What data do coding agents send, and where to?

Our report seeks to answer some of our questions for the most popular coding agents. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage. You can see the system prompts in the appendix.

chasersystems.com/blog/what-da...

Looking at us-east-1 this morning like... 👀

We're giving away 1,000 of our "It's always DNS" stickers and sticky-notes to decorate your laptops! Fill in the linked form below and we'll get it mailed directly to you, wherever you are in the world.

forms.office.com/e/14jHFdU9Kv

#aws #itsalwaysdns

Welcome to the team Lucas Pye! Lucas is joining us as an intern until mid-September and is researching what telemetry is gathered from developer machines by various popular agentic coding tools. When he's not intercepting #egress traffic you can find him climbing!

(screenshot of MitMed Cursor)

We're back at @fwdcloudsec.org again today, drop by our booth and try our mini-CTF to win a #YubiKey. Only 4 left, so be sure to come by early!

TLS ECH (formerly ESNI) is an emerging threat in traffic observability.

Learn about what it is, its background and original purpose, and how to disable it in controlled environments - especially Chrome and headless Chrome in the linked solution article:

chasersystems.com/blog/disabli...

Our founder @new23d.bsky.social's talk accepted for @fwdcloudsec.org at Denver in June on AWS IAM Roles Anywhere with ACME-enabled PKI certs distribution (using Let's Encrypt Staging)

Videos will be available on YouTube later and we'll post an update when they are.

We make it easier for you to enable an outbound network traffic firewall in full allowlist enforcement mode -- with discovery, dry run and micro-segmentation.

Available on AWS and GCP. Search for DiscrimiNAT Firewall in your cloud web console.

#egress #filtering

Wildcards are now GA from us for network egress on GCP.

Took time to develop since we didn't want the solution to be trivially bypassable with SNI Spoofing [1] or cause interruptions to your traffic intermittently with false positives (as is the case with known issue FWAAS-1501 of Palo Alto [2]).

Wildcards were a game-changer in GCP for this👇customer in reducing #egress management overhead.

✅Monitoring / Dry-Run mode
✅SNI spoofing proof tech
✅Public Suffix List / Effective TLD checks
✅Terraform

Deploy now or get a demo from engineering: chasersystems.com

👇

Comparison page with GCP NGFW is now up, scoped to egress filtering. Advantages DiscrimiNAT has:

🌟 Wildcard Support
💨 Low* DNS TTL handling
🔍 Monitoring, Discovery & Dry-Run mode
👮 Spoofing Prevention

chasersystems.com/discriminat/...

* no more dropped connections to 5s TTL AWS S3

DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on GCP.

Release notes: chasersystems.com/docs/discrim...

DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on AWS.

Release notes: chasersystems.com/docs/discrim...