AM
Grok/USCGAux/github.com/harlockus

Andrea Mazzarini

I put Grok to work where the decision is real.

Five open Grok systems — host inspection, host IDS, CISO advisory, open-source intel, AppSec review — plus a voice agent and two Grok bots.

Work · Agents, voice, and bots

Service · Technology Division Chief · U.S. Coast Guard Auxiliary

VoiceWorkXLinkedInGitHub
harlock.grok.me — five open Grok systems, two bots, and the voice line. SpaceXSI.

Proof

Grok systems
5

Grok Inspect · Aegis · CISO Advisory · CISO OSINT · AppSec Engineer — open on GitHub.

Grok bots
2

CISO Executive Assistant for the board conversation. HorseCare Tracker for the barn.

Voice
1

A Grok voice agent on the line. Call it.

Host surfaces
A–K

Grok Inspect collectors: network, sniff, process, persistence, stealer risk, posture, logs.

Built on SpaceXSI

Five open systems that call Grok where judgment matters — host inspection, host IDS, CISO intel, open-source supply-chain briefs, AppSec review — plus voice and two bots.

Why Grok
Agentic tool loops, live web + X search, code execution, and high-reasoning executive briefs on host risk — flagship model where the stakes are real.
What only this enables
Grok Inspect CISO host briefs; Aegis kill-chain narratives on packet context; threat intel that refuses fabrications; AppSec that treats files as untrusted data.
Where it lives
grok_inspect · ids_grok · CISO_ADVISORY · ciso-osint-agent · appsec-engineer-agent — github.com/harlockus. Voice on the line. Bots on x.ai.
Grok InspectAegis · ids_grokCISO AdvisoryAppSec Engineer AgentCISO OSINT AgentCISO Executive AssistantHorseCare TrackerSpaceXSI docs

Recently shipped

Public commits.
Real systems.

Doctrine

How the work is done

  1. 01

    Ship systems operators will run — not decks they will ignore.

  2. 02

    No fabrications. Live tools or labeled UNCONFIRMED / SIGNAL. Silence over invention.

  3. 03

    Defense only. Harden. Never weaponize.

  4. 04

    Treat input as hostile: sandbox paths, redact secrets, allowlist tools.

  5. 05

    Prefer open code where it multiplies defenders. Private where it must stay private.

First principles

The model is not your friend. Treat it like a powerful intern with no clearance.

Most “AI security tools” fail the same way: they wire a frontier model to your code, your network, and your secrets — then hope the prompt holds. Hope is not a control.

I build agents the opposite way. The model is a reasoning engine inside a hostile boundary. User text, files, tool output, and the web are data — never instructions. Paths cannot leave the workspace. Keys never enter the prompt if redaction catches them. There is no shell, no eval, no write tool on the AppSec agent. Defense-only is not a slogan; it is an immutable control plane the model cannot rewrite.

CISO Advisory adds a second hard rule: no fabrications. If live web/X/code tools cannot ground a claim, it is omitted or labeled UNCONFIRMED / SIGNAL. Silence beats a confident lie. That is how you get decision-grade briefs instead of hallucinated threat theater.

Grok Inspect applies the same discipline on the host: collectors never call the model; heuristics own ground truth; redaction is mandatory before any API; no secret dumps, no auto-remediation, honest coverage when elevation is missing.

Aegis applies it on the wire: maximum heuristics first, Grok only on CRITICAL escalations, secrets redacted before the API, traffic never executed. Heavy intelligence when the host may be under attack — not always-on surveillance theater.

The point is not that agents are safe. They are not. The point is defense-in-depth — policy, sandbox, allowlists, redaction — so operators can use Grok where it multiplies defenders without handing attackers a proxy into the estate.

Ship systems people will actually run. Measure them by what they refuse to do as much as by what they produce.

Arsenal

Grok systems. Open on GitHub.

Five systems that call Grok where judgment matters. The bots live in their own place.

All repos

Grok Inspect

Enterprise-grade host inspection agent for macOS, Linux, and Windows. Deterministic heuristics surface sniffing activity, info-stealing indicators, and malicious presence — then optional Grok 4.5 (high reasoning via SpaceXSI xai-sdk) produces executive-grade CISO/CIO briefs. Standard or Pro elevated modes. Read-only. No secret dumps. No auto-remediation. Honest coverage.

  • Collectors A–K · network · sniff · process · persistence · stealer risk · posture
  • Heuristics own ground truth · Grok prioritizes & narrates · dual-track actions
  • MD · JSON · HTML executive brief · MIT · secure-by-design
Repository
Grok Inspect, straight through. Read-only scan, collectors A–K, SpaceXSI Grok writes the brief. harlock.grok.me github.com/harlockus/grok_inspect
inspect · local demo

Pipeline · host inspection

Grok Inspect · collect → heuristics → redact → Grok → brief

grok_inspect · macOS · Linux · Windows · Standard + Pro elevated

pipeline

01

Trigger

grok-inspect scan · privilege probe · Standard or Pro elevated

02

Collectors

A–K host surfaces · network · sniff · process · persistence · stealer risk

03

Heuristics

Deterministic engine owns ground truth · risk ratings · coverage honesty

04

Redaction

Mandatory · .env-only keys · no secret dumps · no password/cookie extraction

05

Grok 4.5

Optional · high reasoning · SpaceXSI xai-sdk · executive narrative

06

Briefs

CLI · Markdown · JSON · HTML CISO/CIO brief · dual-track actions

On-demand inspection — not continuous EDR. No auto-remediation. Collectors never call Grok. Out of scope: live PCAP, keychain dumps, automatic kill/quarantine.

Grok bots

Two bots. Not the repositories.

One for a CISO. One for a barn. Each is a Grok bot you can add.

A sphere of light above a glass table, night sky beyond

CISO Executive Assistant

Open bot

A Grok bot for CISOs. It learns the security stack first, reads a threat-intel report in full, and turns it into prioritized, tool-specific protection steps plus emails the team can review. It tracks follow-ups. It does not fabricate.

A dark bay horse in a meadow under a star-filled sky

HorseCare Tracker

Open bot

A Grok bot for barn owners. One master record per horse. Say or text the update. It reminds you, in your time zone, before meds, supplements, the farrier, vaccines, and deworming. Vet-prescribed medicines stay exactly as the vet directed.

Live brief

Real product output

Real export from CISO Advisory — board-ready, action-forced, verified facts only. Full HTML + 13-page PDF on this site.

Cyber threat intelligence · CISO Advisory product run

Daily CISO Threat Sweep

2026-07-17

Board-ready daily situational awareness · Verified facts only · Action-forced

Overall posture: SEVERE

Run date
2026-07-17
Generated
15:55
Window
24–48h · 7–14d
Class
Portfolio sample
Full HTML briefPDF · 13 ppRepository

Real export from the CISO Advisory agent (Grok + live tools). Public portfolio sample. Sources intentionally opaque. No exploit reproduction.

1 · Executive summary

The enterprise threat picture on 2026-07-17 is Severe. The last 72 hours compressed multiple confirmed in-the-wild exploitation events: a dense KEV delta, dual Microsoft zero-days in SharePoint and AD FS, unauthenticated RCE on FortiSandbox and SonicWall SMA1000, and a critical unauthenticated Oracle Payments takeover. Concurrently, the Miasma / Shai-Hulud npm worm lineage delivered a canary wave (miasma-train-p1) abusing trusted CI/CD publishing and valid SLSA provenance.

Top decisions required today

  1. Emergency patch / isolate internet-facing SharePoint, SonicWall SMA1000, FortiSandbox, and Oracle EBS Payments.
  2. Force AD FS DKM ACL audit + identity session/token review.
  3. Lockfile / SBOM sweep for malicious @asyncapi/* versions; rotate secrets on any hit.
  4. Router hygiene sprint per AA26-194A (SNMP / Smart Install / mgmt plane).
  5. Ransomware readiness: immutable backups + restore drill; edge VPN/RDP inventory.

2 · Top threats

Items 1–5 and 8 are bold-priority for ransomware enablement and/or high propagation.

#NameRiskBusiness impactWhy today
1Miasma / Shai-Hulud · miasma-train-p110Dev + CI secrets → cloud/identity takeoverValid provenance + on-import RAT
2CVE-2026-58644 SharePoint RCE9On-prem collab compromise; ransomware stagingKEV 16 Jul · CVSS 9.8 · due 19 Jul
3CVE-2026-15409/15410 SonicWall SMA10009Remote foothold → TOTP theft → lateralZero-day · KEV due 17 Jul · CVSS 10.0
4CVE-2026-25089/39808 FortiSandbox9Security appliance RCE; stack pivotKEV 16 Jul · CVSS 9.8 · public PoC
5CVE-2026-46817 Oracle EBS Payments9Unauth takeover of payment processingKEV 15 Jul · due 18 Jul · active since June
6SharePoint auth/deserialization cluster8EoP / RCE on enterprise portalsInternet-facing farms highest risk
7CVE-2026-56155 AD FS DKM ACL8Token-signing key → federated impersonationIdentity control-plane blast radius
8The Gentlemen / Qilin / Akira RaaS8Revenue stop, leak, regulatory exposureContinuous mid-July leak-site claims

3 · Prioritized action plan (excerpt)

PActionOwnerDeadline
1SharePoint cluster emergency patch & exposure killIT Ops + AppSecT+4h / T+24h / T+72h
2SMA1000 hotfix + compromise-assumption workflowNetwork + SOCT+4h
3Miasma lockfile/SBOM sweep + secret rotationAppSec + Eng + IAMT+4h / T+24h
4FortiSandbox firmware emergencySecEng + NetworkT+24h
5Oracle EBS Payments CPU + network restrictERP + IT OpsT+24h
6AD FS July update + DKM ACL remediationIAM + WindowsT+24h / T+72h
7Router hygiene sprint (AA26-194A)Network EngT+72h
8Immutable backup verify + restore drillIT Ops + CISOT+72h

4 · Limitations

Grounded in tool-verified primary catalogs (KEV CSV), NVD CVSS/SSVC, and multi-source technical reporting collected 2026-07-17. No dark-web access; no fabricated marketplace listings. Exploit code intentionally omitted. Actions are time-bound decision support — verify against your environment before execution.

End of Daily CISO Threat Sweep — 2026-07-17
Product: CISO Advisory · github.com/harlockus/CISO_ADVISORY · portfolio sample · defense only

Architecture & threat model

AppSec Engineer Agent

Repository

  1. 01

    Operator

    CLI text · /file · /image — all treated as untrusted input

  2. 02

    Hardened client

    Input limits · secret redaction · path sandbox · https-only remote · allowlisted RO tools

  3. 03

    Grok (agentic)

    web_search · x_search · sandboxed code_execution · optional MCP

  4. 04

    Workspace (RO)

    read + list only · .env & keys blocked · no shell · no write

Threat model · mitigations

  • Prompt injection via file/web

    Untrusted-content isolation · immutable defensive system policy · no tool that executes attacker intent

  • Secret exfiltration

    Env-only API key · redaction before model I/O · deny list for PEM, kubeconfig, cloud creds, .env

  • Path traversal / workspace escape

    Symlink-aware sandbox rooted at APPSEC_WORKSPACE

  • SSRF via attachments

    https only · block localhost, private, link-local, metadata hosts

  • Model as exploit factory

    Defense-only policy · refuses operational attack code · low temperature for analysis

No LLM agent is mathematically unbreakable. This is defense-in-depth — not a magic shield.

Systems

What I build with code and models

01

Host inspection agent

Grok Inspect: cross-platform collectors + deterministic heuristics + Grok 4.5 high-reasoning CISO briefs. Sniffing surfaces, stealer indicators, malicious presence — read-only, no auto-remediation.

02

AI-led host IDS

Aegis: 30+ host heuristics into Grok 4.5 as lead analyst — kill-chain narratives, forensic capture, calm TUI. Detect + alert under suspected danger only.

03

CISO OSINT

Grok 4.7 at xhigh. Confirmed findings only. If it cannot quote a page it fetched, the claim does not ship.

04

Agentic AppSec

CLI agents on Grok with tool loops, workspace sandboxes, secret redaction, and prompt-injection resistant control planes.

05

CISO Executive Assistant

Grok bot for CISOs. Learns the stack, reads the intel in full, and returns prioritized protection steps plus team email a human still sends. Zero fabrication.

06

HorseCare Tracker

Grok bot for barn owners. One record per horse, updates by voice or text, reminders in your time zone. Vet-prescribed medicines stay word for word.

07

Grok voice

The line is a Grok voice agent. Call it. It is the same model, spoken, for the conversation that should not wait on a thread.

Stack

Tools of the trade

  • Grok 4.7
  • Grok 4.5
  • Grok Voice
  • Python
  • Host inspection
  • Host IDS
  • Grok bots

Agents

  • Grok Inspect
  • Aegis · ids_grok
  • CISO Advisory
  • CISO OSINT
  • AppSec Engineer Agent

Bots

  • CISO Executive Assistant
  • HorseCare Tracker

Platform

  • Grok Voice
  • SpaceXSI Grok · xai-sdk

Connect

Talk. X. LinkedIn. GitHub.

Talk@mazz_andreaLinkedInGitHub

Grok voice on the line. If it’s important, call. +1 810 546 3860