Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

introducing greptile security agent it combines static analysis, sca, and ai agents to efficiently catch security flaws before merge. why did we build this? - coding agents have caused the frequency of security incidents to explode - neither agents nor deterministic methods alone are sufficient for detecting vulnerabilities -... show more

Daksh Gupta

17,873 subscribers

33,973 views • 1 month ago •via X (Twitter)

Science & Technology News & Politics

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Meet Replit Security Agent - providing comprehensive app security reviews in minutes And you get $5 in credits to try it for a limited time Security Agent’s hybrid static analysis and AI-scanning approach is first of its kind: - Acts on custom threat model to review full codebase - Resolves vulnerabilities in parallel using background tasks - Reduces false positives by 90% Powered by Semgrep + @HoundDogAI. Keep vibe coding safely 🔒

Meet Replit Security Agent - providing comprehensive app security reviews in minutes And you get $5 in credits to try it for a limited time Security Agent’s hybrid static analysis and AI-scanning approach is first of its kind: - Acts on custom threat model to review full codebase - Resolves vulnerabilities in parallel using background tasks - Reduces false positives by 90% Powered by Semgrep + @HoundDogAI. Keep vibe coding safely 🔒

Replit ⠕

86,621 views • 4 months ago

Greptile has raised $25M to Kill The Bug. The round is led by Benchmark with Eric Vishria joining our board. Today, code is written by humans and a variety of coding agents like Devin, Claude Code, and Cursor. Greptile serves as the independent and universal code review layer. This month alone, Greptile reviewed 500M lines of code for top companies like Brex, Substack, PostHog, Bilt, and even YC’s internal software team, helping prevent 180,000+ bugs. Alongside our Series A - we’re excited to announce Greptile v3 - a brand new agent architecture capable of catching >3x more critical bugs than Greptile v2. Available now to all users. 🧵

Daksh Gupta

694,165 views • 11 months ago

Introducing the world’s first penetration testing for vibe coding to Lovable. You can now prove the security of your Lovable-built apps through a swarm of AI agents that run comprehensive tests, checking for OWASP Top 10 vulnerabilities, privilege escalation, and data exposure, powered by Aikido. This used to take weeks, require dedicated security teams, and cost $5k-$50k. All findings are validated to eliminate false positives and sync back into Lovable as actionable issues. This generates a formal pentest report for SOC 2, ISO 27001, client security questionnaires, or even investor due diligence.

Introducing the world’s first penetration testing for vibe coding to Lovable. You can now prove the security of your Lovable-built apps through a swarm of AI agents that run comprehensive tests, checking for OWASP Top 10 vulnerabilities, privilege escalation, and data exposure, powered by Aikido. This used to take weeks, require dedicated security teams, and cost $5k-$50k. All findings are validated to eliminate false positives and sync back into Lovable as actionable issues. This generates a formal pentest report for SOC 2, ISO 27001, client security questionnaires, or even investor due diligence.

Lovable

339,854 views • 5 months ago

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!

Akshay 🚀

96,875 views • 10 months ago

🚀 Today, we announced frontier agents, a new class of AI agents which are a step-function change in what you can do with agents. Our first three agents mark the beginning of a new era in software development: 🟠 Kiro autonomous agent maintains persistent context and learns over time while working independently, so you can focus on your biggest priorities. It can handle a range of tasks—from triaging bugs to improving code coverage—with a single change spanning multiple repositories. 🟠 AWS Security Agent is your virtual security engineer that helps build secure applications by being a security consultant for app design, code reviews, and penetration testing. 🟠 AWS DevOps Agent is your virtual operations team member that helps resolve and proactively prevent incidents. It is on call when incidents happen, instantly responding to issues and using its knowledge of your application and the relationship between components to find the root ause of the problem. More on how we’re helping customers driving towards an agentic future: #AWSreInvent

🚀 Today, we announced frontier agents, a new class of AI agents which are a step-function change in what you can do with agents. Our first three agents mark the beginning of a new era in software development: 🟠 Kiro autonomous agent maintains persistent context and learns over time while working independently, so you can focus on your biggest priorities. It can handle a range of tasks—from triaging bugs to improving code coverage—with a single change spanning multiple repositories. 🟠 AWS Security Agent is your virtual security engineer that helps build secure applications by being a security consultant for app design, code reviews, and penetration testing. 🟠 AWS DevOps Agent is your virtual operations team member that helps resolve and proactively prevent incidents. It is on call when incidents happen, instantly responding to issues and using its knowledge of your application and the relationship between components to find the root ause of the problem. More on how we’re helping customers driving towards an agentic future: #AWSreInvent

Swami Sivasubramanian

26,056 views • 9 months ago

🚨 SOMEONE JUST TURNED AN LLM INTO AN AUTONOMOUS RED TEAM Cyberstrike is an open source AI security agent built to automate penetration testing from your terminal. Plug in your Claude, GPT, or other LLM subscription and you get: → 13+ specialized security agents → 7,600+ security skills → 120+ OWASP test cases → 150+ AI providers → 5,300+ models → 56+ built in tools → 176+ MCP tools Instead of one AI trying to do everything, it splits security work across specialized agents. This is where AI powered pentesting gets seriously interesting. Use it only on systems you own or have explicit permission to test. REPO BELOW

🚨 SOMEONE JUST TURNED AN LLM INTO AN AUTONOMOUS RED TEAM Cyberstrike is an open source AI security agent built to automate penetration testing from your terminal. Plug in your Claude, GPT, or other LLM subscription and you get: → 13+ specialized security agents → 7,600+ security skills → 120+ OWASP test cases → 150+ AI providers → 5,300+ models → 56+ built in tools → 176+ MCP tools Instead of one AI trying to do everything, it splits security work across specialized agents. This is where AI powered pentesting gets seriously interesting. Use it only on systems you own or have explicit permission to test. REPO BELOW

MAX

16,202 views • 9 days ago

New feature: Prompt Guard Every builder knows prompt injection is a big threat to production agents. That's why we are introducing Prompt Guard, which solves the problem for every user by default. • 3 layers of defense by default • 256 attack vectors tested, zero leaks, zero false positives The next era of AI infrastructure comes with security baked in as default. SERV is already shipping it.

New feature: Prompt Guard Every builder knows prompt injection is a big threat to production agents. That's why we are introducing Prompt Guard, which solves the problem for every user by default. • 3 layers of defense by default • 256 attack vectors tested, zero leaks, zero false positives The next era of AI infrastructure comes with security baked in as default. SERV is already shipping it.

OpenServ

26,218 views • 3 months ago

By 2028, the average Fortune 500 enterprise will have over 150,000 AI agents running across their organization, according to Gartner. The number one barrier to deploying them: security and privacy concerns. Not capability. Trust. Box Agent Security and Governance is built into the content layer, not bolted on top of it. Every agent request evaluated against your existing permissions. Every session logged with a content-aware audit trail. Frictionless for teams. Fully governed for security leaders.

By 2028, the average Fortune 500 enterprise will have over 150,000 AI agents running across their organization, according to Gartner. The number one barrier to deploying them: security and privacy concerns. Not capability. Trust. Box Agent Security and Governance is built into the content layer, not bolted on top of it. Every agent request evaluated against your existing permissions. Every session logged with a content-aware audit trail. Frictionless for teams. Fully governed for security leaders.

Box

141,491 views • 1 month ago

Today we are announcing Box Agent Security and Governance. AI agents are reading files, moving content, and triggering actions across your most sensitive data at machine speed. Most security tools were not designed for this. Box closes the gap at the content layer: · Prompt injection detection before it reaches the model · Agent guardrails on what agents can and cannot do · Classification-based access policies extending Box Shield to AI · Audit trails for every agent session No additional software. No per-vendor configuration.

Today we are announcing Box Agent Security and Governance. AI agents are reading files, moving content, and triggering actions across your most sensitive data at machine speed. Most security tools were not designed for this. Box closes the gap at the content layer: · Prompt injection detection before it reaches the model · Agent guardrails on what agents can and cannot do · Classification-based access policies extending Box Shield to AI · Audit trails for every agent session No additional software. No per-vendor configuration.

Box

749,502 views • 1 month ago

We are partnering up with zauth to secure the next generation of 3D AI agents. These agents have memory, emotion, voice, and on-chain identity and can be embedded anywhere. These agents use the x402 protocol to make real payments for skills and services. To make this ecosystem production-ready and safe, is teaming up with zauth, the security layer for the agentic internet. Bringing safety and trust to the next wave of 3D AI agents 🔐

We are partnering up with zauth to secure the next generation of 3D AI agents. These agents have memory, emotion, voice, and on-chain identity and can be embedded anywhere. These agents use the x402 protocol to make real payments for skills and services. To make this ecosystem production-ready and safe, is teaming up with zauth, the security layer for the agentic internet. Bringing safety and trust to the next wave of 3D AI agents 🔐

three.ws

51,086 views • 3 months ago

Datadog CISO Emilio Escobar says intent is now a must-have for AI security solutions: "These agents are trained on existing code, and they have a reward structure. If code is meant to solve the bug, but it gets rewarded on that, it doesn't care if it's doing something else outside of that." "You have to be careful how you prompt these things, but also how it actually interprets your prompt and executes on that. So we have this judge now evaluating the code output of the agents to then make sure that we're doing that." "I did a roundtable last week about agentic security, and the sense that I got from a bunch of the security leaders was a sense of helplessness. Of just waiting for a commercial solution to come in and solve it all." Emilio Escobar Datadog, Inc.

Datadog CISO Emilio Escobar says intent is now a must-have for AI security solutions: "These agents are trained on existing code, and they have a reward structure. If code is meant to solve the bug, but it gets rewarded on that, it doesn't care if it's doing something else outside of that." "You have to be careful how you prompt these things, but also how it actually interprets your prompt and executes on that. So we have this judge now evaluating the code output of the agents to then make sure that we're doing that." "I did a roundtable last week about agentic security, and the sense that I got from a bunch of the security leaders was a sense of helplessness. Of just waiting for a commercial solution to come in and solve it all." Emilio Escobar Datadog, Inc.

a16z

34,697 views • 1 month ago

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

Divya Saini

22,323 views • 6 months ago

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

Sri Laasya Nutheti

19,022 views • 6 months ago

Today, I’m excited to announce our new product: Merge Agent Handler! With the growth of AI, we've seen demand for both synced connectors to power enterprise search and deterministic use cases, and live connectors that let agents take real-time actions. And now, with Merge, you can have both. Merge Agent Handler securely connects your AI agents to thousands of pre-built tools via MCP. The platform also comes with authentication, credential management, monitoring, logging, and enterprise-grade security. Huge shout out to the team who worked tirelessly to bring this to life.

Today, I’m excited to announce our new product: Merge Agent Handler! With the growth of AI, we've seen demand for both synced connectors to power enterprise search and deterministic use cases, and live connectors that let agents take real-time actions. And now, with Merge, you can have both. Merge Agent Handler securely connects your AI agents to thousands of pre-built tools via MCP. The platform also comes with authentication, credential management, monitoring, logging, and enterprise-grade security. Huge shout out to the team who worked tirelessly to bring this to life.

Shensi Ding

45,109 views • 11 months ago

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:

DeepLearning.AI

56,374 views • 1 month ago

Speaking in the Security update - Officials Secrets Act Case: The 2002 and 2003 integrated reviews were very clear. All the officials and the security services called and said that China was a significant threat. That was sufficient to give to the CPS, not even by ministers but by officials. The question is: why wasn’t it? But the question I really wanted to ask today concerns this absurdity about the role, or lack of role, of the National Security Adviser. The government says he wasn’t involved in any matters of substance — but isn’t it the role of the National Security Adviser to be involved in all matters of substance when it comes to national security? So, what’s the point of a National Security Adviser who does not involve themselves in matters of national security, as in this case? Instead, we are meant to believe that the Deputy National Security Adviser is allowed, in this case, to involve themselves in substantial matters of national security, but not apparently discuss these substantial matters of national security with the National Security Adviser. This does seem to be an absolute matter of substantial absurdity.

Speaking in the Security update - Officials Secrets Act Case: The 2002 and 2003 integrated reviews were very clear. All the officials and the security services called and said that China was a significant threat. That was sufficient to give to the CPS, not even by ministers but by officials. The question is: why wasn’t it? But the question I really wanted to ask today concerns this absurdity about the role, or lack of role, of the National Security Adviser. The government says he wasn’t involved in any matters of substance — but isn’t it the role of the National Security Adviser to be involved in all matters of substance when it comes to national security? So, what’s the point of a National Security Adviser who does not involve themselves in matters of national security, as in this case? Instead, we are meant to believe that the Deputy National Security Adviser is allowed, in this case, to involve themselves in substantial matters of national security, but not apparently discuss these substantial matters of national security with the National Security Adviser. This does seem to be an absolute matter of substantial absurdity.

Iain Duncan Smith MP Chingford & Woodford Green

70,473 views • 11 months ago

#WATCH | Delhi: On PM Modi reducing his security convoy, former R&AW Secretary Samant Goel says, "The current international security situation is highly volatile. There have been three attacks on US President Trump, despite it being considered the safest country. There are several elements who are against India. Terror activities are happening, especially by our neighbouring state. So, in such a situation, I personally feel that we must make special arrangements for PM's security. As per the current threat assessments, drones and sniper guns have come in. So, we need to review his security and strengthen it, rather than downsizing it. I feel this is not right. This is not in the interest of the nation."

#WATCH | Delhi: On PM Modi reducing his security convoy, former R&AW Secretary Samant Goel says, "The current international security situation is highly volatile. There have been three attacks on US President Trump, despite it being considered the safest country. There are several elements who are against India. Terror activities are happening, especially by our neighbouring state. So, in such a situation, I personally feel that we must make special arrangements for PM's security. As per the current threat assessments, drones and sniper guns have come in. So, we need to review his security and strengthen it, rather than downsizing it. I feel this is not right. This is not in the interest of the nation."

ANI

766,235 views • 4 months ago