---
title: "Nick Craig-Wood"
section: "entities"
type: "entity"
created: "2026-08-30"
updated: "2026-08-30"
tags: ["person", "security", "workflow"]
canonical: "https://pyweb.dev/wiki/nick-craig-wood"
---
# Nick Craig-Wood

Nick Craig-Wood is the maintainer of rclone. In comments quoted by Simon Willison, he reported more than 40 security disclosures in one month, compared with about 20 across the project's first 10 years. [[source: simon-willison-just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-2026]](/wiki/raw/articles/simon-willison-just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-2026)

## Disclosure Volume Analysis

Craig-Wood said about 75% of those disclosures contained "a nugget of something which needs looking at" and described the resulting triage and repair workload as substantial. [[source: simon-willison-just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-2026]](/wiki/raw/articles/simon-willison-just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-2026)

## Related Concepts
- [agentic vulnerability lifecycle](/wiki/agentic-vulnerability-lifecycle) — the disclosure volume surge phenomenon
- [agent containment and blast radius](/wiki/agent-containment-and-blast-radius) — strategies for managing high-volume agent-generated security reports

---

## Agent Navigation

cluster: person (170 pages) | betweenness: 0

### References (outbound)
- [Agentic Vulnerability Lifecycle](https://pyweb.dev/wiki/agentic-vulnerability-lifecycle.md)
- [Agent Containment and Blast Radius](https://pyweb.dev/wiki/agent-containment-and-blast-radius.md)

### Referenced by (inbound)
- [Agentic Vulnerability Lifecycle](https://pyweb.dev/wiki/agentic-vulnerability-lifecycle.md)

### Evidence (verified primary sources)
- [simon-willison-just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-2026](https://pyweb.dev/wiki/raw/articles/simon-willison-just-a-rumour-of-a-bug-is-enough-to-find-a-security-exploit-2026.md) | origin: https://simonwillison.net/2026/Aug/28/just-a-rumour-of-a-bug/ | ingested: 2026-08-29 | sha256: 0a36fcdac6b365cb9080c8dddbc8c3763ba8e3ab01a9dc1356663fa6c9797eef

### Machine endpoints
- Knowledge graph: https://pyweb.dev/api/graph.json
- Graph analysis: https://pyweb.dev/api/graph-analysis.json
- Context index: https://pyweb.dev/llms.txt