Free checklist · The Closed Gap

The one-evening safety checklist

By Madina Umbetova · The Closed Gap · 23 October 2026

On 19 October 2026, Reuters and the security firm NorForge reported that one operator's AI agents made more than 1,200 break-in attempts and got into the websites of more than 100 companies. Reuters estimated the cost at about $50 per successful intrusion. At that price, small accounts may be worth trying too.

This list covers what to check, in a sensible order, in one evening.

Part 1 is for everyone. Part 2 is for anyone who runs a business on AI tools, websites and paid API keys.

Tick each step as you finish it. Your ticks stay in this browser only. Menus change, so if a screen looks different, search for the setting's name inside the app.

Part 1 · everyone · about 60 minutes

Your accounts and your cards

0 of 12 done

Part 2 · if you run a business on AI tools · about 60 minutes

Your business tools

An API key is a password your website or app uses to pay an AI or cloud service. Anyone who has a copy can spend from your account.

0 of 10 done

Last checked 23 October 2026.

Get my next checklist (optional)