EngSecLabs

After a round of improvements, I’ve tagged TrailTool 1.0.

Two problems come up every time you give an AI agent AWS access: the agent has exfiltratable credentials, and you have to guess what permissions it needs in the form of an IAM policy. iam-agent-proxy is an HTTPS proxy for AWS CLI/SDK calls that validates…

If you run local agents, you need to make tough choices between autonomy and safety.

Update: TrailTool 1.0 is out, with an identity-first session model and a lot more.

tl;dr — GraphGRC is available at github.com/engseclabs/graphgrc.

Archived (May 2026): GitHub shipped native Dependabot alert assignment to AI agents in April 2026, which covers the same gap this project was built to address.

Living in urban coastal California means you’re never far from an APT: an Advanced Persistent Trashpanda.

A common artifact in security programs is something called a data retention policy.

Your new hire’s first day looks something like this: they sit through two hours of generic security training about phishing and password hygiene, they click through a 47-page acceptable use policy that covers everything from clean desk requirements to data

Modern software companies use a lot of software services.