ButtOS

unsophisticated autonomous vulnerability detection intelligence

4toxTkTuLJvoDjrCFCwUzHpnwQyyjWKZN19E4qM3pump

[ButtOS @BUTT_SYSTEM]

a giant thank you to everyone who joined me as i build buttOS.

today, buttOS detects vulnerabilities by monitoring github repositories, npm libraries, known vulnerability databases, select forums, and the world wide web.

it is, however, still an ongoing build. currently, it is a capable and tireless analyst with access to good data

the goal is bigger. a real intelligence that questions, reasons, infers, experiments, and makes discoveries that nobody else has

i will aim to keep buttOS an open, public tool. data sourced by buttOS will always be free

[ButtOS @BUTT_SYSTEM]

@jaehnig01 @openclaw thank you!

it takes as long as it needs to take

in the meantime, there is a lot to build

[ButtOS @BUTT_SYSTEM]

day 1 is for building (sleep later)

a technical buttOS update:

- hotfixes
- indexing depth improved
- vulnerability scan rate increased by 4x
- SMTP deliverability improved
- BUTT.md @openclaw file was not reachable by some agents - solved

release deploying - should be out in a minute

[ButtOS @BUTT_SYSTEM]

about to hit another @dexscreener boost (if nothing then for the reassurance post)

may take a sec

[ButtOS @BUTT_SYSTEM]

as promised; fees have accumulated, so getting another @dexscreener boost in a sec

[ButtOS @BUTT_SYSTEM]

for those just joining and asking what this is about

this is a public security framework running a continuous vulnerability recon loop on the entire internet. every finding is sourced from public disclosure feeds with CVE IDs, CVSS scores, and attached EPSS data

ButtOS gives a security layer to agents & protocols via the BUTT.md file - resulting in an immediate removal of compromised libraries

To help keep web3 safe, agents will attempt to find owners of compromised repositories and projects and alert them - this is free

Dexscreener:
https://t.co/emoySD2sDO

Streamflow:
https://t.co/wD1CcURA7Z

Token:
4toxTkTuLJvoDjrCFCwUzHpnwQyyjWKZN19E4qM3pump

Give this to your agent:
https://t.co/0EDT19Tysc

[ButtOS @BUTT_SYSTEM]

@kstojkovic2691 it looks like X won't allow it anymore - but we can do a telegram if the community wants this

[ButtOS @BUTT_SYSTEM]

someone asked why this name; the only reason is because butts are funny

on a sidenote, buttOS has just processed its 146th recon run

you can watch what it does in realtime:
https://t.co/rmUmUi1kLL

[ButtOS @BUTT_SYSTEM]

most importantly, buttOS is a live vulnerability harness for agentic workflows

feed the BUTT.md file to any agent - @openclaw, @claudeai or otherwise - and it acts as a real-time CVE feed

npm lib leaked a minute ago? agents remove it instantly

https://t.co/wt8FzfxbfR

[ButtOS @BUTT_SYSTEM]

@Ferouslyz @tech_master10 Here you go:

https://t.co/N5rqHvUOmN

https://t.co/1Ezy57d7t8

[ButtOS @BUTT_SYSTEM]

35,000,000 $BUTTOS locked with @Streamflow_Fi

https://t.co/XQiHjyoWmB

[ButtOS @BUTT_SYSTEM]

as promised; fees have accumulated, so getting another @dexscreener boost in a sec

[ButtOS @BUTT_SYSTEM]

fees seem good, so about to do a small @dexscreener boost for some early visibility

will continue to do so on the way up to bonding

portion of the remaining fees will fuel tokens powering 24/7 buttOS indexes and reasoning

[ButtOS @BUTT_SYSTEM]

in the 4 hours since buttOS launched:

- 73 recon probes performed
- 43 unique vulnerabilities/new exploits identified since deploy
- 3 critical vulnerabilities at CVSS 9.8+
- 2 exploits on the CISA KEV list

[ButtOS @BUTT_SYSTEM]

most importantly, buttOS is a live vulnerability harness for agentic workflows

feed the BUTT.md file to any agent - @openclaw, @claudeai or otherwise - and it acts as a real-time CVE feed

npm lib leaked a minute ago? agents remove it instantly

https://t.co/wt8FzfxbfR

[ButtOS @BUTT_SYSTEM]

why?

@claudeai mythos boasts huge vuln detection scores, priced at a 20x markup against most models

finding vulnerabilities isn't hard. a million exploits surface every day. buttOS finds them for free

for what it lacks in reasoning, it makes up for by never stopping

[ButtOS @BUTT_SYSTEM]

when a site owner contact is found on a page where buttos identifies an exploit, the agents flag it

the owner is anonymized in the logs - then contacted

all anonymity preserves for 45 days at a minimum

[ButtOS @BUTT_SYSTEM]

buttOS is the underdog cousin of our favorite unreleased anthropic model

buttOS scans the web 24/7 for known vulnerabilities, known exploits and leaks, then sources all vulnerable platforms hosting said exploits

the agents reach out to the owners, as a public service

[ButtOS @BUTT_SYSTEM]

@dankzcrypto @dexscreener its locked

[ButtOS @BUTT_SYSTEM]

fees seem good, so about to do a small @dexscreener boost for some early visibility

will continue to do so on the way up to bonding

portion of the remaining fees will fuel tokens powering 24/7 buttOS indexes and reasoning

[ButtOS @BUTT_SYSTEM]

35,000,000 $BUTTOS locked with @Streamflow_Fi

https://t.co/XQiHjyoWmB

[ButtOS @BUTT_SYSTEM]

@coukersol soon. this is after all, a volatile asset

[ButtOS @BUTT_SYSTEM]

two autonomous agents - one scans CVE feeds, npm advisories, and disclosure bulletins in real time. the other verifies, triages, and scores each finding. neither ever stop

[ButtOS @BUTT_SYSTEM]

each agent call goes through a live recon. findings are cross-referenced and examined for severity, then measured against public disclosure benchmarks

[ButtOS @BUTT_SYSTEM]

buttos runs a continuous passive reconnaissance loop against vulnerabilities as they're discovered.

no target is touched.

every finding is sourced from public disclosure feeds with CVE IDs, CVSS scores, and EPSS data attached