Blog

Notes from the workspace

Product updates, engineering deep-dives, and how we think about giving agents your servers safely.

The API is 500ing and it's 3am. A field guide.

What actually breaks servers at night — disk, OOM, certs, connection pools — the commands that reveal each one, and the mistakes tired engineers make.

The Tryssh team · July 20, 2026

Your disk is at 89%. Here's how the pros find what's eating it.

The exact triage sequence for a full Linux disk — df vs du lies, deleted-but-open files, inode exhaustion, and the cleanups that are actually safe to run.

The Tryssh team · July 20, 2026

Should an AI agent ever touch your production servers?

The honest case for and against agents on infrastructure — what actually goes wrong, why prompt injection changes the math, and the architecture that makes it survivable.

The Tryssh team · July 20, 2026

From bare VPS to production in one sitting (without locking yourself out)

The canonical Ubuntu server setup — users, SSH keys, UFW, fail2ban, swap, Node, nginx, TLS — in the right order, with the classic footguns labeled.

The Tryssh team · July 19, 2026

How the approval gate keeps an agent from getting root

A look at the default-deny risk gate — the allowlist, the metacharacter check, and why the agent's channel is isolated from your terminal.

The Tryssh team · July 19, 2026

Who can SSH into your server right now? You probably don't know.

A practical SSH access audit — enumerating authorized_keys across every user, catching stale keys and NOPASSWD sudo, and hardening sshd without locking yourself out.

The Tryssh team · July 19, 2026

Introducing Tryssh — SSH made agentic, not reckless

A native macOS SSH workspace with an agentic copilot that runs commands, provisions servers, and audits security — while you approve every step.

The Tryssh team · July 18, 2026