asadeddin
Joined 12 years ago
Karma
163
Submissions
69
Member since
Oct 14
Founder of Corgea - corgea.com
Twitter: asadeddin
View on Hacker NewsRecent submissions
Comment · 4 months ago
OpenAI building security tooling is the natural next step after AI-powered code generation, if AI writes the code, AI will need to find and fix the bugs in it too. The interesting question is whether this stays infra-focused or moves toward application-layer security.
We wrote a paper about it: https://corgea.com/blog/given-enough-inference-all-bugs-all-...
Comment · 4 months ago
Full disclosure, Ahmad, CEO at Corgea.
Interesting approach, catching vulns at commit time before CI runs saves cycles. The challenge is always false positive rate at that stage and the AI inference time. How fast is the review? I saw the demo video and it seems you cut to the results.
Comment · 4 months ago
Delaying vulnerability disclosure for political reasons undermines the entire coordinated disclosure model. If researchers learn that findings get buried when inconvenient, they stop reporting through official channels.
Comment · 4 months ago
The Corgea team has found a High vulnerability in Axios using our security research agent. This 0-day affects millions of globally. The cost of finding this vulnerability was <$10 and 15 mins of time. It didn't use Mythos or Fable but rather GPT-5.4 which is a fraction of the cost of these systems.