One thing that's wild about building in cyber right now with AI tools is seeing people actually ship their exact vision.
I built nano as my take on the ideal SIEM, and now I'm talking to tons of solo founders doing the same for CTI, data onboarding, you name it.
Being able to meet with people really passionate about their ideas in the space and then getting integrations fired up is really awesome, love doing this stuff.
"Worth carrying forward: Four production incidents today, all mine, all the same shape"
This is opus 5. I haven't been super impressed with Opus 5 😅
Although they weren't real production impacting incidents, it continues to make stupid mistakes I just don't remember dealing with often in 4.x.
I've actually been seeing better success with Codex + Sol recently, I always have them review each others work anyways, but yeh, kind of down on Claude atm.
Can't agree more, herdr has made managing multiple agents so much better, I used to just have 10 tabs and split screens in item, herdr organizes them really well
If you aren't using herdr for your agents, you are missing out big time.
Absolutely destroys tmux, and the integrations on your coding agents with worktrees is a huge level up.
Check it out here: herdr.dev/
Also, ensure to check out the quick start, watch the 6 min video. It shows you how to setup the integration workflow, and the skills setup here:
youtube.com/watch?v=qnIu-Xu6…
6 minutes, and completely change your coding experience for the better. Guarantee it. Best shell I have ever used.
Dan Lussier retweeted
"Beyond the Vulnerability Apocalypse: Scaling Your Basics and Vulnerability Management" bit.ly/4fQ933A <- a bit high level, sure, but hopefully useful for our bosses and their bosses :-)
Excited to announce a new nano siem partnership with @tenzir_company who can chop up your data before landing it directly into Clickhouse (OCSF Schema) and so much more, take a look today!
nano.rs/partners/tenzir/
I had the chance to chat with the
@CloudSecPodcast folks to discuss my product, nano siem, as well as AI in security and other topics. It was a lot of fun, hope everyone checks it out! Thanks to Kyle and Timothy at Google.
youtu.be/iavB_TeLgvk?is=1Vog…
Working on implementing data rbac and I love claude's estimated times "10-12d" maybe 10-12 minutes 😅
so today I focused on the prevalence feature in nano, I noticed that it would OOM the search pod at times due to the nature of the queries on smaller instances. So, I had claude perform an adversarial review of it and it identified the key areas of struggle 1/?
and sure enough, codex landed a major one around filtering out results that should've been included.. so utilizing a single coding agent will get you really far, but where it matters (like a SIEM), you need to have additional external reviews (codex, or whatever you like) 6/?
I'm gonna start posting what it's like using coding agents to build a siem. I've had nano (nano.rs) live for about a month, I figure it could be useful for people who may want to ship tools.
To start: you don't need crazy insane coding harnesses etc 1/?
This translates into what I do with the backend as well, when building prevalence tracking I went through many permutations to figure out the right path for it, trade off of query time and valuable entries etc 13/?









