Information Security, Principal Engineer | Founder https://xitter.cf/t.co/cGGU638jFF | Co-Founder https://xitter.cf/t.co/DZQ00hELa4

Joined May 2016
One thing that's wild about building in cyber right now with AI tools is seeing people actually ship their exact vision. I built nano as my take on the ideal SIEM, and now I'm talking to tons of solo founders doing the same for CTI, data onboarding, you name it. Being able to meet with people really passionate about their ideas in the space and then getting integrations fired up is really awesome, love doing this stuff.
4
69
Dan Lussier retweeted
I used to debug code now I type this and hit enter
177
1,082
96
23,445
517,781
Dan Lussier retweeted
For anyone with endless ideas, this agent age is nirvana as those ideas are met with endless execution, endless exploration. I've never had has much fun working with computers as I do right now. What a time to be alive.
512
1,144
258
12,173
544,416
"Worth carrying forward: Four production incidents today, all mine, all the same shape" This is opus 5. I haven't been super impressed with Opus 5 😅 Although they weren't real production impacting incidents, it continues to make stupid mistakes I just don't remember dealing with often in 4.x. I've actually been seeing better success with Codex + Sol recently, I always have them review each others work anyways, but yeh, kind of down on Claude atm.
1
75
Can't agree more, herdr has made managing multiple agents so much better, I used to just have 10 tabs and split screens in item, herdr organizes them really well
If you aren't using herdr for your agents, you are missing out big time. Absolutely destroys tmux, and the integrations on your coding agents with worktrees is a huge level up. Check it out here: herdr.dev/ Also, ensure to check out the quick start, watch the 6 min video. It shows you how to setup the integration workflow, and the skills setup here: youtube.com/watch?v=qnIu-Xu6… 6 minutes, and completely change your coding experience for the better. Guarantee it. Best shell I have ever used.
2
145
Dan Lussier retweeted
JUST IN: Tech employee receives email from HR after company review flags 114 instances of profanity in his Claude chats over one week.
19
48
2
1,577
167,915
"Beyond the Vulnerability Apocalypse: Scaling Your Basics and Vulnerability Management" bit.ly/4fQ933A <- a bit high level, sure, but hopefully useful for our bosses and their bosses :-)
3
9
56
5,949
Excited to announce a new nano siem partnership with @tenzir_company who can chop up your data before landing it directly into Clickhouse (OCSF Schema) and so much more, take a look today! nano.rs/partners/tenzir/
1
3
6
181
I had the chance to chat with the @CloudSecPodcast folks to discuss my product, nano siem, as well as AI in security and other topics. It was a lot of fun, hope everyone checks it out! Thanks to Kyle and Timothy at Google. youtu.be/iavB_TeLgvk?is=1Vog…
2
4
439
Working on implementing data rbac and I love claude's estimated times "10-12d" maybe 10-12 minutes 😅
50
so today I focused on the prevalence feature in nano, I noticed that it would OOM the search pod at times due to the nature of the queries on smaller instances. So, I had claude perform an adversarial review of it and it identified the key areas of struggle 1/?
1
59
and sure enough, codex landed a major one around filtering out results that should've been included.. so utilizing a single coding agent will get you really far, but where it matters (like a SIEM), you need to have additional external reviews (codex, or whatever you like) 6/?
1
13
the build is now running with the fixes and going through the CI pipeline validating open core and enterprise editions work alike, then it'll be a few hours of actual hands on testing and validation.. that said all of the coding/checking it does saves so much time
6
I'm gonna start posting what it's like using coding agents to build a siem. I've had nano (nano.rs) live for about a month, I figure it could be useful for people who may want to ship tools. To start: you don't need crazy insane coding harnesses etc 1/?
2
1
101
This translates into what I do with the backend as well, when building prevalence tracking I went through many permutations to figure out the right path for it, trade off of query time and valuable entries etc 13/?
1
10
So yeah.. I'll keep posting now as I build, if you're interested - join in, I know for regular app devs most of this is common stuff, but I built an entire feature rich siem in 6 months outside normal working hours, so there are definitely some differences I'll keep posting about
9