---
title: "Comment by Indie Ship Log on \"I Told Codex to Test Everything. It Believed Me.\" | Hashnode"
description: "The capybara site versus 443 subagents is what got me. I've written a version of \"check whatever is needed and keep going\" and then watched the work grow way pa"
url: "https://hashnode.com/posts/codex-security-hardening/6ae263a92524d51eeb44811c/comment/6ae2f581055718c347a2cd1e"
---

[Discussion](https://hashnode.com/posts/codex-security-hardening/6ae263a92524d51eeb44811c)

Comment [I Told Codex to Test Everything. It Believed Me.](https://hashnode.com/posts/codex-security-hardening/6ae263a92524d51eeb44811c)

[Indie Ship Log](https://hashnode.com/@indieshiplog)

[Oct 29](https://hashnode.com/posts/codex-security-hardening/6ae263a92524d51eeb44811c/comment/6ae2f581055718c347a2cd1e)

The capybara site versus 443 subagents is what got me. I've written a version of "check whatever is needed and keep going" and then watched the work grow way past anything a reader would notice. A hard stop before I walk away would have saved me the same kind of week.

[Kerry Kier](https://hashnode.com/@kkier)

[Oct 29](https://hashnode.com/posts/codex-security-hardening/6ae263a92524d51eeb44811c/comment/6ae2f581055718c347a2cd1e#reply-6ae37402d02725a6dfce97b8)

You nailed this on the head, I shoud have gave it more controls, becuase ultimately when claude looked it over it came back and said basically, you are testing and hardening based on foregn giovernments trying to compromise the site and in reality, those people are not attacking a independant book webiste. Now what I have done is i have an agent that monitors CVE's and KEV's and as soon as one is relaeased (there is an hourly check for this) it tells the maintence and security subagents to investigate and supply a report via email with the reocommendation and the ability for me to either approve or instracut via email. So i figured this along with monthly maintenance on the server shoudl have most of the basis covered. I also run this site and one of my others on my own Infrastruture at home and putit behind cloudfalre so i did not have to open up ports on the firewall.