serious project

A 158-finding security audit, run with AI agents

Ran a security audit of the 5-machine fleet with AI agents: wrote a threat model and severity rubric first, had agents audit 9 areas against it, and ranked the 158 findings by root cause. The most urgent was a live private SSH key left in /tmp, where automatic snapshots had copied it.

see it →

The full write-up comes out of the interview: why, how, what broke, what it taught me, with pictures and links to the config.

← all projects

view source