Octane Security (@octane

Octane Security

760 posts

Octane Security

@octane_security

The AI-native security firm protecting mission-critical software.

New York

Joined July 2023

Affiliates Replies Articles Media

Pinned
Octane Security
@octane_security
Apr 20
Just three engines handle 99.7% of browser traffic. Octane found vulnerabilities in all of them. This is the same security analysis we've used to secure smart contracts. Now we're targeting the mission-critical applications the rest of the world runs on.
Octane Security
@octane_security
Jul 16
This is real defense-in-depth: audits, contests, formal verification, and AI-native analysis all on the same codebase. The best teams don't just pick a vendor, they build a security stack. Octane 🤝 @TenorFinance
Tenor
@TenorFinance
Jul 15
Replying to @TenorFinance
Thank you to the teams and researchers who helped us secure the Tenor codebase: @cantinasecurity, @sherlockdefi, @ObsidianAudits, @TrustSecAudits, @GuardianAudits, @octane_security, @ZeroCool_AI, @alexzoid for formal verification, and @blockaid_ for ongoing monitoring. Launch
Octane Security
@octane_security
Jul 14
.@openlayerco's stack had passed dependency scanning, secret scanning, GitHub and AWS-native scanning, and an annual third-party pentest. Then Octane's agentic analysis found a bug none of those tools are built to see. 🧵
Octane Security
@octane_security
Jul 14
Replying to @octane_security
Our analysis of AI-native codebases shows authorization is the dominant risk vector for this entire category of software. Cross-tenancy and access-control flaws lead the distribution by a wide margin.
Octane Security
@octane_security
Jun 25
Article
Where Your Bugs Hide Now: Findings From 1,200 Octane Reviews
AI-native workflows bring different risk profiles, which means your most important bugs have moved. Here's the data on where they went and why continuous, context-aware analysis is how to find them....
Octane Security
@octane_security
Jul 14
If your security stack is dependency scanning plus an annual pentest, you have coverage for the last decade's vulnerabilities and a major blind spot for this one's. Find your vulnerabilities before someone else does:
Reading Between the Lines: How Octane Found What Pentests Couldn't for Openlayer
From octane.security
Octane Security reposted
Octane Security
@octane_security
Jun 2
Maple's 97% true positive rate is the result of Octane's specialized detectors and continuous context refinement. This isn't a generic benchmark, it's what @maplefinance gets on every PR.
00:06
Maple
@maplefinance
Jun 2
At Maple, security is core to how we build. Over the last few months, @octane_security has become a key part of our development workflow. Throughout April, Octane maintained a 97% true positive rate, delivering high-signal findings.
Octane Security
@octane_security
Jul 2
Octane has been approved for @AnthropicAI's Cyber Verification Program. Verified access lets Octane continue to use frontier AI for legitimate vulnerability discovery at the level real security research demands. Here's the story of why that matters. 🧵
Octane Security
@octane_security
Jul 2
Replying to @octane_security
Cyber capability is no longer one risk category among many. It is now the gating criterion: the one thing that determines who gets access to the most powerful models on Earth. That's the world Octane has been building for since day one.
Dario Amodei
@DarioAmodei
Apr 7
Replying to @DarioAmodei
The dangers of getting this wrong are obvious, but if we get it right, there is a real opportunity to create a fundamentally more secure internet and world than we had before the advent of AI-powered cyber capabilities.
Octane Security
@octane_security
Jul 2
The Mythos/Fable saga proves the cybersecurity access gate is now real. The question for every company building mission-critical software is which side of it your security research runs on.
Octane Joins Anthropic’s Cyber Verification Program
From octane.security
Octane Security
@octane_security
Jun 26
"Explore wide, exploit deep" is exactly the workflow that won us the Monad audit contest. The synergy is that AI excels at breadth of coverage while humans bring an unmatched depth of judgement. Thanks for the shoutout @pkqs91 and congratulations on the five critical findings.
pkqs91
@pkqs91
Jun 25
Article
How I Made $200k With Codex in 3 Months
Earlier this year, I made $200,000 using Codex. The money came from Web3 bug bounties, which are programs where projects pay security researchers for live bugs. The public bounties can be found on my...
Octane Security
@octane_security
Jun 25
AI-native applications struggle with cross-tenant data exposure, frequently failing at the authorization layer. 🔓 Meanwhile, custom protocol logic is the biggest issue onchain. 🔗💥 We combed through 1,200 Octane analyses to map where your bugs are hiding now.
Octane Security
@octane_security
Jun 25
Article
Where Your Bugs Hide Now: Findings From 1,200 Octane Reviews
AI-native workflows bring different risk profiles, which means your most important bugs have moved. Here's the data on where they went and why continuous, context-aware analysis is how to find them....
Octane Security
@octane_security
Jun 25
Article
Where Your Bugs Hide Now: Findings From 1,200 Octane Reviews
AI-native workflows bring different risk profiles, which means your most important bugs have moved. Here's the data on where they went and why continuous, context-aware analysis is how to find them....