Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Cloudflare open-sourced the security audit skill that helped inspire its internal vulnerability discovery system. 🔐 Install it in Claude Code, point it at a codebase you own, and ask it to run a security audit. Here's what makes it different: 🔍 Maps the codebase and its trust boundaries 🤖...

28,000 görüntüleme • 16 gün önce •via TikTok

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

It is becoming f*cking dangerous: AI agents mapped out a full codebase based on just one question Jev creator Diogo Almeida put together a playbook to sync up 80 agents over 540,000 lines of code, creating a visual flow of the system architecture Simply ask: "What takes place when a user uploads a file?" and follow the full circuit from the frontend and API down to background jobs, databases, and tests Every element on the layout connects straight to the underlying codebase. Claude Code agents map out the underlying code. Jev directs tasks to the right workers and strips away irrelevant data for each investigation phase: > which specific component handles this functionality > which files need to be analyzed > is another worker currently handling this route > does this part require a deeper look The final blueprint charted 170 user flows and tied them to 2,400 tests. On top of that, 26 open points remained clearly flagged for manual review How to use it: Hand over the playbook along with your repo to Claude Code, then submit this prompt: Generate a searchable blueprint of this repository Run an audit on entry points, services, background tasks, and databases. Assign separate modules to different agents Map every user scenario through the codebase. Link file locations and key references to each step Rely on Jev to manage the workflow and filter out context noise. Set up dedicated agents to double-check proposed links against the raw code Connect existing tests to their respective flows. Flag assumed logic and incomplete paths, then build a UI to navigate the map A good approach is to run a trial on a single user path first before scaling it up to the full repository This way, any incoming developer can review a feature, trace its dependencies, and locate test cases prior to making a single change Bookmark this

Bober_smart

14,890 görüntüleme • 28 gün önce

A single tweet just vaporized BILLIONS from cybersecurity stocks. CrowdStrike down 8%. Cloudflare down 8.1%. Okta down 9.2%. SailPoint down 9.4%. The Global X Cybersecurity ETF just hit its lowest level since November 2023. What happened? Anthropic dropped Claude Code Security. It scans your entire codebase for vulnerabilities and suggests patches. Sounds boring. Until you read what it actually did: In testing, Claude found over 500 HIGH-SEVERITY BUGS in production open-source codebases. Bugs that had been sitting there for DECADES. Despite years of expert review. Despite fuzzing campaigns. Despite penetration testing. Despite million-dollar security audits. Nobody found them. An AI did. In hours. Here's the terrifying part: Traditional security tools work by pattern matching. They look for known vulnerabilities in a database. Claude doesn't do that. It READS code the way a human security researcher would. Traces data flows. Understands how components interact. Catches logic flaws that rule-based tools can't see. And it just outperformed every cybersecurity tool on the market. Combined. Wall Street figured this out fast. If an AI can find what your $500k/year security team missed... Why do you need the team? If an AI catches bugs that CrowdStrike, Okta, and Cloudflare couldn't... Why are you paying those subscriptions? Barclays came out saying the selloff was "illogical" and Claude "doesn't compete" with these companies. But here's what Barclays missed: It's not about what Claude competes with TODAY. It's about what it replaces TOMORROW. The SaaS apocalypse hit legal software 3 weeks ago. Thomson Reuters dropped 18% in one day. $285 billion wiped from software stocks. Now it's cybersecurity's turn. The pattern is obvious: Every industry that sells "expertise as a service" is about to get repriced. Legal research? Done. Code vulnerability scanning? Done. Compliance checking? Coming soon. Financial analysis? On deck. Companies that spent 20 years building "moats" around specialized knowledge are watching AI swim right over them. CrowdStrike is worth $95 billion. They have 30,000 customers. Claude just found 500 bugs their tools missed. Do the math. The smart money already sees what's happening. The iShares Expanded Tech-Software Sector ETF is down 23% YTD. Heading for its largest quarterly decline since the 2008 financial crisis. Not because software is dying... But because software companies that charge per-seat subscriptions for AI-replicable work are dying. Anthropic just proved that a general-purpose AI can outperform DECADES of specialized cybersecurity infrastructure. In a single product release. While still in "limited research preview." It's not even fully launched yet. What happens when it scales? We're about to find out.

Ricardo

110,899 görüntüleme • 8 ay önce