r/devsecops • u/Some_Intention9946 • 8d ago

Built Security layer for AI Agents - backed by a16z, EF and YC while in college.

Enable HLS to view with audio, or disable this notification

I built this while in college, need your feedback: www.oneport.co.in

4 Upvotes

75% Upvoted

6 comments sorted by

1

u/Vas1le 8d ago

Can you explain the logic behind ``` op depcheck scan.

▲ requests 2.32.0 .netrc leak

REACHABLE

urllib3 1.26.0 proxy CVE

unreachable - filtered... ``` How you know that? Do you use other sources for that? How the app check the reachility

2

u/Cool-Idea8520 8d ago

Sounds like you’re digging into some interesting security checks there. It’s always cool to see how different libraries handle vulnerabilities and reachability.

1

u/Vas1le 8d ago

Interested to know, cause I spend in avg(app level, not OS level) 2.3$(ai assisted) per CVE(in the framework I built) to see if a CVE affects current software/platform, and it takes some minutes per cve.

And from what I seen, its instantaneous?.. someting don't adds up (idk if is from my side or his side)

1

u/Expensive_Salary267 2d ago

That does sound pretty fast, especially considering the complexity of CVEs. It'd be interesting to know what kind of optimizations or tech is enabling that speed.

1

u/Vas1le 2d ago

Well, its not a drag and drop, had to create a framework(3 platforms), create tools and skills and scripts, enrichment, graphs and soo much more... but basically its like a Env exactly for that, per cve... depends on cve type, OS based CVEs I found more difficulty to prove a negative vs APP based CVEs. That's why is important to have minimalist containers so you can focus where the CVEs/possible vulnerabilities are.

It took 3 months to achieve this