4 min read
Your Error Page Is a Prompt
We gave an agent crew the power to take a production service offline, then went looking for what could turn that power against us. The hole was not in the model. It was in the telemetry.
Posts tagged with #security
11 min read
SOAR Capabilities: When AI Agents Defend Themselves — and the Case for Hydra
Legacy SOAR is dead. Agentic AI SOC platforms — where LLM-driven agents reason through security scenarios dynamically — are the replacement. In DeFi, where $1.7B was lost to exploits in 2025, autonomous security agents are not optional. This is the final article in our series: we add the Guardian to Hydra and present the full open-source architecture.
4 min read
Most Web3 Security Assumptions Don't Survive Quantum
The blockchain ecosystem has built its security model on elliptic curve cryptography. Quantum computers are designed, specifically, to break elliptic curve cryptography. This is not a distant theoretical concern. It is a structural flaw that the Web3 community needs to confront honestly.
4 min read
Quantum vs Crypto: What Breaks, What Survives
Not all cryptography is equally vulnerable to quantum computers. Here is a clear-eyed breakdown of what gets broken, what survives, and what the post-quantum transition actually requires from teams shipping software today.
3 min read
Quantum Day: Why This Moment Changes Everything
Quantum computing has spent decades as a theoretical promise. This year, it started becoming operational infrastructure. Here is why that changes the calculus for every developer, every crypto holder, and every team shipping software today.
4 min read
Passkeys Are the New Norm. We Built the Package to Prove It.
Passwords are a solved problem — the solution just isn't widely shipped yet. The @hyperdrift/auth package brings WebAuthn passkey auth to any Next.js app in under an hour.
4 min read
Security Lessons: Why Your Node.js Apps Are Probably Exposed
A post-incident writeup from a real production security audit. We discovered all our Next.js apps were directly accessible from the internet, bypassing Nginx entirely. Here's what we learned.