Workers Launchpad Demo Day: Karambit.ai

Hello, everybody. I'm Andrew Hendela from Kramit AI, and we are the last line of defense for the software supply chain.

We make sure that the software you are about to deploy is working and behaving as intended, keeping you and your customers safe from any hidden malware that's been added in to that trusted software.

Now, when you download a new app for your phone, you have no idea what it's going to do or what kind of data it's collecting.

But we trust that it's going to behave well.

The problem is that trust has been abused over and over again by apps that steal your data and spy on you.

But as developers, it's actually even worse, because attackers want to use you to steal data from and spy on your unsuspecting users.

And this, too, has happened time and time again, from the SolarWinds attack that abused people's trust in the SolarWinds software to deliver malware to 18,000 organizations and cause $100 billion in damage, to PyTorch more recently getting malware in its supply chain, all the way to malicious insiders heading in back doors.

In fact, my co -founder and I started Kramit AI because the current defenses are not enough.

They are rapidly getting better at enumerating vulnerabilities, which is an excellent thing to do, but they are blind to attacks that deliver malware by untrusted software, like in the case of the SolarWinds attack or the PyTorch attack or any of the other attacks that are doing the same thing.

But we solve this problem by using automated reverse engineering to generate a software bill of behaviors.

And this tells you what your software will do before you deploy it.

And we use that to detect hidden malicious behaviors before they can cause problems in production.

And this is how we fill in that link between software being built and deployed to make sure that it is safe.

And in this, we are helping people in product security and SecDevOps prevent malicious software from being released, so we can help the millions of global development organizations make sure that their deployed software is safe.

Now, because really, nobody wants hidden Bitcoin miners taking all their processing or wasting all their resources.

And Eric, my co-founder, and I can do this because we've worked together for nearly a decade automating hard cybersecurity problems, from automatically finding and exploiting vulnerabilities all the way to automatically reverse engineering nation state malware.

And Eric actually has something a little one-up on me because he was part of one of the finalist teams for the world's first all-machine hacking contest, DARPA's Cyber Grand Challenge.

But we take our expertise that we've been gaining over years and years of automating these hard problems and bringing them to bear to make Karambit AI successful.

So finally, please connect with me so that we can be your last line of defense.

Thank you.