The worst people you know.

I don’t really have experience running anything like this so this is very much a comment front the peanut gallery but

Is that really the best way to do things? I’m not really sure what an agent offers here does it just look at logs and do actions? I would not really feel safe if that’s my service’s answer to security.

I could see it maybe as a really smart filter to block ips that are sending probing requests but I don’t really see that as a good reason to have an agent be sitting 24/7 looking at logs.

I think, it's about reviewing code for bugs.

"You got it. Corporate core data for Tessier-Ashpool S.A., and that ice is generated by their two friendly AI's. On par with anything in the military sector, looks to me. That's king hell ice, Case, black as the grave and slick as glass. Fry your brain soon as look at you. We get any closer now, it'll have tracers up our ass and out both ears, be tellin' the boys in the T-A boardroom the size of your shoes and how long your dick is."

Airgapping.

I'm hoping goverments take stock of what is online that needn't be.

Unikernels (e.g. MirageOS) were gaining traction right before containers swooped in and sucked the air out of the room. I think they could see renewed interest in the very near future.

OpenClaw agents continuously scanning your prod infrastructure and applying config tweaks and package updates autonomously on the fly in response to viral CVE numbers trending on X.

Formally verified code.

Pluggable network stack.

One day your job will be to play StarCraft but under the hood it will be your agents vs attacker's agents