Daniel Rabinovich

Head of Growth @ Mindfort (YC X25)

[Daniel Rabinovich @blownapp]

@OpenAI honest thoughts: you're now getting enterprises 10x'ing the amt of data they are now trusting to codex security. The truth is static code analysis probably won't be enough if you truly want to keep these apps safe.

I think attackers are going to have a field day with this one.

[Daniel Rabinovich @blownapp]

Really excited for this one -> there's going to be a fresh battleground to start claiming on search again 🙏

[Chrome for Developers @ChromiumDev]

Prepare your site for AI agent interaction with Lighthouse → https://t.co/5myVWdLZd9

If you want AI agents to actually navigate your site properly, the new experimental audit in Lighthouse lets you see:
☀️ Discoverability for AI agents
⚡ WebMCP integration
👀 AI accessibility

#GoogleIO

[Daniel Rabinovich @blownapp]

@ChromiumDev Google acknowledging llms.txt is insane.

[Daniel Rabinovich @blownapp]

@ClaudeDevs still doesn't address what happens when all those lines compile...

[MindFort AI @mindfort]

MindFort is now available in Slack.

Tag @Mindfort to trigger an assessment, triage a bug report, validate a fix, or get a remediation.

Security agents, where your team already works.

https://t.co/XiErJXNvLd

[Daniel Rabinovich @blownapp]

Mythos-1-preview is soon to release.

Yes, it will replace cyber startups, but only the ones who are doing low-level code analysis.

Mythos by-itself still won't be able to truly test in runtime (with good results) + do all of the triaging, compliance reporting, + integration with existing stacks, + more that have now become the moat.

[Daniel Rabinovich @blownapp]

RT @mindfort: Today, we're excited to announce White Box, the latest advancement in runtime agent security that lets MindFort agents perfor…

[MindFort AI @mindfort]

Ever wondered how agents are impacting cyber and offensive security?

We're hosting a free live webinar to help answer those questions, and show you how to stay ahead on defense in the age of AI.

Join us on May 22nd, with security experts @BVeiseh and @AkulGupta30 joining us.

Register here: https://t.co/0XBFcUsGf8

[Daniel Rabinovich @blownapp]

@gdb codebase security doesn't always equal prod security 🤷‍♂️

[Daniel Rabinovich @blownapp]

daybreak is gpt-5.5 grading code from the same model family that helped write it. another reason why you should be testing in runtime.

[Daniel Rabinovich @blownapp]

@samiannoesis @Dr_Singularity only the companies in glasswing get actual access

[Daniel Rabinovich @blownapp]

@DharmaSamu @benln 5 / week from what I remember

[Daniel Rabinovich @blownapp]

@tonybuildd @benln They will reply to you, response rates are much higher if you’re messaging is good, since lower volume of apps to review

[Daniel Rabinovich @blownapp]

@securecheckio @SuhailKakar waf controls and protections are already being worked around by agents. Offense is really the best defense.

An agent properly scoped will not cause any repercussions or just test in dev.

[Daniel Rabinovich @blownapp]

@securecheckio @SuhailKakar I mean yea, but my point comes back to testing in runtime and doing continuous pentesting vs just doing a blind code scan. A lot of false positives arise because ai sast tools have to guess on how M's of lines of code will interact

[Daniel Rabinovich @blownapp]

@AnthropicAI *supposedly has the most powerful model ever that caught previously unknown vulns in freebsd*

*Weeks later asks for human help*

[Daniel Rabinovich @blownapp]

Every university and school just got put on notice today.

Only a matter of time before ShinyHunters thinks about going for more expensive breaches.

[Daniel Rabinovich @blownapp]

Canvas just got hacked. If pen-testing continuously wasn't top of mind, it is now.

[Daniel Rabinovich @blownapp]

/goal secure my api (surely this works)