After a week under active cyberattack, an engineer explains why software factories are now essential
danielrock · x · 2026-10-25
Engineer alanwells recounts a week spent defending a product against an automated cyberattack and shares lessons:
- Software factories will be required equipment — you can't keep up with highly automated adversaries without one.
- Nice-to-have became essential: months of prior investment in their software factory proved critical during the incident.
- Minimum setup: pre-provision a cloud coding server with read-only access to all logs and observability services. With that, a single prompt yields decent situational awareness, ongoing monitoring loops, and lets coding agents validate fixes against actual observed attack patterns.
A hands-on account of using AI coding agents for security incident response.
More from coding & agent
- One prompt let Claude debloat an Android TV over ADB and rebuild a minimal home screen — PrajwalTomar_ · 2026-10-25
- User points Claude at his Samsung TV, spends 11 hours building an ad-free Tizen launcher — PrajwalTomar_ · 2026-10-25
- Jev-Mem paper: a fast scorer makes agent memory building 6.6x faster on LoCoMo — rohanpaul_ai · 2026-10-25
- 10 open-source GitHub repos that put every AI model behind one API — victor_explore · 2026-10-25
- Viajante: Open-Source MCP Server Scrapes Real Flight and Hotel Prices, No API Keys — Fast_Entrance7839 · 2026-10-25
- HCI researcher bets AI can finally make Bayesian stats usable for small-N studies — IanArawjo · 2026-10-25