CodeAnt AI (YC W24) (@CodeAntAI) / X

CodeAnt AI (YC W24)

148 posts

CodeAnt AI (YC W24)

@CodeAntAI

AI Offensive and Defensive Security codeant.ai

San Francisco Bay Area

Joined January 2024

Pinned
CodeAnt AI (YC W24)
@CodeAntAI
Mar 5
Our AI Code Review just found a CVSS 10.0 vulnerability. CVE-2026-29000 The highest possible severity. It had been sitting in pac4j, a widely used Java authentication library, for nearly 6 years. No static scanner found it. No human reviewer found it. Our AI code reviewer
CodeAnt AI (YC W24)
@CodeAntAI
Mar 19
Martian just released the industry's first independent code review benchmark. 12+ tools evaluated on real security patches. CodeAnt AI: #1
CodeAnt AI (YC W24)
@CodeAntAI
Mar 12
We've disclosed 84 zero-day vulnerabilities in the last 1.5 months. This is what we learned. Every security tool you use runs on the same backbone CVEs and the NVD database. Your tool pulls those CVEs, scans your code, and tells you if you're affected. That's it. That's the
00:00
CodeAnt AI (YC W24)
@CodeAntAI
Mar 6
Yesterday we published CVE-2026-29000, a CVSS 10 authentication bypass in pac4j-jwt. An attacker with just the server's RSA public key can forge a JWT and log in as admin. No secrets needed. No user interaction. The key that's designed to be public is enough. That was the
CodeAnt AI (YC W24)
@CodeAntAI
Mar 6
225 Maven artifacts and 131 public GitHub repositories depend on pac4j-jwt, a library with a CVSS 10.0 authentication bypass (CVE-2026-29000), found by our AI code reviewer, that allows attackers to impersonate any user including admins using only the server's public key. We are
See @CodeAntAI's full profile
Sign up
Log in

See @CodeAntAI's full profile