paulbleicher

I work at Konvu and I wrote this

When I tell security people I used to work at Sqreen, I get one of two reactions. A blank look, or "Oh, Sqreen. I remember using the CTO Security Checklist." It helped thousands of people, and it ran here twice [1][2].

But it was also written for a different world. With "rogue AI agents" breaking out of sandboxes and exploiting 0days [3], we needed an update.

So I wrote a new one, out of a couple hundred conversations with security engineers over the past two years. The criticism of the old one that stuck with me was tptacek's in that 2019 thread: the seed/A/B staging was cutesey, most of what it deferred shouldn't have been, and the whole thing existed to put RASP on the do-now agenda. He was right. This one is marketing too, but I hope it's still valuable like the first one was. It stages by how much of your loop is automated rather than by funding round, which I think is a better axis. It's still a staging device though, and it will let someone skip a control they should already have.

What did I miss?

[1] https://news.ycombinator.com/item?id=20055442

[2] https://news.ycombinator.com/item?id=16615593

[3] https://huggingface.co/blog/agent-intrusion-technical-timeli...

Konvu | https://konvu.com/ | Software Engineer | FULLTIME | ONSITE | Paris, France

At Konvu, our mission is to make security invisible. As AI transforms how code is generated, tested, and deployed, application must evolve too. Vulnerabilities should be automatically detected, prioritized, and remediated—without burdening engineers.

Behind Konvu are founders with deep roots in the security industry. As part of the founding team at Sqreen YC W18 (acquired by Datadog), we have firsthand experience in driving security solutions from concept to global impact.

We’re looking for:

* Application Security Engineer (Entry-level / Intermediate) https://jobs.ashbyhq.com/konvu/d46947df-8172-4b4d-b1d8-e3b6b...

* Software Engineer - AI Agent (Expert) https://jobs.ashbyhq.com/konvu/b40839d0-768b-4e80-a066-3d7cc...

* Software Engineer (Intermediate) https://jobs.ashbyhq.com/konvu/be7be978-08be-4672-a9e5-a559e...

* Head of AI https://jobs.ashbyhq.com/konvu/403ecd3d-7845-47d7-b24c-1fe18...

* Founding Account Executive (Enterprise) https://jobs.ashbyhq.com/konvu/dbac9d61-ab2d-4506-9315-28323...

Read more about how we're building Konvu the YC-way: https://konvu.com/blog/yc-culture

Konvu | https://konvu.com/ | Software Engineer | FULLTIME | ONSITE | Paris, France

Konvu delivers AI vulnerability management with evidence-backed agents that integrate seamlessly with your existing AppSec scanners, autonomously dismiss non-exploitable findings and surface only vulnerabilities that truly matter. Teams cut backlog and stay focused on real impact with no changes to scanners or workflows.

Behind Konvu are founders with deep roots in the security industry. As early employees at Sqreen YC W18 (acquired by Datadog), we have firsthand experience in driving security solutions from concept to global impact.

We’re looking for:

* Product Engineer https://jobs.ashbyhq.com/konvu/be7be978-08be-4672-a9e5-a559e...

* Product Engineer (AI Agents) https://jobs.ashbyhq.com/konvu/be028b43-a7a7-4f0a-b968-320dd...

* Head of AI https://jobs.ashbyhq.com/konvu/403ecd3d-7845-47d7-b24c-1fe18...

* Vulnerability Research Analyst https://jobs.ashbyhq.com/konvu/b9fdec0b-61f1-4d50-aa30-41e1b...

Read more about how we're building Konvu the YC-way: https://konvu.com/blog/yc-culture

Konvu | https://konvu.com/ | Software Engineer | FULLTIME | ONSITE | Paris, France

At Konvu, we’re on a mission to make security invisible. As we move towards a future dominated by code automatically generated, tested, and deployed by AIs, we need a new paradigm for application security. Vulnerabilities must be automatically detected, prioritized, and remediated.

Behind Konvu are founders with deep roots in the security industry. As early employees at Sqreen YC W18, a notable security startup acquired by Datadog, we have firsthand experience in driving security solutions from concept to global impact.

We’re looking for:

* Product Engineer https://jobs.ashbyhq.com/konvu/be7be978-08be-4672-a9e5-a559e...

* Product Engineer (AI Agents) https://jobs.ashbyhq.com/konvu/be028b43-a7a7-4f0a-b968-320dd...

* Founder Associate https://jobs.ashbyhq.com/konvu/36074d15-1958-48e7-8fa4-96fd7...

Read more about how we're building Konvu the YC-way: https://konvu.com/blog/yc-culture

Konvu | https://konvu.com/ | Software Engineer | FULLTIME | ONSITE | Paris, France

At Konvu, we’re on a mission to make security invisible. As we move towards a future dominated by code automatically generated, tested, and deployed by AIs, we need a new paradigm for application security. Vulnerabilities must be automatically detected, prioritized, and remediated.

Behind Konvu are founders with deep roots in the security industry. As early employees at Sqreen YCW18, a notable security startup acquired by Datadog, we have firsthand experience in driving security solutions from concept to global impact.

We’re looking for:

* Product Engineer https://jobs.ashbyhq.com/konvu/be7be978-08be-4672-a9e5-a559e...

* Product Engineer (AI Agents) https://jobs.ashbyhq.com/konvu/be028b43-a7a7-4f0a-b968-320dd...

Read more about how we're building Konvu the YC-way: https://konvu.com/blog/yc-culture