Tracebit

If you are in San Fransisco this Sunday 22nd March for @BSidesSF or @OneRSAC we'd love for you to join us for Rooftop drinks! ☀️ We're co-hosting with @SocketSecurity , @csideai, @RunReveal and @KeycardLabs . Sign up here: luma.com/t9iaikrx

@bryntaylor99 @lovart_ai @protogeridis @thenickpattison @bentenwoodring @devinsfountain @clayxstudio @decio_emanuel @officiallyiru @nickygrunfeld @llama_index @tryeasehealth Thanks @bryntaylor99 for an amazing job!

New sites added to a1.gallery this week ↓ Featuring: @lovart_ai, @protogeridis, @thenickpattison, @bentenwoodring, @devinsfountain, @clayxstudio, @tracebit_com, @decio_emanuel, @bryntaylor99, @officiallyiru, @nickygrunfeld, @llama_index, @tryeasehealth, @littleplainsxo, @mrcntoine

@0xdabbad00 The best cloud sec event there is!

The CFPs for fwd:cloudsec and Black Hat each close this Friday. Both are prestigious infosec conferences, but fwd:cloudsec wins for location (outside Seattle vs Las Vegas 🙅‍♂️) and focus (350 people vs 20,000). fwdcloudsec.org/conference/nor…

@mattturck @DavidWaltcher @FirstMarkCap 💯 thanks @matturck!

@DavidWaltcher @FirstMarkCap @tracebit_com Let's go! 🚀🚀🚀

Thrilled to announce that @FirstMarkCap has led the Series A in @tracebit_com , the company building the category-defining assume breach platform for the AI era, and I am joining the board. Our thesis is simple: prevention and zero trust alone are no longer enough. AI is expanding the attack surface faster than any team can defend it, and the smartest CISOs have stopped asking 'how do I keep attackers out' and started asking 'how do I catch them the moment they're in, before they can do any damage?' That's exactly what Tracebit does, and we couldn't be more excited to partner with Andy, Sam Cox and the rest of the team. cc @Accel / @algovc, @TapestryVC, @MMC_Ventures, and CCL.

@FirstMarkCap Very excited to work together!

Thrilled to announce our investment in @tracebit_com, the cybersecurity platform built for the “assume breach” era.

BIG NEWS! We've raised our Series A, bringing total funding to $25M 🎉 Led by @FirstMarkCap and joined by @Accel , @MMC_Ventures , @TapestryVC and CCL. This next phase is all about broader coverage and bigger features, with GCP support, Perimeter Canaries, and Deceptive Artifacts all shipping this quarter. Grateful to our customers, team, and investors.

@richardfan1126 Nice work!

Securing #AIAagents is difficult, even if it's designed to do good things. How about an agent designed to do bad things? I tried hacking the AWS Security Agent and here is what I’ve found. #AI #AWS #CloudSecurity #CyberSecurity #AISecurity #AgenticAI blog.richardfan.xyz/2026/03/14/pen…

If you haven't already watched it, @mattjay at Vulnerable U released an amazing video where he breaks down Shai-Hulud 2.0. Link here to to check it out: youtube.com/watch?v=5gqT74…

The blog post: tracebit.com/blog/do-canari…

Security teams often adopt high-confidence detections late. In software engineering, we invest early in a small number of high-fidelity “this should never happen” signals - like the app going down. We believe that security should be no different! Why security canaries belong at the start of your program 👇

Spotify: open.spotify.com/episode/4Ys3Y2… Apple Podcasts: podcasts.apple.com/us/podcast/kev…

🎮 Episode 4 of Canaries in the Wild is now live with Kevin Conley, Team Lead and Principal Security Engineer of the Deception Technology team at Riot Games. Kevin has spent years building and running Riot's deception program at massive scale - protecting one of the world's largest gaming platforms with hundreds of millions of players. He brings practical experience from building the program and operating it day-to-day. In this episode, Kevin breaks down why thinking like an attacker is fundamental to effective canary placement, how to measure deception program success, and the psychological impact of deception on attackers. Listen here: youtube.com/watch?v=87HAHP…

🚀 As we get to the end of the year, it's a great time to reflect. Here are our top 3 posts of 2025: 1. Code Execution Through Deception: Gemini AI CLI Hijack 2. Why Tracebit is written in C# 3. The full costs of building your own Canary Program Hope you enjoyed this year's posts and wishing you a happy new year! 🎉

Last week we launched Tracebit Community Edition. The team may have made it look easy, but getting it right took a monumental effort. Our CTO Sam breaks down what went into it - from solving the "stealth problem" to shipping our first cross-platform CLI. Read: tracebit.com/blog/building-…