developer-security
(5)
The Package Was Fine Six Minutes Ago
Most security tools ask whether a dependency is already notorious. Socket asks a ruder, more useful question: what will this code do after you invite it inside?
Bright Built a Scanner That Was Too Dangerous to Use - Then Turned the Failure Into a Developer Security Business
Bright began with an AI fuzzer that found zero-days and occasionally flattened the target. Its second act is less theatrical and more useful: prove the vulnerability, help fix it, and test the fix before the code ships.
The Free Security Tool That Became a $40 Million Bet on One Annoying Question: Is That Key Still Live?
TruffleHog started as a weekend bug-bounty tool and grew into an enterprise security platform by attacking the least glamorous part of a credential leak: separating live danger from a pile of convincing-looking junk.
Ockam Spent Years Making Networks Disappear. Then the Company Did Too.
The San Francisco startup raised $17.6 million to turn zero-trust plumbing into a developer primitive. Its sharpest lessons survive in open source - including the costly rewrite that finally made the idea click.
Aembit Wants to Give Every AI Agent a Badge - Without Giving It the Keys
Companies taught employees to prove who they are. Aembit is betting the next security market belongs to doing the same for software - issuing short-lived access to workloads and AI agents only when policy says yes.