Liam Randall

Securely Sandbox MCP with Cosmonic Control Instantly mitigate the risks of non-deterministic inputs and outputs from AI Workflows with SandboxMCP on Cosmonic Control.

For anyone curious about Securely Sandboxing Agentic Workflows - we have a webinar tomorrow to help you enable transformation, with guardrails you can trust:

learn.cosmonic.com/securely-san...

Securely Deploy MCP on Kubernetes | Cosmonic The Model Context Protocol (MCP) is an open protocol introduced by Anthropic that has emerged as the standard for integrations between Large Language Models (LLMs) and external tools and resources. Un...

8/ 🚀 Get started today and:
🔗 Build MCP Now: docs.cosmonic.com/securely-dep...
🔧 Deploy Cosmonic Control on any Kubernetes cluster: docs.cosmonic.com/install-cosm...

Securely Sandbox MCP with Cosmonic Control Instantly mitigate the risks of non-deterministic inputs and outputs from AI Workflows with SandboxMCP on Cosmonic Control.

7/ 👉 Want to see it live? @cosmonic webinar 10/29 12:00 EST: Instantly Sandbox MCP with WebAssembly:
learn.cosmonic.com/securely-san...

6/ ✅ The bottom line: As AI becomes agentic, the infrastructure must become🛡️secure by design — sandboxed, capability-driven, auditable, and deny-by-default. Without it, your LLMs become potential internal attackers.

Sandbox MCP with WebAssembly on Cosmonic Control Securely run MCP servers in WebAssembly sandboxes with Cosmonic — fast, portable, and Kubernetes-native AI infrastructure anywhere.

5/ 🧩 SandboxMCP.ai a free plugin for @CNCF @wasmCloud builds capability-driven MCP sandbox from any OpenAPI spec,automatically.
⚙️ Built with WebAssembly Components →
⚡ Fast Startup | 🔒 Secure by Default | 🧱 Strong Isolation | 🧩 Composable | 🚀 Portable Across Clouds

4/ 💀Containers don’t embrace the security principles that we know make things more 🛡️ Secure by Design — 🧩 Least Privilege | 🚫 Deny by Default | 🧱 Strong Isolation | 🕵️‍♂️ Minimized Attack Surface | 🧬 Immutability..

3/ ⚠️ Conventional container or VM-based deployments often assume the runtime is trusted; but MCP Servers continue to get popped because it’s hard to filter the shape of the I/O; agentic firewalls and gateways can only do so much. We need prevention at runtime.

#cybersecurity #pentesting #infosec #aipentesting | Snehal Antani An interesting attack path to study if you’re a defender… As an internal pentest, the customer initiated the NodeZero container on a single host with no credentials iniected NodeZero then: 1. Abuse...

2/ 🕵️‍♂️If you are following the AI Pen Testing game like @horizon3ai.bsky.social their CEO snehal breaks down terrifying CVE-less kill chains: www.linkedin.com/posts/snehal...

1/ 🧵 The non-deterministic inputs and outputs of LLMs drive agentic specific risk - documented in OWASP Top 10 for GenAI/LLM: LLM Prompt Injection, Data Exfiltration, and Lateral Movement. owasp.org/www-project-...

This is *exactly* why the CNCF and foundation membership is so important.

Wow, thank you so much! I put a lot of work into sharing the amazing @cncf.io @wasmcloud.com community - it really is building better together!

Building Software Extensions in Rust using WebAssembly Components - Alexandru Radovici YouTube video by Rust Nation UK

Great introductory talk about the power of WebAssembly Components from Alex Wyliodrin @rustnationuk.bsky.social

Strong recommend.

www.youtube.com/watch?v=VL1k...

Part one – Why? Geopolitics, security, trust and transparency Disclaimer: These are personal opinions. Here is why and how we can create a new technology stack, a tale about computer architecture and geopolitics in six parts.

Today's geo politics are driving the adoption of @cncf.io @wasmcloud.com to achieve data locality on a politically neutral hardware stack- from Anders Jensen at Mattilsynet/Norwegian Food Safety Authority:

Part 1: www.linkedin.com/pulse/libera...
Part 2: www.linkedin.com/pulse/part-t...

I think we have a problem here -

I mean, I immediately thought of…

somebody please tell @scottsigler.bsky.social, uh oh, they are back -

www.reddit.com/r/whatisit/c...

wasmCloud Community Meeting - 12 Feb 2025 YouTube video by wasmCloud

I can't make this in ONE MINUTE, but I'm going to be certain to watch @wasmcloud.com's community call demonstration of SPIRE and SPIFFE, which is critical for a lot of businesses if they're going to use #webassembly. www.youtube.com/watch?v=xV0B...

WASM for Kotlin, WASI P3 coming soon, component model improving WASM portability and sandboxing capabilities to the next level, Dev can focus on business logic while @wasmcloud.com handles the infra details

🎧 @bailey-hayes.bsky.social @liamrandall.bsky.social #cloudnatievfm -> youtu.be/w4zgpYcSH5k

Let’s get it in the books - I’d suggest we bring along @bailey-hayes.bsky.social

10 hot programming trends — and 10 going cold Hot or not? From AI models with API fantasies to memory-safe programming and compiled code, get the scoop on what’s in and what’s out in software development.

Great to see Wasm showing up in @peterwayner.bsky.social Programming Hot or Not; with @cncf.io @wasmcloud.com going incubating and adopters like Amex, Adobe, Orange, @cosmonic.com and more!

www.infoworld.com/article/2259...

Welcome to the party pal!

( Is it too late for a great Xmas quote reference??? )

American Express: Elevating Serverless Platforms with Wasm Components-Vamsi Sangavarapu & Ritesh Rai YouTube video by wasmCloud

Thank you so much for the shout out! If you are interested in major user stories, check out this talk from American Express:
www.youtube.com/watch?v=wRsB...

We have some other great talks linked right on wasmCloud.com

CFP for CNCF-hosted Co-located Events | LF Events CNCF-hosted co-located events are masterfully designed to foster discussion, collaboration, and knowledge-sharing in a vendor neutral space with participants just like you!

A @cncf.io cloud native reminder - CFP for CNCF-hosted co-located events closes today:

events.linuxfoundation.org/kubecon-clou...

Epically good list here - I just love Tejano Blue.

Oh - she's already here, I just missed her, give her a follow as well!
bsky.app/profile/rste...

I am going to try and get into the Wednesday workshop, it looks great!

DORA Report 2024 – A Look at Throughput and Stability Google recently released the 2024 Accelerate State of DevOps (DORA) report, and there were some holy shit moments in those 120 pages. Or–to phrase it more professionally–this year’s report has some…

The Google DORA 2024 report is out, and as always, the best analysis is over @redmonk.com via Rachel Stephens.

Big takeaway: Writing the code is NOT the bottleneck
(my take: maintaining it is):

redmonk.com/rstephens/20...

Is it Rust? Tokio-console has been helpful for us…

The ultimate KubeCon + CloudNativeCon North America 2024 recap: the CNCF ambassadors’ edition Ambassador post originally published on Medium by Dotan Horovits Want to catch up on KubeCon’s highlights and takeaways? Take it from the experts who know the cloud-native space inside out — the CNCF…

Looking for a good Thanksgiving read?
Catch up on the #KubeCon highlights on the @cncf.io blog, curated through my live-stream with fellow #CNCF Ambassadors and #cloudnative experts @vfarcic.bsky.social and @mkoerbi.bsky.social
You'll thank me later 😉
👉 www.cncf.io/blog/2024/11...
#kubeconNA

Elevating Serverless Platforms with Wasm Components-Vamsi Sangavarapu & Ritesh Rai, American Express YouTube video by wasmCloud

Curious about the power of @cncf.io @wasmcloud.com? I'll be AWS re:Invent next week. In the meantime, see what our users have to say:

www.youtube.com/watch?v=wRsB...