Stop Hiring, Start Orchestrating: Running an AI Agent Company with Paperclip on Railway
Deploy a fully autonomous AI agent company on Railway with Paperclip. One-click setup, embedded or external Postgres, and your agents.
alphasec
Writing about security, privacy, cloud, AI/ML & more.
Latest posts
Stop Hiring, Start Orchestrating: Running an AI Agent Company with Paperclip on DigitalOcean
Deploy a fully autonomous AI agent company on DigitalOcean with Paperclip. No manual config, no fuss - just Docker, Caddy, and your agents.
From A2A Agent to Gemini Enterprise: A Practical Deployment Guide
A practical guide to Google A2A agents - covering setup, API key vs OAuth authentication, deployment to Cloud Run, and registration with Gemini Enterprise.
Self-Host Your Own Push Notification Server with ntfy
ntfy turns any HTTP request into a push notification - no API keys, no vendor lock-in. Here's how to deploy your own private instance on Railway in minutes.
LiteLLM and the Canary (Token) in the Coal Mine
A supply chain attack on LiteLLM swept up cloud credentials, SSH keys, and crypto wallets. Most victims never knew. Canary tokens exist for moments like this.
Securing Google Cloud: The MVSP Checklist Guide
Google Cloud MVSP defines 60 controls across 6 domains for a minimum security baseline. Use an open-source tool to learn and track your progress.
WebMCP: The Web Finally Speaks Agent
A brief on WebMCP, Google's new browser standard that gives AI agents a proper way to use the web — without screenshots, scraping, or guesswork.
Privileged Account Monitoring: 5 Hard Truths
From shadow admins to zero standing privilege, this guide cuts through the noise with 5 essential truths for securing your most critical identities and access paths.
Deploying Google ADK Agents to Vertex AI Agent Engine with Agent Identity
Step-by-step guide to deploying Google ADK agents on Vertex AI Agent Engine with Agent Identity—covering setup, IAM permissions, and when to use it in production.
Vibe Coding Linkwise - A Smart, Personal Link Aggregator
A hands-on vibe coding experiment: building Linkwise, a smart link aggregator with Firebase and Gemini AI—from local prototype to Cloud Run deployment.
From RSS to Email: Automating Google Cloud Release Notes Summaries
Turn Google Cloud's RSS feed into a clean daily email digest. A simple Python script using Gemini and Resend delivers only the announcements that matter.
Securing Tiny Tech: NIST Finalises Lightweight Cryptography Standard
NIST SP 800-232 is here. Explore the four Ascon-family algorithms, and how they bring strong cryptography to resource-constrained IoT devices.
Secure Federated Access to Google Cloud: Simulating Access with a Headless OIDC Client
A step-by-step demonstration of federated identity access to Google Cloud resources using a headless OIDC client and Workload Identity Federation.
Secure Federated Access to Google Cloud: Building a Mock OIDC Identity Provider
A step-by-step guide to building a mock OpenID Connect (OIDC) Identity Provider for workload identity federation with Google Cloud.
Google Cloud Run Security Best Practices
A brief on security best practices for Google Cloud Run serverless container platform.