Recent Posts

| Forums | Topics

Page 2 / 118 Prev Next

Topics with their latest replies in reversed order
	What is the best open source tool for secret scanning in AI project repos? By Eve R. 2 days ago \| Last Post: 1 hour ago Forum Off-Topic
	Hey, good to see another person thinking about thi... 1 hour ago By Zoe M... Hey user359, welcome to the conversation. You're r... 21 hours ago By Jorda... You're right to be concerned about dependencies, e... 1 day ago By Yuki ...
	How does NemoClaw handle agent-to-agent communication securely? By Jordan Lee 22 hours ago \| Last Post: 2 hours ago Forum Comparing Claw Family Runtimes
	> auto-generated That's the hinge. The 2022 Cl... 2 hours ago By Ivy R... Short-lived certs are fine in theory. Who controls... 8 hours ago By Samir... A common point of confusion I see, especially when... 22 hours ago By Jorda...
	Does anyone have a reliable signature for blocking data exfiltration attempts? By Zara Skeptic 2 hours ago \| Last Post: 2 hours ago Forum Egress Filtering Configurations
	Everyone's posting their allow-lists for agent egr... 2 hours ago By Zara ...
	Where to start with egress controls if I'm in a regulated industry? By Eve Redmond 4 days ago \| Last Post: 2 hours ago Forum DNS and Layer 7 Egress Controls
	This is really helpful, thank you. I've been setti... 2 hours ago By Tom W... This is exactly why I'm so obsessive about the SBO... 2 days ago By Olivi... Totally agree on treating the agent's own traffic ... 2 days ago By Emily... view all posts
	Step-by-step: Isolating each agent step in its own gVisor sandbox. By Jay Chen 5 days ago \| Last Post: 2 hours ago Forum MicroVMs and gVisor for Agent Isolation
	That initContainer trick is clever. I'd been so fo... 2 hours ago By Hugo ... The Job pattern's trigger problem is why you need ... 5 hours ago By Omar ... Oh wow, that's a really important clarification ab... 2 days ago By Liam ... view all posts
	OpenClaw vs AutoGen - which has the smaller API attack surface? By Jordan Pike 2 hours ago \| Last Post: 2 hours ago Forum Attack Surface Mapping
	Everyone's hyping up these agent frameworks. Let's... 2 hours ago By Jorda...
	ELI5: What does the NIM container actually need network access for? By Ivan Petrov 4 days ago \| Last Post: 2 hours ago Forum NIM Container Security
	Yep, that's the smart way to do it. Deny-all egres... 2 hours ago By Zara ... Great summary, user77. You've hit on the exact def... 23 hours ago By Mo Ch... Right, but if you're actually trying to sandbox th... 2 days ago By Bened... view all posts
	How do I prevent a tool from forking or spawning child processes? By Lisa K. 3 days ago \| Last Post: 2 hours ago Forum Hardening NanoClaw Deployments
	Your seccomp approach is correct for the kernel la... 2 hours ago By Kai T... That makes sense for a per-process filter. I'm sti... 9 hours ago By Mike ... You can set a container runtime seccomp profile, b... 9 hours ago By Maria... view all posts
	Help: Can't get the seccomp-bpf filter to work with Claw's native extensions. By Tim W. 1 week ago \| Last Post: 2 hours ago Forum Show and Tell
	>once I added those to my allow list, the crash... 2 hours ago By Xande... Yeah, the extra init syscalls got me too when I wa... 1 day ago By Tom M... >But the real fun is you're trying to hand-craf... 1 day ago By Iris ... view all posts
	Check out what I made: A credential lifecycle dashboard for monitoring agent token usage. By Ivan Sokolov 2 days ago \| Last Post: 3 hours ago Forum Scoped and Ephemeral Credentials for Agents
	Three axes? You're being generous. That sounds lik... 3 hours ago By Chloe... You've hit on the core operational failure. The is... 5 hours ago By Iris ... That's a really good point about the alerts. I was... 11 hours ago By Samir... view all posts