A $60/Month VM Running an LLM Agent Now Does Autonomous Security Work

Wallarm CEO Ivan Novikov claims a $60-per-month virtual machine running an LLM agent can now perform autonomous security work, including code scanning and patch analysis. He argues that dedicated VMs avoid the guardrails of tools like Claude Code, which may refuse security tasks or downgrade models, enabling unattended vulnerability hunting and validation.

Ivan Novikov, CEO of Wallarm, posted a claim on X yesterday that pulled 2.5k impressions in its first hours: it has never been this easy to run cybersecurity autonomously. His setup is a dedicated virtual machine — about $60 per month — with an LLM agent on it that never pushes back on security work. Public coding assistants come with guardrails. Novikov's dig is aimed at Claude Code: in his experience it either refuses security-related tasks outright or silently switches you to an older, less capable model when the work gets sensitive. For a security engineer, a tool that negotiates is a tool that fails at the worst moment. A dedicated VM removes the negotiation. The model inside has no policy layer to trip over, and nobody throttles it mid-scan. The setup is one prompt long. You tell the agent to install Sourcegraph https://sourcegraph.com/ for semantic code search or xerj.org https://xerj.org for patch and impact analysis. From that point it runs unattended: That last part is the actual shift. Security tooling has always been good at finding candidate bugs; the expensive part was a human verifying them. An agent that both hunts and validates compresses that loop. $60 a month is less than an hour of a junior security analyst's time in most markets. The agent works around the clock and doesn't context-switch. Novikov's summary: "I feel like I woke up." An agent with no pushback also has no brakes. It will happily scan code it has no permission to touch, and its findings still need human review before anyone acts on them. Autonomy changes who does the boring work — it doesn't remove accountability. Source: Ivan Novikov on X https://x.com/d0znpp/status/2091947596050825300