https://patrik.re/tags/security/ Vulnerability writeups and security research by Patrik Grobshäuser, Security Researcher at Assetnote / Searchlight Cyber. en-GB Wed, 25 Feb 2026 00:00:00 +0000 https://patrik.re/gmail-api-credentials-the-paranoid-way/ https://patrik.re/gmail-api-credentials-the-paranoid-way/ Wed, 25 Feb 2026 00:00:00 +0000 Setting up Google Cloud OAuth credentials with minimal scopes for an AI email agent — because 'full access' is never the right default. patrik.reai-security https://patrik.re/guardrails-that-actually-work/ https://patrik.re/guardrails-that-actually-work/ Wed, 25 Feb 2026 00:00:00 +0000 A four-layer defense model for AI email agents — because no single safety measure is enough when your inbox is on the line. patrik.reai-security https://patrik.re/securing-the-dashboard-with-nginx-proxy-manager/ https://patrik.re/securing-the-dashboard-with-nginx-proxy-manager/ Wed, 18 Feb 2026 00:00:00 +0000 Putting the OpenClaw Control UI behind HTTPS with basic auth, WebSocket passthrough, and a proper Content Security Policy — all through Nginx Proxy Manager. patrik.reai-security