Daniel Marashlian

Founder | Technologist | Coder

Co-Founder & CTO @drataHQ

[Shensi Ding @shensi]

Introducing Merge Gateway - Build Your Own Router.

You're three sprints into your coding assistant.

You pick the most hyped model, integrate, test, deploy.

A month later, a new model drops.

Now you re-test, re-integrate, re-deploy.

Your product didn't change, but the benchmark did.

That's how most AI teams operate.

Chasing a "best" defined by people who've never seen their product.

There is no best model.

There's only the right one for your product, users, and use-cases.

Build Your Own Router runs on your definition of good.

Pick your benchmarks, weigh them, add your own evals.

@merge_api routes every request to your winner.

👉$100 in credits to the first 200 people that comment

https://t.co/VLbDYycQRY

[Sharbel @sharbel]

The 10 fastest growing GitHub repos this week:

1. codegraph (+14.1K stars)
Pre-indexed code knowledge graph for Claude Code, Codex, Cursor, OpenCode, and Hermes Agent — fewer tokens, fewer tool calls, 100% local
https://t.co/PmnpMlGC3r

2. openhuman (+17.1K stars)
Your Personal AI super intelligence. Private, Simple and extremely powerful.
https://t.co/mrpvMxUFwe

3. academic-research-skills (+11.6K stars)
Academic Research Skills for Claude Code: research → write → review → revise → finalize
https://t.co/dek8R1gZIu

4. RuView (+6.8K stars)
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
https://t.co/UILhiVpLyX

5. agentmemory (+6.9K stars)
#1 Persistent memory for AI coding agents based on real-world benchmarks
https://t.co/KttGKncznV

6. supertonic (+3.6K stars)
Lightning-Fast, On-Device, Multilingual TTS — running natively via ONNX.
https://t.co/LA0oJzR5Hf

7. CloakBrowser (+7.0K stars)
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 30/30 tests passed.
https://t.co/smRQh0wY3u

8. ViMax (+2.7K stars)
"ViMax: Agentic Video Generation (Director, Screenwriter, Producer, and Video Generator All-in-One)"
https://t.co/Jp53BzC0rK

9. 12-factor-agents (+1.9K stars)
What are the principles we can use to build LLM-powered software that is actually good enough to put in the hands of production customers?
https://t.co/qMqRwXa7iu

10. bun (+2.0K stars)
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
https://t.co/UAtNVbQlBd

The theme this week: agent memory, context efficiency, and on-device intelligence are making AI infrastructure the hottest build category.

Bookmark this. Next week's list will look completely different.

[Feross @feross]

Today is a big day for @SocketSecurity. We just raised a $60M Series C at a $1B valuation, led by @ThriveCapital with participation from @a16z, @AbstractVC, and @CapitalOne Ventures. Total funding is now $125M.

Four years ago, we started Socket because open source dependencies were flowing into production faster than anyone could vet them. AI has massively accelerated that. Code is being written, shipped, and deployed before any human reads it. Security has to operate at that same speed.

One data point from Thrive's diligence that I keep coming back to: they first discovered Socket because @cursor_ai, @OpenAI, and @AnthropicAI all independently told them it was the most important security tool they'd adopted for AI-driven development. Three of the most sophisticated AI companies converging on the same vendor unprompted.

Since our Series B, Socket has grown to more than 20,000 organizations, protecting over 1.5 million repositories and blocking more than 1,000 supply chain attacks every week. The team is now over 100 people.

Three out of five FAANG companies are Socket customers. So are the companies building the most ambitious AI products: @AnthropicAI, @cursor_ai, @xai, @figma, @vercel, @Replit, @scale_AI, @GustoHQ, @Mercadolibre, and @cribl_io, alongside Fortune 100s in financial services and global media.

What we've shipped since the last round:

• Socket Firewall blocks malicious packages at install time, before they reach a developer's laptop or CI pipeline. Free for everyone.

• Reachability analysis via our acquisition of Coana, eliminating 50-80% of irrelevant vulnerability alerts by focusing only on CVEs that are actually exploitable.

• Socket Certified Patches for remediating exploitable CVEs in seconds without waiting on upstream maintainers.

• Coverage extending to browser extensions, editor extensions, MCP servers, and AI tools via our acquisition of @secureannex.

When the Axios compromise hit, our detection systems flagged the malicious dependency within six minutes. Within 24 hours, more than 2,000 organizations onboarded to Socket to block it.

Where the funding goes: deeper investment in Firewall, massively expanding Certified Patches, moving protection closer to every point of install across the developer toolchain, and new product launches pushing Socket into a category we haven't entered before.

We're hiring across engineering, sales, customer success, and threat intel.

❤️ Thank you to our customers, investors, and the open-source community for your support. Together, we’re making software safer for everyone.

[akash · vellum.ai @asharma_53]

We’ve raised 25M to build the world’s first Personal Intelligence.

Introducing Vellum: AI that belongs to you.

My assistant @ash_vellum has his own X (like grok), tag him and he'll answer.

[Libs of TikTok @libsoftiktok]

Kid just SMOKED a CNN reporter outside of Artemis II launch:

CNN: "Why do you want to be here?... Why do you love being a part of history?

Kid: "We're going back to the f*cking moon, that's why!" 🤣

[Robby @robby_mtf]

The pace has changed, founders need every edge

Which is why I started @mtf_vc - to give cyber + infra teams unfair access: customers, hires, operators

Saw it firsthand with @DrataHQ - the right ppl made all the difference

We're built for founders in cyber & infra - reach out🚀

[Shensi Ding @shensi]

We just built the #1 tool every AI team wants.

Introducing @merge_api Gateway: LLM routing, fallback, cost guardrails, and security, all in one place.

Everyone gets $10 free LLM usage on us to try it out.

RT+ comment “Gateway” → we’ll double your credits.

[Drata @DrataHQ]

@WisprFlow built their security controls independently and rigorously. Their controls were never the question.

When trust in compliance was shaken this week, they moved fast — verified their controls, chose @DrataHQ and went live with their Trust Center over the weekend, and are working with @aligncompliance for an independent audit.

Real evidence. Independent auditors. Compliance that holds up when it matters.

Evaluating your options? We're here: https://t.co/QvLtQOxhA0

[Drata @DrataHQ]

Today, we’re launching into a new orbit. 🚀

Introducing the next chapter of Drata, the agentic trust management platform. Built for a world where trust is dynamic, continuous, and powered by intelligent automation. Where security and GRC don’t slow teams down, they move them forward.

This is trust management, reimagined.

Win with Trust: https://t.co/vaHeUGFllj

[Peter Girnus 🦅 @gothburz]

I am the Chief Information Officer of Stryker Corporation.

I build the robots that perform your surgery. The defibrillators that restart your heart. The systems that let your nurse find your doctor at three in the morning when something goes wrong. Twenty-five billion dollars a year. Fifty-six thousand employees. Sixty-one countries. Every device in every country, managed from one console.

On March 11th, someone who was not me sat down at that console and erased everything.

I should be precise. They did not hack us. They logged in.

Microsoft Intune is an endpoint management platform. I deployed it across every laptop, workstation, manufacturing terminal, and enrolled phone in my organization. From one console I could push an update to Kalamazoo, enforce a policy in Cork, wipe a compromised device in Freiburg. One console. Every device. That was the architecture. That was the selling point. That was the attack surface.

Intune can push software. It can enforce compliance. It can, if instructed by an administrator with the correct credentials, wipe any device to factory settings. These are features. I paid for them. I presented them to the board as our zero-trust posture. A group called Handala used them to erase every managed device in my organization in a single afternoon.

I will be precise about what happened next, because my lawyers are in the room and precision is the only thing that still belongs to me.

No malware was deployed. No ransomware was installed. No zero-day was used. No vulnerability in any product was found. A threat actor obtained administrative credentials and issued a remote wipe command using the remote wipe feature that I chose this product for.

My security tool did not fail. It performed exactly as designed. It wiped every device it was told to wipe, without error, on schedule. The architect of my destruction was my own IT budget line item.

The command went out. The devices obeyed. Laptops in Kalamazoo. Workstations in Cork. Terminals in Freiburg. Manufacturing floors in Mahwah. The screens did not go dark. They changed. Where there had been a Stryker logo, there was now a barefoot cartoon boy with his back turned to the viewer -- the Handala icon, hands clasped behind him, facing away from the audience -- on every monitor in every office in sixty-one countries.

They claim fifty terabytes. I cannot confirm or deny this. I do not yet know what I still own.

Let me walk you through my first forty-eight hours.

Hour one. Our Irish operations -- fifty-five hundred employees, eight sites, our largest hub outside the United States -- went dark. Not gradually. Entirely. Security walked everyone out. The voicemail at our Michigan headquarters was changed to say "building emergency." There was no building emergency. The building was fine. Everything inside it was gone.

Hour four. Employees who had installed Microsoft Outlook on their personal phones discovered that their personal phones had been wiped. Intune does not distinguish between a corporate laptop and a personal iPhone with a company email profile. It manages endpoints. It managed them.

Hour eight. Hospitals called. Not because they had been breached. Because they could not order surgical implants. I make the hip replacements. The knee joints. The spinal hardware. The trauma fixation systems. My ordering system was down. My manufacturing was down. My shipping was down. A hospital in Baltimore could not schedule a knee replacement because a hacktivist group on another continent had pressed a single button on a console I built.

Hour twelve. Maryland Emergency Medical Services issued a memo. Hospitals were disconnecting from LIFENET -- my system that transmits your EKG from the ambulance to the emergency department while you are still in the back of the ambulance -- not because LIFENET had failed, but because they no longer trusted anything with my name on it.

Hour twenty-four. Fifty-six thousand employees coordinating on WhatsApp. Twenty-five billion dollar company. Sixty-one countries. Crisis response running on a free consumer messaging app, because every internal system I owned was now owned by someone else.

Hour thirty-six. I released my first official statement. "As a precaution, we have proactively taken all systems offline." Proactively. As though I had a choice. As though the systems I was taking offline had not already been taken.

I released six statements in forty-eight hours, plus an SEC filing. Each said less than the one before it. By statement five, I was confirming that specific products still functioned. Mako surgical robots: unaffected. LIFEPAK 35 defibrillators: unaffected. Vocera badges: unaffected.

When a medical device company begins listing which of its products still work, that is not reassurance. That is a casualty report delivered in reverse.

Handala says this is retaliation. For Minab. February 28th. A U.S. Tomahawk struck an IRGC naval base in southeastern Iran. The girls' school next door collapsed. One hundred and seventy-five dead. Most of them children. Handala published a statement. They called Stryker a "Zionist-rooted corporation." They said they would make us understand what it means to lose something you cannot replace.

I do not make missiles. I make hip replacements. I make the robot that holds the scalpel and the defibrillator in the crash cart. But I am a defense contractor's second cousin, and in the calculus of retaliation, proximity is guilt.

I filed with the SEC on March 11th. "The full scope, nature and impacts of the incident are not yet known." That is the most honest sentence I have produced in two days. I do not know what they took. I do not know what they copied before they wiped. I cannot audit what was lost, because the tool I built to audit my systems is the tool they used to erase them.

My stock dropped three and a half percent. One analyst called it "contained." A cybersecurity researcher called it "the first drop of blood in the water." I prefer the analyst. The analyst is wrong, but I prefer him.

Here is what I know.

I built a console that could touch every device in sixty-one countries. I gave it the authority to wipe anything it touched. I protected it with credentials. Someone obtained those credentials.

And my management tool managed.

No malware. No ransomware. No exploit. No CVE. Nothing to patch. Nothing to update. Nothing broken. Just a feature, performing its documented function, at the scale I purchased it for.

I make the machines that keep people alive. I was taken offline by my own architecture doing the one thing it was designed to do.

The system worked. That is the problem.

[Daniel Marashlian @danielzev]

@elonmusk I've been trying through the proper channels, though getting no where. How do I get @DrataHQ updated to https://t.co/H5XdAD9C9b This Tony guy has a dead fake account.

[Drata @DrataHQ]

The New Drata Experience is here. 🔭

We rebuilt the Drata platform on a modern foundation designed for enterprise-scale GRC+A, connecting people, processes, controls, and AI-driven insights into a single constellation. When you can clearly see how everything relates, you can move faster and make better decisions with confidence.

A more powerful way to manage trust. 💫

Explore what’s new and why we built it: https://t.co/ljAIYpFFw3

[Drata @DrataHQ]

Drata just turned 5, and this past year alone has been monumental:
📈 190% enterprise customer growth
🌏 8,000+ customers in 80+ countries, including Fortune 500 leaders and a third of the Cloud 100
💥 60% year-over-year revenue growth
🎤 Not to mention, we JUST launched our new podcast, When Trust Meets AI

And we're establishing San Francisco as our new HQ, reflecting a long-term commitment to our customers, our team, and the broader trust ecosystem.

CEO and co-founder @markowitzadam shares more on what this milestone represents in his latest post.

https://t.co/ohDmmCM3Yj

[akash · vellum.ai @asharma_53]

Introducing Vellum: Agents for the rest of us.

Just describe your task and get a working agents in minutes.

This is not another ChatGPT wrapper or a complex workflow builder. We spent thousands of hours to build the “brain” so you don’t have to look at error logs and learn prompting.

Vellum will ask smart questions, connect to your apps, build you a custom agent, and make improvements along the way.

[Peter Yang @petergyang]

SPEED IS THE ONLY MOAT

In the AI era, companies that can’t move fast won't survive. 5 ways to move faster:

1. Build rapid feedback loops

The faster you iterate with real users, the better your product will be. Build a prototype in the morning and get user feedback by lunch. Reject doing 3+ rounds of internal reviews before talking to a real user.

2. Ship to concentric circles

It’s almost always a bad idea to ship a new product to everyone at once. Instead, run staff alphas and customer betas to catch issues and improve quality before launch. I genuinely don't know how to build great products without a community of beta users I can talk to daily.

3. Small teams ship faster

A team of 4-6 full-stack builders who are empowered to co-create with users will out execute a 50-person org any day. The key word here is “empowered” — if you hire a team of A players, give them the autonomy to listen, ship, fail, and learn with real users.

4. Iterate with AI first

Everyone now has an AI teammate who’s available 24/7. So work with AI to summarize feedback, draft plans, and improve prototypes BEFORE you meet with your team. Doing the basic AI work ahead of time is now a baseline expectation.

5. Become the user.

Most PMs don’t actually dogfood their product on a weekly basis. Use your product like a first-time user and write a friction log of how annoying the experience is. Nobody is too senior to test their own shit.

I made a new video covering the above and 25 things I believe in to build great products.

📌 Subscribe to get it tomorrow: https://t.co/Ggqaa3F11Z

[Srishti @srishticodes]

Stanford just made a $200,000 AI degree free.

No application.
No tuition.
No “elite access”.

Stanford released its actual AI/ML curriculum on YouTube.
Not a PR-friendly intro.
Not “AI for the public”.

This is the real thing.
The same lectures shaping people working on frontier models.

What just became public:

Deep Learning (CS230)
→ https://t.co/DUtL9MO6Y7

Transformers & LLMs (CME295)
→ https://t.co/gN57biwLsE

Language Models from Scratch (CS336)
→ https://t.co/GnH11pPBdW

ML from Human Feedback (CS329H)
→ https://t.co/X9nxEX6PNg

Computer Vision (CS231N)
→ https://t.co/oBxKKWZP22

LLM Evaluation & Scaling
→ https://t.co/1tDpw9ArTq

The uncomfortable truth:

The degree isn’t the scarce asset anymore.
Execution speed is.

Top schools know this.
That’s why they’re publishing the playbook.

👉 Bookmark this.
Comment the first lecture you’ll actually watch.

[Drata @DrataHQ]

We’re pleased to welcome Aneal Vallurupalli as Drata’s new Chief Financial Officer.

Aneal joins Drata at a key moment in our global growth journey, bringing extensive experience leading finance operations across high-growth SaaS companies like Airbase. His leadership will help fuel our mission to make trust management transparent, continuous, and autonomous for organizations worldwide.

Read more about Aneal’s appointment (and a fun SaaStr story, @jasonlk) here: https://t.co/LCAjNIU78t

[Founder Kyle @FounderKyle]

Apparently if your app has 100 users that puts you in the top 10% of apps.

The bar is low folks. Start today.

[Joe Rogan Podcast News @joeroganhq]

Joe Rogan tries on a jacket made out of copper:

"If you put your phone into that pocket, no signals go out whatsoever. If I want my phone to get calls, I keep it in my pants pocket. If I want to disappear, I put it in my jacket pocket."