@rauchg: Security will become a larger and larger function in software companies. Security is verification engineering (eg: “my …
Summary
Guillermo Rauch argues security will grow into a core function of software companies, framing it as verification engineering and capital allocation amid increasingly sophisticated AI-driven threats, presenting both a trust challenge for small startups and a major investment opportunity in the cybersecurity space.
View Cached Full Text
Cached at: 10/03/26, 11:06 PM
Security will become a larger and larger function in software companies. Security is verification engineering (eg: “my code is probably memory-safe”), as well as capital allocation (“what surface should I throw most tokens at?”)
For startups, it’s a challenge and opportunity. As the world’s paranoia grows given ever-more-sophisticated AI adversaries, how can you trust a 2-person-and-a-dog company?
But conversely, given the dire state of global cybersecurity and increasing reliance on centralization, as always, there’re vast areas that small teams can now disrupt that I’m excited to invest in.
Similar Articles
@rauchg: The future is verification-engineering. Proofs, (e2e) tests, benchmarks, linters… Some tests will be deterministic, som…
Guillermo Rauch shares Oskar Kwasniewski's announcement of 'e2e', an open-source agentic testing framework for web, mobile, and beyond that mixes deterministic and agentic test APIs, runnable locally or in CI. Rauchg frames it as an example of 'verification-engineering', the future of combining proofs, tests, benchmarks, and linters with AI.
@rauchg: This tool has become so valuable for cybersecurity defensive work, that it’s become a verb within Vercel. “Did you deep…
Vercel CEO rauchg praises deepsec as an essential security review tool, noting it has become a verb within Vercel, and highlights the new 'npx deepsec init' command for one-command security reviews.
@levie: If you wanted to know all the jobs that AI will produce, look no further than cybersecurity. This is going to become on…
Box CEO Aaron Levie argues that cybersecurity will be a major source of AI-generated jobs and one of the biggest enterprise investment areas, even as work becomes more agentic and autonomous, citing critical PHP vulnerabilities as a timely example.
@rauchg: Mythos / Sol cybersecurity capabilities are equally useful in an offensive as well a defensive capacity. If adversaries…
deepsec is an agent-powered vulnerability scanner that uses frontier AI models to review large codebases, finding hard-to-detect security issues. It can be run locally or on your own infrastructure and supports parallel scanning, resume capability, and customizable matchers.
@JoshARosen: https://x.com/JoshARosen/status/2105694949438075117
Josh Rosen outlines emerging architectural patterns for the 'agentic security stack' as software development becomes fully agentic — securing the agent worker itself, frontier labs building security agents (OpenAI Codex Security, Claude Code), and vendors embedding security directly into coding-agent loops via MCP, hooks, and skills.