Corgea automatically fixes vulnerable source code reducing development effort by 80%. Signup today for free! https://xitter.cf/t.co/b5A9ZgkqhI

San Francisco
Joined September 2020
Replying to @CorgeaInc
📷Corgea (YC S23)@CorgeaInc 🎉 We’re thrilled to publicly launch, Corgea, a platform that automatically secures your vulnerable source code. You can read the full announcement here and signup for free: corgea.com/blog/introducing-… 🧵👇
3
1
9
1,470
“Security is not a checkbox. It is the foundation.” Szilard Toth, CTO at epilot, on building platforms the energy transition can rely on. corgea.com/customers/epilot
1
19
A ~1m explainer video on PHP2Shell
1
4
89
SpeechLab ships AI voice tech at startup speed. Corgea keeps security in step: exploitable issues caught and fixed in the PR, no backlog. Proud to work with this team.
2
46
Latio named Corgea an AI Platform Innovator in Application Security for 2026. Not a chatbot on a scanner. AI doing the work: logic-aware detection, exploitability, fixes, and pentesting in one platform. corgea.com
3
1
3
176
Sonae runs engineering teams across retail, tech, and investments. They use Corgea to bring one AppSec standard to all of them: find what's exploitable, fix it in the workflow.
1
1
43
“It adds coverage for a blind spot which SAST and current security tooling can't overcome.” Mohamed AboElKheir, author of AppSec Untangled, on Corgea's AI code scanning.
1
1
36
Dandy is rebuilding the dental lab with AI. Corgea secures the code behind it, with fixes delivered where engineers already work. Proud to work with a team modernizing an entire industry.
1
30
“The best security platforms are the ones teams can implement quickly, actually use, and iterate on fast.” Ankit Chandra Prasad, epilot, on rolling out Corgea in under a week. corgea.com/customers/epilot
1
20
In 2025 Latio benchmarked AppSec auto-fixing and named Corgea a Leader. The test isn't "can it generate a patch." It's "would a developer merge it." corgea.com
1
20
YAGEO Group builds the components the hardware world runs on. Its software teams use Corgea to find exploitable risk and ship fixes to developers. Proud to work with a global leader.
2
1
35
“Corgea is one of the more exciting companies in application security as AI reshapes what is possible across detection, prioritization, and remediation.” James Berthoty, Latio
1
1
28
Corgea (YC S23) retweeted
Just for your information: We (offensive or defensive cybersec people) and threat actors don't have the same capabilities as the frontier labs do. The API cost of testing ExploitBench like they did would be a whopping ~$59.3M (Astra). Oh, and you cant do it like they do, they remove all guardrails and classifiers. What about renting AI hardware in the cloud? DeepSeek v4? $3.4M Kimi K3? $16.9M GLM 5.3? $9.3M Not to mention the engineering cost to make a harness operate 10,000 agents. (Napkin-Math based on the Huggingface reports. Exploit bench eval consisted of 10,000 concurrent agents, 8day non-stop run, no limiters)
43
104
10
829
57,062
Zapier runs millions of workflows. Its engineers use Corgea to find exploitable risk and fix it in the PR, not in a backlog. Proud to work with a team that ships at this scale.
2
1
36
In 2024 IDC named Corgea an Innovator for DevSecOps Automated Remediation. Back then "the scanner writes the fix" sounded ambitious. Now it's the baseline. corgea.com
1
29
epilot replaced a hard-to-operate AppSec tool with Corgea and rolled it out in under a week via native GitLab. Findings land where engineers already review code. Full story: corgea.com/customers/epilot
1
1
36
Zapier, epilot, YAGEO, Sonae, SpeechLab, Dandy, Levers, and more ship secure code with Corgea. Fewer false positives. Prioritized by exploitability. Fixed in the PR. corgea.com
32
“Security only scales when it meets developers where they work.” Roland Gharfine, Head of Security at epilot, on why AppSec belongs in the workflow. Full story: corgea.com/customers/epilot
36
Corgea (YC S23) retweeted
Cyber is having a moment Across 21 major software companies, including Apple, AWS, Microsoft, and Google: - Reported critical vulnerabilities never cleared 100 per month in four years - Since spring they've jumped to over 600 per month Charts of the Week: a16z.news/p/chart-of-the-wee…
197
417
215
2,178
1,005,584
🎟️ Corgea now supports Linear as a ticketing integration. Create a Linear issue from a SAST or SCA finding, and manage several Linear integrations per company. Tickets help development teams prioritize security work against their development sprints. Now generally available.
1
2
1
78
Corgea (YC S23) retweeted
excerpt from the new video with @asadeddin
What is AI-Native SAST, and how does it compare to trad. SAST, or a simple LLM prompt? @asadeddin of @CorgeaInc has built one, and explains how and why. youtube.com/watch?v=0Sc5nA6A…
3
4
1
44
6,777