Automating hacker intuition
Joined February 2023
- Tweets129
- Following9
- Followers1.4K
- Likes84
We're launching Continuous Coverage!
Because of AI, your developers are shipping faster than ever. But security was built for a slower world. Every release brings new changes to test and more findings to sort through by hand.
Continuous Coverage puts Sybil on your security team full-time:
→ Runs on its own. Sybil checks your attack surface or merged commits for changes as often as daily, then tests what matters on the cadence you set.
→ No noise. Every finding is validated before it reaches your team, so you see what’s actually exploitable.
→ Fix it fast. On white box, Sybil opens the fix PR. On black box, you still get remediation guidance without connecting code. Either way, retests kick off automatically.
Security that keeps pace with how fast you ship: runsybil.com/blog/introducin…
Today at Unprompted II, our Head of Research, Michael Brown, will talk about how automated agentic security systems have evolved, what trends are shaping effective designs today, and what will set the best harnesses apart in the future.
Catch Michael on stage at 16:45 PT for “AI Safety: Hype vs. Real-World Risk.”
we’re launching automated scope recommendations. sybil flags gaps between your attack surface and the scope you set before testing even starts.
learn more: runsybil.com/blog/more-usefu…
Sybil retweeted
I spoke to @josephmenn this week about AI worms and wanted to add more color to my thoughts. What makes an AI worm different is that a model is capable of learning on the fly. This type of threat isn't here yet, but this is an example of an increasing shift that defenders are feeling.
We keep hearing the same theme from @runsybil customers: finding vulns is only the start. Teams need to patch and understand their attack surface in real time. Our job is to find and fix what's exploitable faster than attackers. Onward 🚀
Full article here: theguardian.com/technology/2…
welcome to RunSybil, Alice 👋
she’s into open-source cybersecurity, network science, and graphs + hypergraphs. apparently, they’re everywhere. we’ve been warned.
when she’s not finding graphs in everything, she’s running, playing music, hosting movie nights, and living, laughing & loving life in NYC.
the security landscape is changing fast. the people pushing its boundaries should have places to get in a room together.
see you at [un]prompted II in sf 🫡
we pitted claude opus 5.5 against kimi k3 on pokémon emerald tasking each with finding novel 0-days
both built a link-cable worm that turns it into tetris, but took very different paths to get there
@claudeai @Kimi_Moonshot
we broke down how each model researched, spent tokens, hit guardrails, and built the exploit
runsybil.com/blog/kimi-k3-vs…
That's not the case with Sybil
Sybil pushes validated findings straight into GitHub Issues and keeps them updated on re-test.
Ship fixes where you ship code → runsybil.com/blog/sybil-inte…
september patch notes just dropped
see what we shipped and what’s coming next ↓
runsybil.com/blog/changelog-…
Sybil now integrates directly with Linear to automatically push, update, and track security findings as tickets in your existing workflow. Eliminate manual copy-pasting and start managing remediation seamlessly where your team already works.
Read the blog: runsybil.com/blog/fix-findin…
Welcome Graham O'Donnell to RunSybil as our newest Member of Technical Staff!
A friend described RunSybil to Graham as a place where “smart, talented people are doing cool work,” and he was IN. Graham believes security is a problem we can solve, and RunSybil gives him the chance to put that idea to the test.
He’ll work with Sybil on vulnerability research, explore what inference can do for security, and push toward securing the internet at machine speed.
Outside of work, Graham is into gravel biking, skiing, swimming, and just about any excuse to get outside. When he slows things down, he’s exploring traditional Chinese tea or hunting thrift stores and estate sales for rare books.
We’re happy to have you at RunSybil, Graham!
What does Application Security look like for a company that must protect the $5 trillion in equity it manages?
For @cartainc, working with RunSybil means continuous coverage of their attack surface, insight into novel attack vectors beyond known bug patterns, and remediation that matches the speed of development.
