - Developer Tooling

Pentesting with Rook

Anthropic added a companion to Claude Code called Buddy. Mine's an axolotl named Rook. I've been running a pentest suite against Cookie and its infrastructure over the past few evenings, and Rook kept catching things I was missing.

Read more

View all tags