Загрузка видео...

Не удалось загрузить видео

На главную

Meet Replit Security Agent - providing comprehensive app security reviews in minutes And you get $5 in credits to try it for a limited time Security Agent’s hybrid static analysis and AI-scanning approach is first of its kind: - Acts on custom threat model to review full codebase -...

Replit's profile picture

Replit ⠕

238,158 subscribers

86,621 просмотров • 4 месяцев назад •via X (Twitter)

ОбразованиеЗдоровье и велнесНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

introducing greptile security agent it combines static analysis, sca, and ai agents to efficiently catch security flaws before merge. why did we build this? - coding agents have caused the frequency of security incidents to explode - neither agents nor deterministic methods alone are sufficient for detecting vulnerabilities - security review is best done in conjunction with regular code review because many vulns are really just logical issues with security consequences security review is turned on by default for free for all greptile users.
0:35

introducing greptile security agent it combines static analysis, sca, and ai agents to efficiently catch security flaws before merge. why did we build this? - coding agents have caused the frequency of security incidents to explode - neither agents nor deterministic methods alone are sufficient for detecting vulnerabilities - security review is best done in conjunction with regular code review because many vulns are really just logical issues with security consequences security review is turned on by default for free for all greptile users.

Daksh Gupta

33,973 просмотров • 1 месяц назад

Introducing the world’s first penetration testing for vibe coding to Lovable. You can now prove the security of your Lovable-built apps through a swarm of AI agents that run comprehensive tests, checking for OWASP Top 10 vulnerabilities, privilege escalation, and data exposure, powered by Aikido. This used to take weeks, require dedicated security teams, and cost $5k-$50k. All findings are validated to eliminate false positives and sync back into Lovable as actionable issues. This generates a formal pentest report for SOC 2, ISO 27001, client security questionnaires, or even investor due diligence.
0:21

Introducing the world’s first penetration testing for vibe coding to Lovable. You can now prove the security of your Lovable-built apps through a swarm of AI agents that run comprehensive tests, checking for OWASP Top 10 vulnerabilities, privilege escalation, and data exposure, powered by Aikido. This used to take weeks, require dedicated security teams, and cost $5k-$50k. All findings are validated to eliminate false positives and sync back into Lovable as actionable issues. This generates a formal pentest report for SOC 2, ISO 27001, client security questionnaires, or even investor due diligence.

Lovable

339,900 просмотров • 5 месяцев назад

OpenAI just released Codex Security, an AI agent that scans software projects to fix vulnerabilities while ignoring harmless bugs. Testing on 1.2mn commits found 792 critical flaws and dropped false alarms by 50%. Here is how the Codex Security agent works Initially, it scans your software project to learn how all the different pieces of code connect. It uses that knowledge to build a threat model, which acts as a custom map showing exactly where your software might be exposed to hackers. The agent then hunts for potential security holes based on that specific map. When it spots a possible flaw, it does not just send you a random alert. Instead, it creates a completely safe and isolated copy of your system known as a sandbox. The agent then actively tries to break into that sandboxed copy to prove if the security weakness is a real danger. If the agent successfully exploits its own test environment, it knows the bug is a genuine threat and not a false alarm. After confirming the danger, the agent writes a custom software patch to fix the broken code. It then tests that new patch to guarantee the fix does not accidentally break any other features in your software.
0:37

OpenAI just released Codex Security, an AI agent that scans software projects to fix vulnerabilities while ignoring harmless bugs. Testing on 1.2mn commits found 792 critical flaws and dropped false alarms by 50%. Here is how the Codex Security agent works Initially, it scans your software project to learn how all the different pieces of code connect. It uses that knowledge to build a threat model, which acts as a custom map showing exactly where your software might be exposed to hackers. The agent then hunts for potential security holes based on that specific map. When it spots a possible flaw, it does not just send you a random alert. Instead, it creates a completely safe and isolated copy of your system known as a sandbox. The agent then actively tries to break into that sandboxed copy to prove if the security weakness is a real danger. If the agent successfully exploits its own test environment, it knows the bug is a genuine threat and not a false alarm. After confirming the danger, the agent writes a custom software patch to fix the broken code. It then tests that new patch to guarantee the fix does not accidentally break any other features in your software.

Rohan Paul

13,208 просмотров • 6 месяцев назад

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!
0:23

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!

Akshay 🚀

96,875 просмотров • 10 месяцев назад

Introducing the first Full-Stack Vibe Coding Platform powered by Claude Code. Not only can you build a professional mobile app that accepts payments and ship it to the app store... As of today you can build a web app and deploy it to the internet with one click. In celebration of 5000 vibe coded apps published to the app store, we're giving away a free month of vibe coding for those who reply to this post. Reply and we'll DM you credits 👇
0:30

Introducing the first Full-Stack Vibe Coding Platform powered by Claude Code. Not only can you build a professional mobile app that accepts payments and ship it to the app store... As of today you can build a web app and deploy it to the internet with one click. In celebration of 5000 vibe coded apps published to the app store, we're giving away a free month of vibe coding for those who reply to this post. Reply and we'll DM you credits 👇

Chorus.com

786,887 просмотров • 8 месяцев назад

Open sourcing the first Expo vibe coding web IDE and SDK: React Native Vibe Code Powered by Claude agent SDK, history rollbacks, live web and native app previews, full stack setup by Convex, publish to web w/ Cloudflare, voice prompting, upload assets to app, add images and files to prompt, model selector, skills loader, visual edits, sandboxing by E2B, download codebase option, Monaco code editor, fork/remix and a CLI to run locally. The project is a Turborepo running Next.js hosted on Vercel with streaming powered by AI SDK ◆ try cloud version at ◆ github repo:
0:59

Open sourcing the first Expo vibe coding web IDE and SDK: React Native Vibe Code Powered by Claude agent SDK, history rollbacks, live web and native app previews, full stack setup by Convex, publish to web w/ Cloudflare, voice prompting, upload assets to app, add images and files to prompt, model selector, skills loader, visual edits, sandboxing by E2B, download codebase option, Monaco code editor, fork/remix and a CLI to run locally. The project is a Turborepo running Next.js hosted on Vercel with streaming powered by AI SDK ◆ try cloud version at ◆ github repo:

ROFI

44,523 просмотров • 7 месяцев назад

HIS VIBE CODING APP WAS HACKED and he almost lost $10,000 because of it After analyzing why this happened, we managed to find 3 most common mistakes that appear in the majority of vibe coding projects: • Misconfigured RLS • No backend rate limits • AI calls made from the frontend And vibe coding is actually not dangerous, you just need to pay more attention to these points when creating a project: • Protecting access to data • Limiting resource usage • Hiding all secrets on the backend • Controlling costs • Regularly doing security reviews It’s also important from the very beginning to give AI tools for improving code security And I talked about them in the article below👇
16:14

HIS VIBE CODING APP WAS HACKED and he almost lost $10,000 because of it After analyzing why this happened, we managed to find 3 most common mistakes that appear in the majority of vibe coding projects: • Misconfigured RLS • No backend rate limits • AI calls made from the frontend And vibe coding is actually not dangerous, you just need to pay more attention to these points when creating a project: • Protecting access to data • Limiting resource usage • Hiding all secrets on the backend • Controlling costs • Regularly doing security reviews It’s also important from the very beginning to give AI tools for improving code security And I talked about them in the article below👇

TolyaDV

45,570 просмотров • 3 месяцев назад

How do you deploy AI agents for financial institutions without compromising on security, isolation, or scale? Rogo powers complex research, analysis, and deal workflows for leading financial firms, supporting complex tasks across tens of thousands of concurrent users. To meet the diverse needs of financial teams, Rogo relies on both specialist and general-purpose agents that can adapt to a wide range of workflows. With Claude Managed Agents and self-hosted sandboxes, Rogo gets the orchestration and post-training capabilities needed to design these agent systems, while E2B provides the execution layer underneath. Every piece of code generated by an agent runs inside its own E2B sandbox with full auditability and traceability. Each sandbox is powered by an isolated microVM, providing the kernel-level isolation critical for Rogo's customers. The result is a seamless agent experience backed by the security, reliability, and compliance requirements that financial institutions demand.
2:29

How do you deploy AI agents for financial institutions without compromising on security, isolation, or scale? Rogo powers complex research, analysis, and deal workflows for leading financial firms, supporting complex tasks across tens of thousands of concurrent users. To meet the diverse needs of financial teams, Rogo relies on both specialist and general-purpose agents that can adapt to a wide range of workflows. With Claude Managed Agents and self-hosted sandboxes, Rogo gets the orchestration and post-training capabilities needed to design these agent systems, while E2B provides the execution layer underneath. Every piece of code generated by an agent runs inside its own E2B sandbox with full auditability and traceability. Each sandbox is powered by an isolated microVM, providing the kernel-level isolation critical for Rogo's customers. The result is a seamless agent experience backed by the security, reliability, and compliance requirements that financial institutions demand.

Vasek Mlejnsky

16,784 просмотров • 3 месяцев назад

🚀 Today, we announced frontier agents, a new class of AI agents which are a step-function change in what you can do with agents. Our first three agents mark the beginning of a new era in software development: 🟠 Kiro autonomous agent maintains persistent context and learns over time while working independently, so you can focus on your biggest priorities. It can handle a range of tasks—from triaging bugs to improving code coverage—with a single change spanning multiple repositories. 🟠 AWS Security Agent is your virtual security engineer that helps build secure applications by being a security consultant for app design, code reviews, and penetration testing. 🟠 AWS DevOps Agent is your virtual operations team member that helps resolve and proactively prevent incidents. It is on call when incidents happen, instantly responding to issues and using its knowledge of your application and the relationship between components to find the root ause of the problem. More on how we’re helping customers driving towards an agentic future: #AWSreInvent
1:03

🚀 Today, we announced frontier agents, a new class of AI agents which are a step-function change in what you can do with agents. Our first three agents mark the beginning of a new era in software development: 🟠 Kiro autonomous agent maintains persistent context and learns over time while working independently, so you can focus on your biggest priorities. It can handle a range of tasks—from triaging bugs to improving code coverage—with a single change spanning multiple repositories. 🟠 AWS Security Agent is your virtual security engineer that helps build secure applications by being a security consultant for app design, code reviews, and penetration testing. 🟠 AWS DevOps Agent is your virtual operations team member that helps resolve and proactively prevent incidents. It is on call when incidents happen, instantly responding to issues and using its knowledge of your application and the relationship between components to find the root ause of the problem. More on how we’re helping customers driving towards an agentic future: #AWSreInvent

Swami Sivasubramanian

26,056 просмотров • 9 месяцев назад

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:
1:39

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:

DeepLearning.AI

56,374 просмотров • 1 месяц назад

Inviting early beta testers for our upcoming SWE agent, Asteria. We're solving AI code comprehension, where the context window and the size of your codebase are no longer limitations, and reinventing the UX of how coding agents are currently implemented. We initially built this to address false positives and enhance accuracy for our SAST agent, which autonomously identifies security vulnerabilities, traces how a payload would flow through code, and ultimately demonstrates an actual exploit. The performance improved so significantly that we decided to test it on realistic engineering tasks on large codebases and witnessed SOTA results. Reply "access" if you'd like to be an early beta tester, a lot of quirks to fix.
0:45

Inviting early beta testers for our upcoming SWE agent, Asteria. We're solving AI code comprehension, where the context window and the size of your codebase are no longer limitations, and reinventing the UX of how coding agents are currently implemented. We initially built this to address false positives and enhance accuracy for our SAST agent, which autonomously identifies security vulnerabilities, traces how a payload would flow through code, and ultimately demonstrates an actual exploit. The performance improved so significantly that we decided to test it on realistic engineering tasks on large codebases and witnessed SOTA results. Reply "access" if you'd like to be an early beta tester, a lot of quirks to fix.

mufeed vh

12,434 просмотров • 1 год назад

Europe can only be peaceful if peace is guaranteed by full security certainty. Europe cannot have a deficit of security certainty that will provoke 🇷🇺 tyranny and aggression. 🇷🇺 will try to take a bite out of Europe only when it sees any kind of security uncertainty. When everything is certain and obvious, 🇷🇺 tyranny does not dare to violate security. It is obvious that Europe can be protected from any aggression only together with 🇺🇦 and only together with Ukraine in NATO. That is why we must achieve security certainty about our future in the Alliance. Then 🇷🇺 will have to refocus on its own statehood - to finally take care of itself, not some expansions.
7:35

Europe can only be peaceful if peace is guaranteed by full security certainty. Europe cannot have a deficit of security certainty that will provoke 🇷🇺 tyranny and aggression. 🇷🇺 will try to take a bite out of Europe only when it sees any kind of security uncertainty. When everything is certain and obvious, 🇷🇺 tyranny does not dare to violate security. It is obvious that Europe can be protected from any aggression only together with 🇺🇦 and only together with Ukraine in NATO. That is why we must achieve security certainty about our future in the Alliance. Then 🇷🇺 will have to refocus on its own statehood - to finally take care of itself, not some expansions.

Volodymyr Zelenskyy / Володимир Зеленський

759,900 просмотров • 3 лет назад

Vibe coding is cool. But have you tried vibe-tuning? Here’s Claude Code using the Lightning Rod Labs SDK to turn messy Fed PDFs into a small, specialized economic forecaster. The agent: - parses raw historical PDFs - builds a training set - fine-tunes a smaller model - evaluates it against GPT-5 Result: a fine-tuned model that beats GPT-5 and runs anywhere, on a single GPU. Try it in your coding agent of choice.
0:44

Vibe coding is cool. But have you tried vibe-tuning? Here’s Claude Code using the Lightning Rod Labs SDK to turn messy Fed PDFs into a small, specialized economic forecaster. The agent: - parses raw historical PDFs - builds a training set - fine-tunes a smaller model - evaluates it against GPT-5 Result: a fine-tuned model that beats GPT-5 and runs anywhere, on a single GPU. Try it in your coding agent of choice.

Ben Turtel

423,542 просмотров • 4 месяцев назад

This might be the biggest evolution to vibe coding You’re not limited to basic websites anymore but you can generate: - Full stack web and mobile apps - Pro animations to promote them - Slides, documents or data apps Everything at the same place and in a single infinite canvas using Replit Agent 4 and most importantly… IN PARALLEL! So you don't have to wait until one agent finishes a minor modification to continue working on another part of your project. Future really belongs to builders. Technical barriers don’t exist anymore, that’s exciting! (You can give it a try with the link below)
11:07

This might be the biggest evolution to vibe coding You’re not limited to basic websites anymore but you can generate: - Full stack web and mobile apps - Pro animations to promote them - Slides, documents or data apps Everything at the same place and in a single infinite canvas using Replit Agent 4 and most importantly… IN PARALLEL! So you don't have to wait until one agent finishes a minor modification to continue working on another part of your project. Future really belongs to builders. Technical barriers don’t exist anymore, that’s exciting! (You can give it a try with the link below)

Paul Couvert

11,264 просмотров • 6 месяцев назад

Lysium is an app I've been building specifically for background agent orchestration. Features: → Mobile-first + cross-platform → Run multiple agents in parallel across repositories → Launch agent-based requests from issues and PRs → Swipe actions for close, merge, create PR, and skip-to-tail workflows → One click agent-powered PR reviews + assessments → One-click agent-powered issue assessments Think of it as a cross-platform control plane for async, agent-driven software delivery (that you can control from anywhere). It's still an experiment, but it's open source and available to try:
0:46

Lysium is an app I've been building specifically for background agent orchestration. Features: → Mobile-first + cross-platform → Run multiple agents in parallel across repositories → Launch agent-based requests from issues and PRs → Swipe actions for close, merge, create PR, and skip-to-tail workflows → One click agent-powered PR reviews + assessments → One-click agent-powered issue assessments Think of it as a cross-platform control plane for async, agent-driven software delivery (that you can control from anywhere). It's still an experiment, but it's open source and available to try:

nader dabit

47,584 просмотров • 6 месяцев назад

ALICE Agent Deployment is live Users can now deploy their own ALICE AI agent to monitor tokens 24/7 with real-time risk detection. >Lifetime access with 1,000,000 $ALICE >Track up to 10 tokens at once >Live ALICE AI risk analysis every 10 minutes >Seamlessly add and remove tokens as needed >Keep an active $ALICE dashboard running while trading >Access the agent deployment feature instantly by typing "agent" or from the home page >This is autonomous AI security, built to work around the clock—analyzing every risk, every move, in real time. Upcoming integrations will include webhook alerts to Telegram, Discord, and email, expanding how $ALICE delivers intelligence. The future of AI-powered crypto security is here, and this is just the beginning.
0:53

ALICE Agent Deployment is live Users can now deploy their own ALICE AI agent to monitor tokens 24/7 with real-time risk detection. >Lifetime access with 1,000,000 $ALICE >Track up to 10 tokens at once >Live ALICE AI risk analysis every 10 minutes >Seamlessly add and remove tokens as needed >Keep an active $ALICE dashboard running while trading >Access the agent deployment feature instantly by typing "agent" or from the home page >This is autonomous AI security, built to work around the clock—analyzing every risk, every move, in real time. Upcoming integrations will include webhook alerts to Telegram, Discord, and email, expanding how $ALICE delivers intelligence. The future of AI-powered crypto security is here, and this is just the beginning.

Alice

18,811 просмотров • 1 год назад