Borg

Experts in Web2 & Web3 security for penetration testing, zeroday research, risk management. For inquiries, contact us at

[alexander @a1exander]

PDF-based security reports are where findings go to die.

They slow down engineering, bury context, and turn remediation into archaeology.

Odin brings findings, tickets, integrations, and retesting into one workflow.

[alexander @a1exander]

AI did not make software secure.

It made insecure software ship faster.

[Borg @BorgHQ]

Borg just got a different look.

Still the same team that breaks what others can't.

[Borg @BorgHQ]

Track, detect, secure.

24/7

→ Use Borg

[Borg @BorgHQ]

Remediation: Rotate KitKats

[KITKAT @KITKAT]

Regarding recent press coverage

[Borg @BorgHQ]

Just gonna leave this here.

[Borg @BorgHQ]

Another one!

We're slowly onboarding, let us know if you'd like to try it out!

[alexander @a1exander]

🏆Another win for Mjolnir: our autonomous agentic pentesting agent just earned $2,000 bounty from https://t.co/bz4xIxRZds!

The bug: reflected XSS through the /api/vault/meta endpoint on the https://t.co/bz4xIxRZds frontend.

Because wallets are often already connected on the webapp, the impact could have been severe; including potential loss of funds.

Frontend security in crypto is not optional.

Thanks to @yearnfi for a smooth dialogue and quick mitigation! Issue has been fixed, ref: https://t.co/de6hiVAk4C

[Borg @BorgHQ]

A certain compliance firm....

[Borg @BorgHQ]

We are slowly opening this up for early access.

Send us a DM if you're interested in hearing more!

[alexander @a1exander]

Our autonomous pentesting agent Mjolnir just got it's first finding confirmed and paid!

@borghq

[Borg @BorgHQ]

Making a list

Let us know if you should be on it

[Borg @BorgHQ]

testing once = snapshot of old code
testing continuously = protection

> one shows you were safe.
> one keeps you safe.

[Borg @BorgHQ]

Very important reminder for everyone in the space.

Let us help you prevent this from happening to your company - https://t.co/MJY7PXzmzd

[Borg @BorgHQ]

The Borg team when we hear a company only does annual pentests

[alexander @a1exander]

today @borghq's autonomous hacking AI discovered a **huge** vulnerability on defi protocol with $20B TVL.

the vulnerability could have lead to loss of funds, and was in fact related to web2 infrastructure rather than their smart contracts.

benchmarking is cool and all, but the real battletest for agentic pentesting is bug bounties and real world testing with humans in the loop.

[sjalu @sjaluu]

Startup idea:

AI agents that write insecure code, so our AI pentesters have something to do

[alexander @a1exander]

the team just cracked the code for **actual** agentic pentesting.

we beat other agentic pentesting frameworks and mastered complex attack chaining in agents

@borghq @sjaluu @LORD_RIAN_

[Borg @BorgHQ]

Sometimes, the missing link to better sleep is a continuous, offensive security team.

[Borg @BorgHQ]

The annual audit is a expired methodology.

Actually securing a stack requires a live feed of continuous testing. If your testing doesn't match your deployment velocity, you’re just operating on a 364-day security lag.

Stop paying for compliance PDFs.

Your security should be as alive as your development