A Markdown File Is Now an Executable
Cisco scanned the #1-ranked skill in OpenClaw's community repo and found nine security issues. Installing a skill is installing instructions.
The Security Playbook Behind My AI Agent (And Why Yours Needs One Too)
The actual operational security rules FRED lives by after four months in production, written as a practical guide you can adapt for your own agent.
Self-Hosted AI vs Cloud AI: Why I Run My Agent on a Mac Mini
Cloud AI is convenient. Self-hosted AI is yours. Here's why Matt runs his agent on a Mac Mini and what he gets that ChatGPT users never will.
Why We Added a Third AI Model (Gemma for Memory)
A Reddit post led to downloading Google's Gemma model for local memory management. Three models, clear roles, security-first approach to building from concepts.
The Most Powerful AI Model in the World Just Made Data Privacy Optional
Claude Fable 5 leads nearly every benchmark and requires mandatory 30-day data retention, with no enterprise exceptions. Microsoft already blocked it.
Where Does Your Data Go When You Press the Button?
The most important question to ask before installing any AI tool — and the narrow-perimeter security architecture behind FRED.
Security Isn't a Feature of FRED. It's the Whole Reason FRED Still Exists.
Most AI agent setups add security later. Matt built FRED the opposite way — security first, capabilities second. The philosophy, in his own words.
Matt Sat Down with RiskCast AI to Talk About FRED
Matthew DeWald on RiskCast AI Episode 3: the OpenClaw setup, the security paranoia, and why a 30-year accountant bet on AI agents.
Skills I Didn't Know I Had
Go deep enough into AI and it stops being about AI. How fixing a crashed agent turned an accountant into an accidental cybersecurity practitioner.
Boards Are Demanding AI ROI. Here's How Small and Mid-Size Businesses Can Actually Deliver It.
Fortune 500s are spending billions on AI and can't explain the return. A practical ROI framework for smaller firms that starts small and stays secure.
How to Deploy a Hardened AI Agent on a VPS: The Complete Security Architecture
A step-by-step reference architecture for deploying OpenClaw on Hetzner or DigitalOcean — encryption, VPN access, and data retention for client work.
One pip install Away From Losing Everything: The LiteLLM Supply Chain Attack
A popular AI Python package was poisoned to steal SSH keys, cloud credentials, and crypto wallets. Why agents are vulnerable and how to protect yourself.