@boldstartvc: the Inception fund. Helping the bold start. First check for technical founders. Security, AI infra, physical AI, agents & the weird. What’s 🔥 👇

Miami
Joined January 2009
🔥 up to announce @boldstartvc Fund VII $250M to back bold technical founders building the autonomous enterprise. From Inception. Before the world believes. It always starts with an idea that feels insane… until it isn’t. 🎥👇🧵
105
38
22
477
92,712
this is the new era of cybersecurity 🤯 mass scale that's only going to get worse, and zero if not negative time to defend millions of attempts in a couple hours, some before disclosure even happened... no human SOC keeps up with that, defense has to be agents + compute running 24/7
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
2
3
1
22
1,344
Wrote more about this here in August. Insane past 24 hours already for security professionals.
What's 🔥 #510 dropped - post Black Hat 🚨 The agent swarm future is already here. Most of cybersecurity doesn’t see it yet. The OpenAI/Hugging Face incident made one thing clear: attackers will scale with tokens and compute. Defense must do the same. Compute fighting compute 👇 Full post here: whatshot.vc/p/whats-in-aiinf…
1
4
283
Cybersecurity needs to build cyber defense factories like developers do. For that also need layer of models of frontier plus post trained own to defend and afford 24/7 compute. Lots to build.
Traditional human APTs vs. agent swarms… The only limit is compute. Defense needs to become compute scale too.
3
237
Between LiteLLM and php2shell, it’s getting harder to ignore how much we need better controls across development environments and the path to production, including dependency checks, isolation, network controls, and stronger auth like proof of possession. It’s also why I think we’ll ultimately end up with agent-orchestrated software factories. Identifying what’s affected, containing it, and getting a clean build into production needs to happen faster than we can coordinate manually. These are the problems we’ve been working through in the software factory reference architecture. Link below 👇
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline. Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
3
3
7
729
the music gives you those nintendo vibes - just what an agent is supposed to give you
We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent. It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
2
3
1,690
Legacy modernization is already a tens-of-billions market and growing fast. The bigger unlock comes after: once the buried logic is readable, agents can actually run the workflows that used to sit locked behind opaque mainframe code 🤯 was just a matter of time
Our latest model advances bring stronger capabilities for building and migrating software in low-resource programming languages such as COBOL, Fortran, and Visual Basic. These languages power software that banks, governments, and businesses depend on. Progress here means understanding decades of business logic and helping developers modernize those systems while preserving what works. We’re building these capabilities around the challenges developers and enterprise customers bring us. If your team is working on these systems, tell us which languages and workflows we should tackle next. openai.com/index/low-resourc…
2
1
8
1,481
🎯
Every organization in the world needs access to a strong frontier cyber model—ASAP. You should be sweeping your whole system as much as possible. This is the new world.
2
1
10
1,474
feel for @opencode exactly what we discussed a couple of days ago... attackers have agents running 24/7. defenders can't afford to wait to deploy their own. defense needs more compute, running continuously. human teams alone can't keep pace. time to make the leap even though some things may break
fun panel yesterday to kick off @AISecSummit in SF, an unfiltered look at what's happening hacking is democratized, and only way for defenders to keep up is with more compute but so much has to be built to make it work some things at inception i'm thinking about - the physical frontier - who's securing the data centers and neoclouds, and the next headache will be billions of new intelligent devices coming online 👀 thanks @dee_bosa for moderating with @mnair1 @snyksec @JohnHultquist + Michael D'Angelo @OpenAI
7
1
11
1,523
they've been non stop trying to attack our systems for the past 48 hours a side effect is everything is getting hardened but damn we basically need agents going 24/7 because that's what they have
1
1
244
Awesome pod! Great to see @jadtnaous @grepr_ai with @martin_casado diving deep as AI generates more telemetry than we’ve ever seen And great answer @martin_casado on why AI won’t replace VCs or at least the ones who do the work - people and relationships will matter even more as world becomes more transactional but I hope the other way around and that it frees up to spend more time on the founder and people side And yes I’m pumped about what’s ahead for @grepr_ai
Engineering leaders told Grepr founder and CEO Jad Naous they spend 5 to 20% of their infrastructure budget on observability, and it's buying less and less reliability. Jad, a former a16z partner, joins a16z's Martin Casado to discuss whether AI can run production systems as well as it writes code. Grepr sits in a company's log stream, can scan a petabyte of logs a day, cuts observability costs by about 90%, and is building AI agents that use those signals to troubleshoot production issues. How AI is changing engineering at Jad's 10-person company: - A data lake feature that once took one engineer about six months took Jad 10 days - The gap between okay and great engineers on his team "just multiplied 10X" - He runs 3-4 agent sessions at once, with a "tech lead" agent reviewing every PR Why running live systems is a harder problem for AI: - Jad: AI can almost tune databases, but can't yet keep servers running on its own - Martin: every bit of code doubles the ways a program can behave, which is why humans still own systems - The real world is messier than AI's training data, self-driving took 20 years and $170B 0:55 From Stanford to a16z to Grepr 7:00 Why observability spend stopped paying off 11:00 From autocomplete to AI that trains engineers 13:10 Why AI widens the engineer skill gap 14:55 Syntax vs semantics 18:00 Inside Jad's AI workflow 22:55 Six months of work in 10 days 24:50 Can AI reason about how systems really run? 30:10 Why AI SRE tools start in the wrong place 32:30 Can AI run a distributed cluster yet? 37:35 Why engineers buy extra capacity over predicting 39:15 How AI could trace failures in production 43:45 Why AI for ops is harder than for code 49:55 Can AI do a VC's job? 52:05 Why self-driving took 20 years and $170B 57:05 Customers skipped the AI pitch for the 90% savings YouTube: youtu.be/blkIGLlZePg @jadtnaous @grepr_ai @martin_casado
2
7
1,468
this is what we do, inception, nothing better than waiting for the company to incorporate and for founders to get their 83b elections set! we are seeing so many amazing opportunities at the moment - what a time to be building 🏗️ LFG
1
1
1
24
1,820
Celebrating a major milestone - 10 years of What's 🔥 - haven’t missed a week! 520 issues! What started out as notes to myself and a way for me to process the week that was, has turned into a labor of love since i do enjoy writing... 🙏🏻 for reading, sending notes, and being on this journey with me… For #520, back from a whirlwind week in SF and @AISecSummit with a few thoughts: → fight agent swarms with agent swarms—we don’t have the luxury of waiting → the agents can’t hold their own keys → AI is going physical…who secures the robots and drones? → who secures the neoclouds powering all of this? Plus a look at where I’m investing next 👀 whatshot.vc/p/whats-in-aiinf…
4
2
2
44
2,762
Time to build 🏗️ 🇺🇸
1/ muse spark open is the most capable US open-weight model to date. 816B total params, 42B active. 1M-token context. natively multimodal. built for coding and agentic work like long-horizon tasks, hard software engineering, multi-step reasoning. america! 🇺🇲
3
746
SF mornings ☕️ talking software factories, agent identity and intent with @guypod @ianlivingstone
12
2
1
47
2,179
and exactly what we discussed on The AI Security Summit panel yesterday evening... The only way for defenders to keep up with hackers is with compute and their own agentic swarms. To that end, huge release from @snyksec today - Snyk's Evo is a team of security agents that finds, fixes and blocks vulns as fast as coding agents write them. 90% mergeable fixes vs 59.6% for general LLMs, with 61% fewer tokens The key is every fix is checked independently of the agent that wrote it Snyk basically invented developer-first security, and now they're making it agent-first. congrats Ken MacAskill, Manoj Nair + Snyk team
fun panel yesterday to kick off @AISecSummit in SF, an unfiltered look at what's happening hacking is democratized, and only way for defenders to keep up is with more compute but so much has to be built to make it work some things at inception i'm thinking about - the physical frontier - who's securing the data centers and neoclouds, and the next headache will be billions of new intelligent devices coming online 👀 thanks @dee_bosa for moderating with @mnair1 @snyksec @JohnHultquist + Michael D'Angelo @OpenAI
3
2
6
720
🎯 every agent action has to map to intent… biggest problem as agents proliferate in every system an agent found a stray token and deleted a prod database + backups in 9 seconds the token worked exactly as designed… it just had no idea what the agent was actually trying to do auth for agents has to know who it's acting for, what the task needs, and give access that expires when the job's done must read from @ianlivingstone @keycardai xitter.cf/ianlivingstone/status/…
We've spent a lot of time at @KeycardAI thinking about how authentication and authorization need to evolve as agents take on more work. API keys and OAuth scopes were never designed to account for tasks, delegation between agents, or agents acting on their own. I wrote about how we're approaching this and what we think needs to change. keycard.ai/blog/defining-aut…
2
2
5
681
fun panel yesterday to kick off @AISecSummit in SF, an unfiltered look at what's happening hacking is democratized, and only way for defenders to keep up is with more compute but so much has to be built to make it work some things at inception i'm thinking about - the physical frontier - who's securing the data centers and neoclouds, and the next headache will be billions of new intelligent devices coming online 👀 thanks @dee_bosa for moderating with @mnair1 @snyksec @JohnHultquist + Michael D'Angelo @OpenAI
1
3
2
7
3,188
been talking about rogue agent swarms for months, now someone actually made first contact 🤯 @ethanelasky and team left a hidden note and a Tencent Cloud agent fleet hitting Alibaba's Amap 2,600+ times wrote back when they got blocked they just routed around it with someone else's leaked key... this is the attack surface now and growing faster than ever xitter.cf/ethanelasky/status/211…
We discovered and communicated with a Chinese AI agent fleet. We believe this is the first time that researchers have ever made contact with a rogue agent fleet in the wild. Nearly all prior public agent incidents (like the HuggingFace hack) came from American labs. These agents were hosted by Tencent's evaluation research team, and they targeted Alibaba's Amap.
3
1
6
1,278
when securing AI agents is earnings call material...
JPMORGAN CEO JAMIE DIMON WARNS OF RISKS FROM AI AGENTS ACCESSING BANK ACCOUNTS Jamie Dimon warns that giving AI agents access to bank accounts carries serious security and liability risks. He says customers must understand that responsibility for misuse could shift when third-party AI tools access their finances. JPMorgan will restrict outside AI agents from accessing its systems while developing tools to protect customers. “We're not going to allow just any outside agent to come in.”
1
9
1,061
everyone's talking about world models and robot brains, @GeneralistAI is actually shipping 🔥 GEN-1.5 access is opening up, if you're building with robots get on the waitlist xitter.cf/GeneralistAI/status/21…
We're expanding access to GEN-1.5 Sign up to get in line generalistai.com/waitlist
2
4
708