How suspicious traffic on my production sites led me to build a universal,...
How suspicious traffic on my production sites led me to build a universal, framework-agnostic abuse deterrence system that any AI coding agent can implement — and the verification tests that proved my first attempt failed.
Reading time: ~20 minutes
The Problem: Your Site Is Under Attack and You Don't Even Know It
I had two production web applications running on Vercel:
Vocab Top — an AI-powered vocabulary learning platform
AI agents are becoming increasingly capable of using tools. They can call APIs, access databases,...
I built this post and the project it describes, Crucible, for the All Things...
How I built the first open-source tool to catch the attacks that no guardrail sees coming We talk...
If you've tried to give an LLM agent web access, you've hit this wall: point it at the real web and a...
Practical security architecture for AI agents: prompt injection defense, tool-use hardening, and gateway patterns from GitHub's…
Four war stories from making yonyon.ai agent-readable: a GET endpoint that read as missing, WebMCP tools invisible to crawlers, a…
