Continuous offensive security for modern engineering teams.
Joined April 2022
- Tweets 288
- Following 96
- Followers 3,263
- Likes 115
58 Photos and videos
Borg retweeted
Jun 3
PDF-based security reports are where findings go to die.
They slow down engineering, bury context, and turn remediation into archaeology.
Odin brings findings, tickets, integrations, and retesting into one workflow.
2
11
621
Borg retweeted
May 29
AI did not make software secure.
It made insecure software ship faster.
1
1
8
326
Another one!
We're slowly onboarding, let us know if you'd like to try it out!
Mar 23
🏆Another win for Mjolnir: our autonomous agentic pentesting agent just earned $2,000 bounty from Yearn.fi!
The bug: reflected XSS through the /api/vault/meta endpoint on the Yearn.fi frontend.
Because wallets are often already connected on the webapp, the impact could have been severe; including potential loss of funds.
Frontend security in crypto is not optional.
Thanks to @yearnfi for a smooth dialogue and quick mitigation! Issue has been fixed, ref: github.com/yearn/yearn.fi/co…
8
500
We are slowly opening this up for early access.
Send us a DM if you're interested in hearing more!
Mar 17
Our autonomous pentesting agent Mjolnir just got it's first finding confirmed and paid!
@borghq
1
9
652
Very important reminder for everyone in the space.
Let us help you prevent this from happening to your company - borgsecurity.io
7
343
Borg retweeted
Mar 10
today @borghq's autonomous hacking AI discovered a **huge** vulnerability on defi protocol with $20B TVL.
the vulnerability could have lead to loss of funds, and was in fact related to web2 infrastructure rather than their smart contracts.
benchmarking is cool and all, but the real battletest for agentic pentesting is bug bounties and real world testing with humans in the loop.
3
4
37
2,282
Borg retweeted
Mar 5
the team just cracked the code for **actual** agentic pentesting.
we beat other agentic pentesting frameworks and mastered complex attack chaining in agents
@borghq @sjaluu @LORD_RIAN_
3
21
7,751
The annual audit is a expired methodology.
Actually securing a stack requires a live feed of continuous testing. If your testing doesn't match your deployment velocity, you’re just operating on a 364-day security lag.
Stop paying for compliance PDFs.
Your security should be as alive as your development
10
195