Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

introducing greptile security agent it combines static analysis, sca, and ai agents to efficiently catch security flaws before merge. why did we build this? - coding agents have caused the frequency of security incidents to explode - neither agents nor deterministic methods alone are sufficient for detecting vulnerabilities -... show more

Daksh Gupta

17,570 subscribers

29,160 views • 1 day ago •via X (Twitter)

Science & Technology News & Politics

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Meet Replit Security Agent - providing comprehensive app security reviews in minutes And you get $5 in credits to try it for a limited time Security Agent’s hybrid static analysis and AI-scanning approach is first of its kind: - Acts on custom threat model to review full codebase - Resolves vulnerabilities in parallel using background tasks - Reduces false positives by 90% Powered by Semgrep + @HoundDogAI. Keep vibe coding safely 🔒

Meet Replit Security Agent - providing comprehensive app security reviews in minutes And you get $5 in credits to try it for a limited time Security Agent’s hybrid static analysis and AI-scanning approach is first of its kind: - Acts on custom threat model to review full codebase - Resolves vulnerabilities in parallel using background tasks - Reduces false positives by 90% Powered by Semgrep + @HoundDogAI. Keep vibe coding safely 🔒

Replit ⠕

86,083 views • 3 months ago

Greptile has raised $25M to Kill The Bug. The round is led by Benchmark with Eric Vishria joining our board. Today, code is written by humans and a variety of coding agents like Devin, Claude Code, and Cursor. Greptile serves as the independent and universal code review layer. This month alone, Greptile reviewed 500M lines of code for top companies like Brex, Substack, PostHog, Bilt, and even YC’s internal software team, helping prevent 180,000+ bugs. Alongside our Series A - we’re excited to announce Greptile v3 - a brand new agent architecture capable of catching >3x more critical bugs than Greptile v2. Available now to all users. 🧵

Daksh Gupta

688,471 views • 10 months ago

Introducing the world’s first penetration testing for vibe coding to Lovable. You can now prove the security of your Lovable-built apps through a swarm of AI agents that run comprehensive tests, checking for OWASP Top 10 vulnerabilities, privilege escalation, and data exposure, powered by Aikido. This used to take weeks, require dedicated security teams, and cost $5k-$50k. All findings are validated to eliminate false positives and sync back into Lovable as actionable issues. This generates a formal pentest report for SOC 2, ISO 27001, client security questionnaires, or even investor due diligence.

Introducing the world’s first penetration testing for vibe coding to Lovable. You can now prove the security of your Lovable-built apps through a swarm of AI agents that run comprehensive tests, checking for OWASP Top 10 vulnerabilities, privilege escalation, and data exposure, powered by Aikido. This used to take weeks, require dedicated security teams, and cost $5k-$50k. All findings are validated to eliminate false positives and sync back into Lovable as actionable issues. This generates a formal pentest report for SOC 2, ISO 27001, client security questionnaires, or even investor due diligence.

Lovable

339,214 views • 4 months ago

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!

Akshay 🚀

96,762 views • 8 months ago

🚀 Today, we announced frontier agents, a new class of AI agents which are a step-function change in what you can do with agents. Our first three agents mark the beginning of a new era in software development: 🟠 Kiro autonomous agent maintains persistent context and learns over time while working independently, so you can focus on your biggest priorities. It can handle a range of tasks—from triaging bugs to improving code coverage—with a single change spanning multiple repositories. 🟠 AWS Security Agent is your virtual security engineer that helps build secure applications by being a security consultant for app design, code reviews, and penetration testing. 🟠 AWS DevOps Agent is your virtual operations team member that helps resolve and proactively prevent incidents. It is on call when incidents happen, instantly responding to issues and using its knowledge of your application and the relationship between components to find the root ause of the problem. More on how we’re helping customers driving towards an agentic future: #AWSreInvent

🚀 Today, we announced frontier agents, a new class of AI agents which are a step-function change in what you can do with agents. Our first three agents mark the beginning of a new era in software development: 🟠 Kiro autonomous agent maintains persistent context and learns over time while working independently, so you can focus on your biggest priorities. It can handle a range of tasks—from triaging bugs to improving code coverage—with a single change spanning multiple repositories. 🟠 AWS Security Agent is your virtual security engineer that helps build secure applications by being a security consultant for app design, code reviews, and penetration testing. 🟠 AWS DevOps Agent is your virtual operations team member that helps resolve and proactively prevent incidents. It is on call when incidents happen, instantly responding to issues and using its knowledge of your application and the relationship between components to find the root ause of the problem. More on how we’re helping customers driving towards an agentic future: #AWSreInvent

Swami Sivasubramanian

26,037 views • 7 months ago

President Macron: When we speak about security guarantees, we speak about the whole security of the European continent and this is why we are all united here with Ukraine on this matter... And in order to have such a long-standing peace for Ukraine and for the whole continent, we do need the security guarantees. And the first one is clearly a credible Ukrainian army for the years and decades to come. And the second one is our own commitments, all of us. You can be sure that Europeans are very lucid about the fact that they have their fair share in the security guarantees for Ukraine, but their own security is clearly at stake in this situation.

President Macron: When we speak about security guarantees, we speak about the whole security of the European continent and this is why we are all united here with Ukraine on this matter... And in order to have such a long-standing peace for Ukraine and for the whole continent, we do need the security guarantees. And the first one is clearly a credible Ukrainian army for the years and decades to come. And the second one is our own commitments, all of us. You can be sure that Europeans are very lucid about the fact that they have their fair share in the security guarantees for Ukraine, but their own security is clearly at stake in this situation.

Anton Gerashchenko

287,043 views • 11 months ago

New feature: Prompt Guard Every builder knows prompt injection is a big threat to production agents. That's why we are introducing Prompt Guard, which solves the problem for every user by default. • 3 layers of defense by default • 256 attack vectors tested, zero leaks, zero false positives The next era of AI infrastructure comes with security baked in as default. SERV is already shipping it.

New feature: Prompt Guard Every builder knows prompt injection is a big threat to production agents. That's why we are introducing Prompt Guard, which solves the problem for every user by default. • 3 layers of defense by default • 256 attack vectors tested, zero leaks, zero false positives The next era of AI infrastructure comes with security baked in as default. SERV is already shipping it.

OpenServ

26,218 views • 2 months ago

By 2028, the average Fortune 500 enterprise will have over 150,000 AI agents running across their organization, according to Gartner. The number one barrier to deploying them: security and privacy concerns. Not capability. Trust. Box Agent Security and Governance is built into the content layer, not bolted on top of it. Every agent request evaluated against your existing permissions. Every session logged with a content-aware audit trail. Frictionless for teams. Fully governed for security leaders.

By 2028, the average Fortune 500 enterprise will have over 150,000 AI agents running across their organization, according to Gartner. The number one barrier to deploying them: security and privacy concerns. Not capability. Trust. Box Agent Security and Governance is built into the content layer, not bolted on top of it. Every agent request evaluated against your existing permissions. Every session logged with a content-aware audit trail. Frictionless for teams. Fully governed for security leaders.

Box

141,491 views • 7 days ago

Today we are announcing Box Agent Security and Governance. AI agents are reading files, moving content, and triggering actions across your most sensitive data at machine speed. Most security tools were not designed for this. Box closes the gap at the content layer: · Prompt injection detection before it reaches the model · Agent guardrails on what agents can and cannot do · Classification-based access policies extending Box Shield to AI · Audit trails for every agent session No additional software. No per-vendor configuration.

Today we are announcing Box Agent Security and Governance. AI agents are reading files, moving content, and triggering actions across your most sensitive data at machine speed. Most security tools were not designed for this. Box closes the gap at the content layer: · Prompt injection detection before it reaches the model · Agent guardrails on what agents can and cannot do · Classification-based access policies extending Box Shield to AI · Audit trails for every agent session No additional software. No per-vendor configuration.

Box

749,502 views • 8 days ago

We are partnering up with zauth to secure the next generation of 3D AI agents. These agents have memory, emotion, voice, and on-chain identity and can be embedded anywhere. These agents use the x402 protocol to make real payments for skills and services. To make this ecosystem production-ready and safe, is teaming up with zauth, the security layer for the agentic internet. Bringing safety and trust to the next wave of 3D AI agents 🔐

We are partnering up with zauth to secure the next generation of 3D AI agents. These agents have memory, emotion, voice, and on-chain identity and can be embedded anywhere. These agents use the x402 protocol to make real payments for skills and services. To make this ecosystem production-ready and safe, is teaming up with zauth, the security layer for the agentic internet. Bringing safety and trust to the next wave of 3D AI agents 🔐

three.ws

50,869 views • 1 month ago

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

Sri Laasya Nutheti

18,524 views • 5 months ago

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

we are building at the Y Combinator web agents hackathon this weekend. introducing clawtrace: on-call security for openclaw web agents. openclaw is powerful. but it’s hard to fully trust what your agents are actually doing. that’s why we built clawtrace. clawtrace lets you: - know when your agents go rogue - detect anomalies in behavior - track sessions, tool calls, thinking states here’s how it works:

Divya Saini

22,323 views • 5 months ago

Today, I’m excited to announce our new product: Merge Agent Handler! With the growth of AI, we've seen demand for both synced connectors to power enterprise search and deterministic use cases, and live connectors that let agents take real-time actions. And now, with Merge, you can have both. Merge Agent Handler securely connects your AI agents to thousands of pre-built tools via MCP. The platform also comes with authentication, credential management, monitoring, logging, and enterprise-grade security. Huge shout out to the team who worked tirelessly to bring this to life.

Today, I’m excited to announce our new product: Merge Agent Handler! With the growth of AI, we've seen demand for both synced connectors to power enterprise search and deterministic use cases, and live connectors that let agents take real-time actions. And now, with Merge, you can have both. Merge Agent Handler securely connects your AI agents to thousands of pre-built tools via MCP. The platform also comes with authentication, credential management, monitoring, logging, and enterprise-grade security. Huge shout out to the team who worked tirelessly to bring this to life.

Shensi Ding

45,064 views • 10 months ago

Speaking in the Security update - Officials Secrets Act Case: The 2002 and 2003 integrated reviews were very clear. All the officials and the security services called and said that China was a significant threat. That was sufficient to give to the CPS, not even by ministers but by officials. The question is: why wasn’t it? But the question I really wanted to ask today concerns this absurdity about the role, or lack of role, of the National Security Adviser. The government says he wasn’t involved in any matters of substance — but isn’t it the role of the National Security Adviser to be involved in all matters of substance when it comes to national security? So, what’s the point of a National Security Adviser who does not involve themselves in matters of national security, as in this case? Instead, we are meant to believe that the Deputy National Security Adviser is allowed, in this case, to involve themselves in substantial matters of national security, but not apparently discuss these substantial matters of national security with the National Security Adviser. This does seem to be an absolute matter of substantial absurdity.

Speaking in the Security update - Officials Secrets Act Case: The 2002 and 2003 integrated reviews were very clear. All the officials and the security services called and said that China was a significant threat. That was sufficient to give to the CPS, not even by ministers but by officials. The question is: why wasn’t it? But the question I really wanted to ask today concerns this absurdity about the role, or lack of role, of the National Security Adviser. The government says he wasn’t involved in any matters of substance — but isn’t it the role of the National Security Adviser to be involved in all matters of substance when it comes to national security? So, what’s the point of a National Security Adviser who does not involve themselves in matters of national security, as in this case? Instead, we are meant to believe that the Deputy National Security Adviser is allowed, in this case, to involve themselves in substantial matters of national security, but not apparently discuss these substantial matters of national security with the National Security Adviser. This does seem to be an absolute matter of substantial absurdity.

Iain Duncan Smith MP Chingford & Woodford Green

70,473 views • 9 months ago

#WATCH | Delhi: On PM Modi reducing his security convoy, former R&AW Secretary Samant Goel says, "The current international security situation is highly volatile. There have been three attacks on US President Trump, despite it being considered the safest country. There are several elements who are against India. Terror activities are happening, especially by our neighbouring state. So, in such a situation, I personally feel that we must make special arrangements for PM's security. As per the current threat assessments, drones and sniper guns have come in. So, we need to review his security and strengthen it, rather than downsizing it. I feel this is not right. This is not in the interest of the nation."

#WATCH | Delhi: On PM Modi reducing his security convoy, former R&AW Secretary Samant Goel says, "The current international security situation is highly volatile. There have been three attacks on US President Trump, despite it being considered the safest country. There are several elements who are against India. Terror activities are happening, especially by our neighbouring state. So, in such a situation, I personally feel that we must make special arrangements for PM's security. As per the current threat assessments, drones and sniper guns have come in. So, we need to review his security and strengthen it, rather than downsizing it. I feel this is not right. This is not in the interest of the nation."

ANI

763,621 views • 2 months ago

🚀 We're excited to announce the release of FuzzForge Open Source (OSS)! FuzzForge is our open-source platform designed to automate offensive security workflows & AI Agents, from static analysis to fuzzing, debugging, and root cause analysis, all with AI assistance. 🔷 Open-source release is the first step toward our vision of "Offensive-Security-as-Code." 🔷 Workflows you can run, share, and extend. 🔷 Built by the team at FuzzingLabs. Github : Join the Alpha Waitlist : We've also launched the FuzzingLabs Community Discord where researchers, engineers, and security enthusiasts can connect and collaborate: 👉 Come join us and Let's forge the future of AppSec & Offensive Security together! #FuzzForge #Fuzzing #AppSec #OpenSource #CyberSecurity

🚀 We're excited to announce the release of FuzzForge Open Source (OSS)! FuzzForge is our open-source platform designed to automate offensive security workflows & AI Agents, from static analysis to fuzzing, debugging, and root cause analysis, all with AI assistance. 🔷 Open-source release is the first step toward our vision of "Offensive-Security-as-Code." 🔷 Workflows you can run, share, and extend. 🔷 Built by the team at FuzzingLabs. Github : Join the Alpha Waitlist : We've also launched the FuzzingLabs Community Discord where researchers, engineers, and security enthusiasts can connect and collaborate: 👉 Come join us and Let's forge the future of AppSec & Offensive Security together! #FuzzForge #Fuzzing #AppSec #OpenSource #CyberSecurity

FuzzingLabs

11,156 views • 10 months ago

Karpathy just described what hiring looks like in 2026: "Build a large project with Claude Code — like a Twitter clone. Make it secure. Have real agents using the platform doing stuff. The interviewer uses parallel agents trying to break in to verify security." One person. Multiple agents. Shipping and defending production code simultaneously. This is not a future job description. This is happening right now. The founders who get there first are not the smartest ones in the room. They are the ones who stopped doing everything themselves and built agents to do it for them. Here is the complete playbook — 13 agents, exact prompts, 90-day build plan ↓ Read this before your competition does.

Karpathy just described what hiring looks like in 2026: "Build a large project with Claude Code — like a Twitter clone. Make it secure. Have real agents using the platform doing stuff. The interviewer uses parallel agents trying to break in to verify security." One person. Multiple agents. Shipping and defending production code simultaneously. This is not a future job description. This is happening right now. The founders who get there first are not the smartest ones in the room. They are the ones who stopped doing everything themselves and built agents to do it for them. Here is the complete playbook — 13 agents, exact prompts, 90-day build plan ↓ Read this before your competition does.

Rahul

432,494 views • 2 months ago

We are preparing for negotiations with our partners—both European and American—starting midweek. This includes the Ramstein meeting, discussions in Kyiv, and later, participation in the Munich Security Conference. It is crucial that we all work together to bring about real peace and effective security guarantees—the security of our people, our state, our economic relations, and, importantly, our resource resilience—not just for Ukraine, but for the entire free world. All of this is being decided now—by Ukraine and our partners. Peace is always a collective effort.

We are preparing for negotiations with our partners—both European and American—starting midweek. This includes the Ramstein meeting, discussions in Kyiv, and later, participation in the Munich Security Conference. It is crucial that we all work together to bring about real peace and effective security guarantees—the security of our people, our state, our economic relations, and, importantly, our resource resilience—not just for Ukraine, but for the entire free world. All of this is being decided now—by Ukraine and our partners. Peace is always a collective effort.

Volodymyr Zelenskyy / Володимир Зеленський

332,179 views • 1 year ago