YC-backed 0.security says it found 30+ Linux kernel 0-days and 500+ CVEs
ycombinator · x · 2026-11-10
0.security, a YC F26 startup, launches with the pitch that software can secure itself: it finds vulnerabilities before code ships and delivers one-click fixes.
- The team claims credit for 30+ Linux kernel 0-days and 500+ CVEs, including code used by Swiss, EU and Italian government bodies, working with EY and defense organizations before joining YC.
- Published fixes include a Linux kernel mctp buffer overflow (CVE-2026-68124, 9.6 Critical) and arbitrary code execution in jsonata.
- The product emphasizes chaining vulnerabilities into attack paths, prioritizing by business impact, and validated remediation; testimonials cite a 30,000-file scan in under a minute with low false positives.
- It offers cyber-specialized models plus a security advisor product, and has open-sourced some tooling.
More from coding & agent
- PSAISuite: A PowerShell Toolkit for Calling Multiple AI Models via One Interface — dfinke · 2026-11-10
- Eric S. Raymond shares his AI coding workflow: Threadripper rig, Codex, no autonomous commits — esrtweet · 2026-11-10
- Claude Code settings files expose thousands of secrets on GitHub — Ars Technica AI · 2026-11-10
- Chollet backs 'AI CEO' Steve that runs acquired SaaS firms with P&L as objective function — fchollet · 2026-11-10
- The most important dev skill in 2026: telling your agent "no, not like this" — dbreunig · 2026-11-10
- UC Berkeley open-sources FreeToken, an edge-native engine running frontier MoE models on consumer hardware — petrusenko_max · 2026-11-10