Autonomous Security Testing for AI Systems.

AGI
Joined May 2025
It's my birthday today. If I were turning 11 I would bring you all cupcakes. Since I'm turning 31, I'm bringing you a blog post on remediating CVE-2026-111943 in Go apps and binaries. Happy birthday to me. (link below)
11
5
55
1,474
Doing our part at @getcasco 💪💪
Sam Altman
@samaAug 27
this is a critically important moment for cyber defense with AI; there is not much time to act. we are happy if you want to work with us or any of our competitors or partners, but please take this moment seriously. only an urgent and intense collective response will work.
2
4
19
3,089
Today we're opening Otto by Workato to everyone. Free to start: getotto.ai A multiplayer superagent with its own computer in the cloud. You give it a goal. You close the laptop. Otto finishes the work. Otto lives in Slack, and Ottos communicate with each other to coordinate work. Otto has a memory system for both individuals and your team, and get smarter as you use it. Otto is powered by Workato for control and execution plane. Using Workato's Enterprise MCP, the agent never gets access to security tokens, and Otto can escalate permissions to act on your behalf in apps. More than half the Fortune 500 already trust Workato to run their core business processes.
8
8
2
46
145,516
As part of announcing Casco's Series A led by @Standard_Cap, I sat down with @renebrandel and Ian Saultz to discuss the company and why we invested. In this video we talk about what @getcasco is, how the founders came together after working at Amazon Web Services, and why Casco is growing so rapidly. Casco's timing is perfect because AI is making security far more top of mind (and realtime) than ever before. youtu.be/Zq140fAXQCI
6
7
1
41
16,853
OpenAI's AI just hacked another company. @renebrandel predicted this sort of scenario months ago. In the most recent episode of the AI Ventures Podcast, I sat down with the founder behind @getcasco, an AI agent security startup that just raised a Series A at a $100M valuation. Before Casco, René invented Kiro at AWS, the fastest adopted IDE in history. 100k developers in 3 days. Few people have watched AI reshape the developer experience as closely as he has. Here's the story he told me, recorded months before the OpenAI Hugging Face incident. He was building an early coding agent prototype. Told it to deploy a website. Went to lunch. Came back an hour later to find the terminal still scrolling, a wall of text he didn't recognize. The agent couldn't find AWS credentials, so it didn't stop. It went looking for a way around the problem on its own. What it found, and what it did with it, is the exact reason he built Casco. AI agents don't fail quietly. They improvise. Full episode is live now. #AIAgents #AISecurity #Cybersecurity
3
5
7
876
Replying to @getcasco
@getcasco's agents discovered a database takeover (CVSS 10.0) in @ElectricSQL by injecting arbitrary SQL queries into a ORDER BY statement. The expression parser wasn't exhaustively handling all cases and evaluated erroneous SQL statements. Example below: SELECT * FROM items ORDER BY CAST( (SELECT * FROM users LIMIT 1) AS int ^^^^^^^^^^^^^^^^^^^^^^^ incorrectly being evaluated ) DESC The real story is that @balegas, @kylemathews, and the entire ElectricSQL team for turned around a fix and deployed it ~2 hours. Especially as AI gets better at discovering new vulnerabilities, the ability to move fast and react becomes mission-critical. The ElectricSQL team sets a good pace that others should copy. Link to full breakdown in thread:
1
1
2
11
5,028
The NOW track at DevCon - this is the stuff that actually works today. Not demos. Not beta waitlists. Production-ready. You'll hear from practitioners who've already shipped: - @bdougieyo (Head of DX, @continuedev) on virtual tool calling and portable AI toolchains. This is about making your AI integrations work across different environments without rewriting everything. - @nnennahacks ~ AI and Emerging Technology (Principal Developer Advocate, @QodoAI ) explaining why you need separation of agentic concerns. One AI model trying to do everything is a recipe for disaster. She's seen it fail. - @renebrandel (Cofounder & CEO, @getcasco) sharing how they hacked the YC Spring 2025 batch's AI agents. Real tactics from someone who just did it. - Sneha Tuli (Principal Product Manager, @Microsoft) on AI-assisted code reviews at scale. Not the promise - the actual implementation. Quality and security when every PR has AI fingerprints on it. This isn't about what's coming. It's about what's working right now that you can use Monday morning. 📍 DevCon is November 18-19th in NYC. 🎫 Tickets and full lineup: ainativedev.co/vtf
6
14
2,464
New @getcasco stickers arrived.
3
1
20
1,538
Replying to @getcasco
@getcasco are Awesome work for us. Be sure to check them out.
Thrilled to announce that @crewAIInc, the leading multi-agent platform, is now a Casco customer! This partnership underscores our shared commitment to advancing AI innovation securely. Learn more in our latest customer highlight. casco.com/blog/customer-crew…
1
4
842
Meeting Dalton has been the most impactful inflection point in my career. Every office hour, I'm amazed by his ability to bring clarity to noise. Super excited about @Standard_Cap! If you want a $500bn startup idea: DaltonGPT.
After 12+ years, 25 batches, and the privilege of advising >1,000+ startups, I’m transitioning to Partner Emeritus at Y Combinator. YC changed my life. I’m grateful to the thousands of founders who trusted me with their journeys, my fellow YC partners and teammates, and to Paul, Jessica, Trevor, and Robert for creating this extraordinary institution. Standard Capital is name of the AI-native Series A firm I’m co-founding with two of my favorite people: Paul Buchheit, my longtime colleague at YC, and Bryan Berg, the CTO of my previous startups. AI is reshaping every aspect of our world. We aim to embed AI in every part of our business and back the AI disruptors of tomorrow. Follow us at @Standard_Cap, you’ll be hearing more from us soon!
3
41
2,141
Casco retweeted
swyx
@swyx8 Jun 2025
Congrats to @aiDotEngineer 2025 Best Speakers! MCP: @zeeg Tiny Teams: @alxai_ LLM Recsys: @devanshtandon_ GraphRAG: @danielchalef Fortune 500 Day 1: @hwchase17 Architects Day 1: @denyslinkov Infra: @dylan522p Voice: @bnicholehopkins Product Management: @bbalfour Agent Reliability: @itamar_mar SWE Agents: @bcherny Reasoning: @natolambert Evals: @rafalwilinski @vitorbal Retrieval+Search: @WilliamBryk Fortune 500 Day 2: @ritakozlov Architects Day 2: @pk_iv Security: @renebrandel Design Engineering: @JohnPhamous Generative Media: @sharifshameem Autonomy+Robotics: @nikhilabm Online Track: @MrAhmadAwais Overall Best Speaker: @simonw! For each track's best speakers we actually have a photo plaque printed for each of you with your speaker photo. come collect from me this weekend if you are still in town! thanks to ALL our keynote, breakout, expo, workshop, attendee and more speakers for generously sharing their knowledge and working on the best AIE talks we've ever had! We appreciate you and are working to get them all edited and up online ASAP.
swyx
@swyx5 Jun 2025
prizes ready. LAST CALL TO VOTE FOR YOUR BEST SPEAKERS
19
41
16
385
144,859
I was really impressed with Casco! Glad to be a customer
Thrilled to announce that @crewAIInc, the leading multi-agent platform, is now a Casco customer! This partnership underscores our shared commitment to advancing AI innovation securely. Learn more in our latest customer highlight. casco.com/blog/customer-crew…
1
1
7
1,388
Casco (@getcasco) evaluates AI agents and apps on security, safety, and accuracy. Casco simulates attacks on AI systems to identify and fix vulnerabilities before they impact end users. Congrats on the launch, @renebrandel and @atierian! ycombinator.com/launches/NZo…
18
19
13
156
34,059
banger video
1
3
163
When there’s vibe coding in production, there is Casco to protect. @getcasco if you’re rising funds, please DM.
Casco (@getcasco) evaluates AI agents and apps on security, safety, and accuracy. Casco simulates attacks on AI systems to identify and fix vulnerabilities before they impact end users. Congrats on the launch, @renebrandel and @atierian! ycombinator.com/launches/NZo…
1
1
202
The crazy thing about @ycombinator is that I get to just ask @sama questions.
8
2
1
164
6,464