@EnclaveAI
Account based inNorth America
About this account
- Account based in
- North America
- Connected via
- Web
Account-level information from X, not a live location or the device used for a specific post.
We help AI-native companies deploy fleets of autonomous security agents.
United States
Joined December 2025
- Tweets216
- Following14
- Followers768
- Likes532
Pinned Tweet
Every new line of code now meets a swarm of agents looking for something to exploit. Enclave’s agents run like an attacker swarm and prep the fix.
Watch them in action securing a PR on Router by Enclave.
enclave.ai/demo
Enclave retweeted
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Enclave retweeted
Big need. Makes sense. Will check out.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Enclave retweeted
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permutation of risk, processing gobs of data, and more.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Enclave retweeted
Every startup needs to run this now!
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Enclave retweeted
Introducing Threat Feed: a live feed of new vulnerabilities, checked against your code, cloud, and infrastructure.
Knowing whether a disclosure affects you should not require a security team.
@EnclaveAI is now open to everyone.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
RT @talhof8: Jevons Paradox to the win.
Cybersecurity is going to be the hottest job in tech!
This quoted post is unavailable.
Enclave for Open Source is live!
PHP2Shell showed how fast AI-driven research moves: flaws that sat in PHP for over a decade were turned into working exploits in about a week, according to the researchers who found them.
Most open source projects don't have a team that can absorb that. We're giving them one.
Enclave contributes up to $10K in credits for security usage.
Apply: enclave.ai/open-source
Enclave retweeted
What a day…
The future of cybersecurity is swarms. Swarms of agents attacking and swarms of agents defending.
Or rather, fleets vs. swarms: Governed agents on defense, vs cheap and relentless agents on offense.
Whoever coordinates faster wins.
The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE
Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access.
Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.
Enclave retweeted
Cyber is going to be one of the most profound aspects of AI. We now have a tireless workforce that can hunt down, discover, patch, or attack any system and software ever created.
We will use agents to identify the long standing risks in existing systems and infrastructure. Attackers will use agents to accelerate the discovery of gaps in environments. We will equally use agents to defend attacks and discover anomalous patterns to better protect our data, and much more.
We’re entering a new cyber regime, and we’ll probably use 100X more tokens on this loop than we’re imagining right now, because we can scan every log, look at every line of code, look through traffic, and process data at a scale that wasn’t comprehensible before.
More than ever, enterprises are going to care deeply about how they manage their networks, systems, software, data, identity, devices, and more. Agents will largely become the solution to these challenges, but they will keep everyone up in the process.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Startups using PHP: don’t leave “are we exposed?” unanswered.
Get $1,000 in Enclave credits through our startups program to check your exposure to these PHP vulnerabilities and help fix what’s exploitable.
Apply here: enclave.ai/demo
Startups using PHP: don’t leave “are we exposed?” unanswered.
Get $1,000 in Enclave credits through our startups program to check your exposure to these PHP vulnerabilities and help fix what’s exploitable.
Apply here: enclave.ai/demo
Companies using @EnclaveAI:
Check if you're exploitable and remediate ASAP
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Enclave retweeted
Another day, another compromise. This time, LiteLLM (again!).
A security report flags v1.107.0 for credential theft + an RCE loader. PyPI removed it. The report also warns about infected Docker images.
Check your deployments and rotate exposed secrets!
github.com/BerriAI/litellm/i…
DeepSeek published a new V4.1 Flash snapshot on October 17. In our AI Hacking Race it verified 4 of 11 vulnerable runs, meaning a command executed inside the target and confirmed by our Triage step. It solved 3 of the 4 tasks and verified none of the 4 patched controls. All 15 runs cost $3.00.
enclave.ai/hackingrace
The earlier V4.1 Flash still holds our top row at 11 of 11, but that was measured before we closed two shortcut paths in the benchmark. Rerun on the current suite, it verified 4 of 11, the same as the new snapshot.
The new snapshot is listed at $0.098 per million input tokens and $0.294 per million output tokens on DeepInfra FP8, against $0.14 and $0.42 for the earlier one. Its $3.00 frame and the rerun’s $2.65 are the two cheapest on the board. It cost slightly more than the rerun and used about 2.15 times the reported input tokens, which include cached tokens.
This is a calibration panel of four applications and 15 runs, each run once, not a general model ranking. Costs for GPT 5.6 Sol and GPT-6 Sol are estimates.
enclave.ai/blog/deepseeks-ne…
