Implementation notes, threat analysis, and release history. For current supported controls and their prerequisites, use the security guides.
AI Agent Security ·
We took the detection knowledge from 1-SEC's 16 modules and built it into a GitLab Duo agent. SQL injection, prompt injection, secret scanning, OWASP compliance — all from Duo Chat. No install, no config, no context switching.
AI Agent Security ·
AI agents need third-party API access to be useful, but handing them raw OAuth tokens is a security nightmare. Here's how Auth0 Token Vault and 1-SEC's AI Containment module work together to enable secure, monitored, revocable token delegation for autonomous agents.
AI Agent Security ·
AI agents are under siege — 341 malicious skills on ClawHub, CVE-2026-25253, the Moltbook breach, $1.78M lost at Moonwell, and credential leaks across every major framework. Today we ship a SKILL.md that lets any AI agent install full-stack security on its own host in one command.
AI Agent Security ·
OpenClaw (formerly Clawdbot) went from zero to 180K GitHub stars in weeks — and brought CVE-2026-25253, 341 malicious skills, and 42,000 exposed instances with it. Here is how 1-SEC defends every attack vector.
AI Agent Security ·
The ClawHavoc campaign compromised 12% of ClawHub with malicious SKILL.md files. Learn the anatomy of these attacks and how to defend your OpenClaw deployment with 1-SEC.
AI Agent Security ·
42,000+ OpenClaw instances sit exposed on the internet. The new vps-agent enforcement preset tunes all 16 1-SEC modules for the specific threat model of a VPS-hosted AI agent — aggressive where it matters, relaxed where it doesn't.
AI Agent Security ·
OpenClaw agents can spawn sub-agents, execute shell commands, and access sensitive files. Learn how 1-SEC's AI Agent Containment module enforces least-privilege policies in real-time.
AI Agent Security ·
OpenClaw agents are exposed to prompt injection via WhatsApp, Telegram, and web chat. Learn how 1-SEC detects 65+ injection patterns without making a single LLM call.
AI Agent Security ·
CVE-2026-25253 enables one-click remote code execution in OpenClaw via token exfiltration. Learn how 1-SEC's multi-layered defense stops this exploit chain.
AI Agent Security ·
Manus AI agents are vulnerable to prompt injection that exposes VS Code servers to the internet. Learn how 1-SEC defends against the specific attack vectors targeting Manus deployments.
AI Agent Security ·
AI agents are the new insider threat. Learn the security architecture principles every organization needs when deploying OpenClaw, Manus, or any autonomous AI agent framework.
AI Agent Security ·
AI agents handle API keys, OAuth tokens, and passwords in their context windows. Learn how 1-SEC prevents credential leakage across OpenClaw, Manus, and other agentic frameworks.