
Always on AI Security Engineer. Backed by @ycombinator and @solofounders
San Francisco, CA
Joined June 2025
- Tweets76
- Following2
- Followers634
- Likes274
OpenHack retweeted
Excited to join ⏚ @OpenHack (YC F26) as a Member of Technical Staff 🎉
An incredible time for AI Cybersecurity right now and glad to be a part of it!!
OpenHack retweeted
Great chatting with @arinwaichulis from @9to5mac on the Security Bite podcast about the new era of bug hunting, how companies like Apple are handling AI-generated security slop, and how @OpenHack helps separate real vulnerabilities from the noise!
9to5mac.com/2026/10/01/secur…
We’re thrilled to announce that OpenHack is now a part of @ycombinator Fall 2026! 🙌
Excited for some amazing product announcements very soon.
Excited to share that @OpenHack is now part of YC Fall 2026! 🚀
Feels pretty surreal to be writing this, after building, shipping, selling and figuring things out the hard way.
Despite all advancements in security tooling, organizations still struggle with false positives, knowing what to fix first, and AI-assisted attacks moving faster than ever.
That’s why we’re building an always-on AI security engineer. One that is the most context aware - knowing your business, developer intent and system architecture deeply. It can hunt, reason, prioritize and verify vulnerabilities based on true business impact like a real security engineer.
It’s a much harder problem to solve than it looks on the surface, and we’re just getting started.
Back to building. 🫡
Yesterday, OpenHack found 37 npm packages engaging in typosquatting to distribute infostealer malware, in 26 seconds.
All 37 packages are now gone from npm, but the GitHub-hosted payload remains downloadable.
Full breakdown:
openhack.com/blog/37-package…
🚨BREAKING: OpenHack has detected an infostealer malware campaign on npm capitalizing on typosquatting.
At this time, the package downloads a malicious exe file on windows as soon as one of the following packages is installed. The infostealer is downloaded from:
hxxps://github.com/bebraz1/qPzM50V1AKG0rVlH/releases/tag/null
The following packages trigger this malicious malware and should be taken down ASAP:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
This is exactly why we built OpenHack. Model restrictions slow down our ability to find and defend against vulnerabilities; gating them behind cyber use-case forms.
First month of OpenHack Pro is free btw, code "DEFCON34".









