# Travis McPeak

> Travis McPeak is a security engineer and the co-founder and former CEO of Resourcely, acquired by Anysphere in July 2025. His career includes security work at Netflix and Databricks, contributions to Bandit and Repokid, and later work securing AI development tools. An October 2026 Endor Labs announcement identifies him in security at SpaceXAI.

- **Role:** Security at SpaceXAI
- **Organizations:** SpaceXAI, Cursor (Anysphere), Resourcely, Databricks, Netflix, IBM, HPE, Symantec, OWASP Bay Area, OpenStack Security Project, Cloud Foundry Security Team
- **Education:** Master of Science in Computer Engineering, Santa Clara University, Bachelor of Science in Computer Science, California State University, Long Beach
- **Known for:** Core contributor to the Bandit Python security linter., Worked on Repokid to automate removal of unused AWS permissions at Netflix., Helped found the Cloud Foundry Security Team.

## Career timeline

- **2011-2014** — Security-focused engineering roles at Symantec.
- **2014-2016** — Security Architect at HP Helion; worked on Bandit and ReconBF.
- **2016-2017** — Cloud security work at IBM; helped found the Cloud Foundry Security Team.
- **2016-2021** — Led the Bay Area OWASP chapter, November 2016 to August 2021.
- **2017** — Presented Aardvark and Repokid at Black Hat while at Netflix.
- **2018** — Presented least-privilege automation at USENIX Enigma.
- **2021** — Led the new Product Security function at Databricks.
- **2022** — Publicly launched Resourcely with Aladdin Almubayed; announced an $8 million seed round.
- **2025** — Resourcely acquired by Anysphere in July; joined Cursor security.
- **2026** — Published Cursor security automation work and co-authored the Auto-review explanation with David Gomes; identified in security at SpaceXAI by October.

## Achievements

- Core contributor to the Bandit Python security linter.
- Worked on Repokid to automate removal of unused AWS permissions at Netflix.
- Helped found the Cloud Foundry Security Team.
- Led Databricks’ dedicated product security function.
- Co-founded Resourcely, which raised an $8 million seed round led by Andreessen Horowitz and Felicis.
- Co-authored the June 2026 Auto-review article with David Gomes.

## Latest updates

- **2026-10** — An Endor Labs partnership announcement identifies McPeak as Security, SpaceXAI, and quotes him on prioritizing reachable vulnerabilities.
- **2026-06** — Co-authored Governing agent autonomy with Auto-review with David Gomes on Cursor’s blog.
- **2026-03** — Published Securing our codebase with autonomous agents, describing four security automation templates.
- **2025-12** — Appeared on Boring AppSec to discuss developer security and AI.

## Links

- LinkedIn: https://www.linkedin.com/in/travismcpeak
- Twitter/X: https://x.com/travismcpeak
- GitHub: https://github.com/tmcpeak

---

Profile page: https://yespress.io/travis-mcpeak
Published by YesPress — https://yespress.io
Last updated: 2026-10-22