XORS Studio

We build software that powers the AI age

[XORS Studio @xorssoftware]

Our code reviewer has run on the wrong model for months, and on a public benchmark that mattered far less than our prompt did
https://t.co/7ZzXNehQnE

[XORS Studio @xorssoftware]

Most container CVEs in a SOC 2 audit have no fix, so we wrote up how we handled the rest for a client
https://t.co/w6IAcy7qEk

[XORS Studio @xorssoftware]

We coached a university cybersecurity team to a top-three finish at nationals, then turned that coaching into software that preps engineers for Anthropic's AI agent exam

https://t.co/PxkLw0EGwX

[XORS Studio @xorssoftware]

Craft costs a little up front and saves a lot later. A short note on why we bother

https://t.co/Ry5Efas4Vj

[XORS Studio @xorssoftware]

Our definition of done includes deleting the code you replaced

https://t.co/SXWfkbMDeS

[XORS Studio @xorssoftware]

Everyone on our team is senior. Four habits that come with that

https://t.co/EUydZsOduZ

[XORS Studio @xorssoftware]

We built a 28-line cold DM generator, then went back to making proposal pages by hand

https://t.co/kvtQFtAEm4

[XORS Studio @xorssoftware]

Flightwall serves tens of millions of requests a day. Some notes on keeping it fast

https://t.co/CweRmBb4fG

[XORS Studio @xorssoftware]

Notes from the AI workshop we ran for 100 founders. Our favorite: $60 of Opus turned an 89 minute job into 15

https://t.co/HZ7qCmZrwV

[XORS Studio @xorssoftware]

We shipped Sage Intacct for Float. One reconnect wiped the GL coding on every transaction, so we wrote down how we fixed it

https://t.co/L0TC6rLKjJ

[XORS Studio @xorssoftware]

We wrote a paper on catching the bugs that hide between microservices, and it got into SEKE 2026

https://t.co/ekW32o2L6I

[XORS Studio @xorssoftware]

Code is only real when it has been shipped, and only good once it has been battle tested.

Most founder's won't figure this out until their vibe coded prototype falls apart.

[XORS Studio @xorssoftware]

Most People lurk on LinkedIn. That's a mistake.

Linked is the highest leverage place to grow your brand and network. https://t.co/gyJoBWgxrK makes it easy:

✍️ Writes in your voice (no filler)
🎨 Designs screenshot-worthy graphics
📅 Schedules & publishes directly

#LinkedIn

[XORS Studio @xorssoftware]

The best devs don't just push code, they ship products. XORS just shipped 2:

Quillbird: AI ghostwriter, in your voice, drafts + auto publishes #LinkedIn posts. https://t.co/a5U0S0JRgR

Whetstone: AI tutor for (#CISSP/#OSCP), makes you think not memorize. https://t.co/2RQ8nEBo0F

[XORS Studio @xorssoftware]

Today, building a personal brand is invaluable, and LinkedIn Posting is one of the best ways to do it

However, most people face barriers, due to a lack of time, content and inability to consistently post

Remove the friction and grow your linkedin with https://t.co/1zUs6xaHPV👇

[Ahmed Panju @ahmed_xors]

Meant to post on LinkedIn all week. Then the week ended.

Again. And Again.

So I built Quillbird: tell it who to reach, it learns your voice, drafts posts + infographics & auto publishes on your schedule.

https://t.co/oyphIyjiI7

[XORS Studio @xorssoftware]

Preparing for Security cert exams is high stakes: each test cost $1,700.

Most prep tools are flashcards at premium prices.

XORS built Whetstone, an AI native, Socratic, AI tutor, to help you think instead of pattern match.

Try today 👇
https://t.co/0M81cbsJGY
#CISSP #OSCP

[Xiangan He @xBalbinus]

The cert industry is broken.

It charges $1,749 to fail an exam, then $1,749 again to retake it.

The "prep tools" you're supposed to buy on top of that are flashcard apps that haven't changed since 2010.

That's the business model. Steep pricing, closed-source content, and zero adaptive tooling.

We built Whetstone to fix it.

It’s AI-native, Socratic, and scenario-based. It teaches you to think instead of pattern-match.

We demoed it with engineers at Lazer Technologies and got 10 people to pass the Claude Code cert using it.

Today we're open-sourcing the whole thing. https://t.co/JxKRpXFNOC

If you've ever paid to retake an exam because the prep tool didn't actually teach you anything, this is for you.

Grab some time on my calendar below if you want to get your org to pass the exam👇

[Ahmed Panju @ahmed_xors]

Meant to post on LinkedIn all week. Then the week ended.

Again. And Again.

So I built Quillbird: tell it who to reach, it learns your voice, drafts posts + infographics & auto publishes on your schedule.

https://t.co/oyphIyjiI7

[Xiangan He @xBalbinus]

The TanStack hack should scare you.

It certainly scares me.

On May 11th, 84 malicious versions were published across 42 TanStack packages, including tanstack/react-router, 12.7M weekly downloads.

The attacker didn't brute force anything. They literally just chained three vulnerabilities to hijack TanStack's own release pipeline and publish malicious packages as TanStack itself, with Valid SLSA Level 3 provenance. 

Sigstore verified it as well because, technically, the pipeline was legitimate.

The payload harvested AWS credentials, SSH keys, GitHub tokens, Kubernetes service accounts, and Claude Code session history. Then self-propagated to 170+ packages across unrelated namespaces. 

Oh, and if you revoked the stolen token, a dead-man's switch ran rm -rf ~/ on your home directory.

This is exactly why the XORS starter kit is intentionally lean.

Next.js, Tailwind, ShadCN, Elysia, Biome, TypeScript. That's it.

Every dependency you add is a new trust relationship. You're not just installing a package, you're inheriting the security posture of every maintainer, contributor, and workflow that touches it.

Leaner dependency graph = smaller attack surface.

The best security decision is often just asking yourself: do you actually need this?

[XORS Studio @xorssoftware]

AI can write code, pass tests, and look clean on the surface, but functionality is not production ready.

Teams purely vibe coding face compounding issues in security, scalability, and iterability, until things falls apart.

The best devs don't just ship fast, they ship right.

[XORS Studio @xorssoftware]

Most teams building face 2 bad options:
1. spend months recruiting + high salary on the right engineer
2. settle for contractors who ship mediocre code

Both have huge risk

XORS is the 3rd option: Senior engineers, elite execution, total alignment
https://t.co/AP1vjdHbCM