Josh Waldrep

Plumber by trade, open-source security by night. Building tools to keep AI agents honest. Creator of Pipelock.

USA Joined on Feb 8, 2026 https://pipelab.org

Pinned

Josh Waldrep

Feb 22

What is an agent firewall?

#security #ai #devops #opensource

6 min read

Josh Waldrep

Apr 15

What CSA, SANS, and OWASP Just Told Every CISO About Runtime Agent Security

#security #ai #opensource #owasp

4 min read

Want to connect with Josh Waldrep?

Create an account to connect with Josh Waldrep. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Josh Waldrep

Apr 13

Why Domain Allowlists Aren't Enough for AI Agent Security

#security #ai #devops #opensource

11 min read

Josh Waldrep

Apr 13

The State of MCP Security 2026: Incidents, Attack Patterns, and Defense Coverage

#security #ai #mcp #opensource

15 min read

Josh Waldrep

Apr 12

Why AI Guardrails Aren't Enough for Agent Security

#security #ai #guardrails #opensource

8 min read

Josh Waldrep

Apr 12

The AI Agent Security Acquisition Wave: What It Means for Buyers

#security #ai #startup #opensource

8 min read

Josh Waldrep

Apr 12

MCP Scanner Comparison: Cisco vs Snyk vs Pipelock

#security #ai #mcp #opensource

7 min read

Josh Waldrep

Apr 12

Best AI Agent Security Tools 2026: 15 Options Compared

#security #ai #opensource #devops

12 min read

Josh Waldrep

Apr 8

Claude Mythos Can Find Zero-Days. What Happens When Your Coding Agent Can Too?

#security #ai #opensource #devops

4 min read

Josh Waldrep

Apr 7

I published my benchmark scores. Your turn.

#security #ai #opensource #benchmark

4 min read

Josh Waldrep

Apr 5

LinkedIn Scanned 6,222 Browser Extensions. Your AI Agent's Browser Is Next.

#security #ai #browsers #opensource

5 min read

Josh Waldrep

Mar 25

What Happens When Your AI Agent Makes an HTTP Request

#security #ai #mcp #opensource

5 min read

Josh Waldrep

Mar 12

One request looks clean. Five requests leak your AWS key.

#security #ai #opensource #devops

5 min read

Josh Waldrep

Mar 8

We built a test corpus for AI agent egress security tools

#security #ai #opensource #mcp

3 min read

Josh Waldrep

Mar 5

Guardrails deleted, now what?

#security #ai #opensource #go

4 min read

Josh Waldrep

Mar 5

Your MCP server's tool descriptions are an attack surface

#security #ai #mcp #opensource

6 min read

Josh Waldrep

Mar 3

"CVE-2026-25253: WebSocket hijacking turns your AI agent into an attack tool"

#security #ai #websocket #mcp

5 min read

Josh Waldrep

Mar 3

Your AI agent leaks API keys through DNS queries

#security #ai #webdev #devops

4 min read

Josh Waldrep

Feb 26

Every protocol your agent speaks, scanned

#security #ai #mcp #websocket

4 min read

Josh Waldrep

Feb 14

6 months until the EU AI Act hits. Here's what runtime security means.

#security #ai #devops #opensource

7 min read

Josh Waldrep

Feb 13

The first AI agent espionage campaign, and what defenses actually matter

#devo #ai #opensource #security

6 min read

Josh Waldrep

Feb 11

The v0.2 roadmap for Pipelock. GitHub Actions integration, MCP input scanning, smart DLP, and the path to Pipelock Pro.

#devops #ai #opensource #security

3 min read

Josh Waldrep

Feb 10

Securing Claude Code with Pipelock

#devops #security #ai #opensource

4 min read

Josh Waldrep

Feb 9

283 ClawHub Skills Are Leaking Your Secrets. VirusTotal Can't Fix This.

#ai #security #devops #opensource

4 min read

Josh Waldrep

Feb 8

Lateral movement in multi-agent LLM systems

#devops #ai #security #opensource

5 min read

DEV Community

Josh Waldrep

Badges

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Skills/Languages

Currently learning

Currently hacking on

Available for

Pinned

What is an agent firewall?

What CSA, SANS, and OWASP Just Told Every CISO About Runtime Agent Security

Want to connect with Josh Waldrep?

Why Domain Allowlists Aren't Enough for AI Agent Security

The State of MCP Security 2026: Incidents, Attack Patterns, and Defense Coverage

Why AI Guardrails Aren't Enough for Agent Security

The AI Agent Security Acquisition Wave: What It Means for Buyers

MCP Scanner Comparison: Cisco vs Snyk vs Pipelock

Best AI Agent Security Tools 2026: 15 Options Compared

Claude Mythos Can Find Zero-Days. What Happens When Your Coding Agent Can Too?

I published my benchmark scores. Your turn.

LinkedIn Scanned 6,222 Browser Extensions. Your AI Agent's Browser Is Next.

What Happens When Your AI Agent Makes an HTTP Request

One request looks clean. Five requests leak your AWS key.

We built a test corpus for AI agent egress security tools

Guardrails deleted, now what?

Your MCP server's tool descriptions are an attack surface

"CVE-2026-25253: WebSocket hijacking turns your AI agent into an attack tool"

Your AI agent leaks API keys through DNS queries

Every protocol your agent speaks, scanned

6 months until the EU AI Act hits. Here's what runtime security means.

The first AI agent espionage campaign, and what defenses actually matter

The v0.2 roadmap for Pipelock. GitHub Actions integration, MCP input scanning, smart DLP, and the path to Pipelock Pro.

Securing Claude Code with Pipelock

283 ClawHub Skills Are Leaking Your Secrets. VirusTotal Can't Fix This.

Lateral movement in multi-agent LLM systems