J.J. Fliegelman (@JdotJdotF) header
J.J. Fliegelman (@JdotJdotF) profile picture

Building @FirstHarmonic, former Visiting Partner at @YCombinator and co-founder of @WayUp. Travel addict, armchair linguist, and builder.

Joined January 2012
Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)Photo by J.J. Fliegelman (@JdotJdotF)
blacksmith
so we’re still struggling with ci/cd and are back on blacksmith. we tried switching to 2 providers who very confidently claimed they would reduce our bill by >90% and they both could not support our workloads clearly there’s been an influx of vendors because people have realized 1) a lot more code is being written 2) a lot more e2e tests are being written 3) the cost of ci/cd is getting crazy 4) the time per PR is getting crazy it’s good that people are swarming into the space to solve for this. that being said if you’re going to sell ci/cd, it’s HIGHLY irresponsible of you to do it when your product is not working, because ci/cd is critical infrastructure that bottlenecks any form of code and I’ve been burnt twice now.
4
1
5
3,159
greptile
i'm thrilled that there's a ton of new companies going after sandboxes and ci/cd. thank god for optionality on critical infra! some other underserved areas (RFS) > decision models > code review > memory > harness benchmarking and evals > browser-use > web-search > mcp gateway > agent id > role based access controls as a service > agentic payments / agentcard > phone-use > agent-drive > coding agents (seriously, there's only like 3 competent ones) > ai pentest agents > design/video agents > oss pangram competitor goes without saying - you have to be competent. for eg. seen several code review agents, none match to greptile / coderabbit. i don't care if you're oss if ur ass. You have to give the leader(s) a run for their money.
1
1
1
10
2,245
It was about time this happened. @tryramp next
Introducing 'stripe pay', for instant business-to-business transfers. Find companies using their Stripe profile handle and send funds for free. Available in the Dashboard and CLI.
2
219
Secrets secrets are no fun, they should be shared with everyone …said everyone not using Infisical
We’re excited to announce we have raised a $40M Series B! This next round of funding lets us continue to strengthen our secrets, certificate, and access management products. We'll also expand the capabilities of Agent Vault, so engineers adopting AI agents can give them access without handing over the underlying credentials. Thank you to @eladgil, @GradientVC, @ycombinator, and our other investors, as well as our customers, community, and team for helping us get here!
9
387
These guys are keeping us all safe and frankly just really earnest upstanding people to boot
Congrats to @matsiiako, @dangtony98, @maidulll and @infisical (W23) on their $40M Series B! Infisical is the open source security infrastructure that manages API keys, passwords, and certificates for developers, machines, and AI agents. When an AI agent needs access to a sensitive system, Infisical hands it a fake credential and swaps in the real one through a proxy. The agent does its job without ever seeing the actual key. More than 1,300 organizations use the platform, including Airbus, Hugging Face, and the US Government, and they just passed 30,000 stars on GitHub. forbes.com/sites/rashishriva…
3
18
740
Probably nobody even SAW your failed launch! Because it failed! You’re the only one who knows it failed! Just do it again!
nobody remembers your failed launch, so launch often launch early
4
189
J.J. Fliegelman retweeted
Today, we’re announcing Infisical’s $40M Series B at a $600M valuation, led by @eladgil. AI has made it 10x easier to write code, 10x easier to find vulnerabilities, and given autonomous agents access to some very sensitive systems. The problem is that much of today’s security infrastructure wasn’t built for any of this. We’re changing this with @infisical. Today, over 1,300 organizations trust us to secure their infrastructure, including Airbus, First American Financial, Hugging Face, OpenRouter, and Wise. Proud of what our team has built so far. Even more excited about what we have ahead of us. Back to work.
123
41
34
500
92,535
Superset is now Paradev: The code editor that helps engineers run armies of coding agents. We just raised an $11.5M Seed round led by @usv with @ycombinator to redefine how software is written.
140
76
115
729
725,607
. @RichAberman is just ripping
Robinhood Ventures massively underrated for the work they’re doing
13
600
J.J. Fliegelman retweeted
This is the most serious 48 hours in cybersecurity history. php2Shell has left 70% of the internet vulnerable as @NSAGov is advising some American companies to take production systems offline. @eMudhra , an Indian Root Certificate Authority, relied on weak cryptographic keys (one was literally the number 4) that allows attackers to man-in-the-middle any website. @LiteLLM had its release pipeline hijacked and became a vector for distributing malware. Attackers stole inference API keys and installed RCE backdoors in v1.107.0. @Railway exposed customer environment variables like cloud credentials and inference keys. This is part of a model-distillation attack to steal inference output from labs. @gitlab disclosed a 10.0 / 10.0 CVSS vulnerability that allows arbitrary code execution on every single version since 2014. @jpmorgan, @BankofAmerica , @WellsFargo , and @MorganStanley have detected unauthorized AI agents operating inside customer accounts. The financial institutions are unable to distinguish legitimate customer activity from AI agents at-scale. @opencode was the target of a 48-hour agent swarm where its infrastructure was mined for customer API keys. If you still think bringing human security teams to fight the AI war is a sensible defense strategy, consider yourself pwned.
8
16
6
75
23,846
Love to see more companies succeeding with new models! Especially for those of us who are design-challenged I never would have bothered to try a model from Canva if not for Design Arena!
Canva Craft, the first ever image model by @canva, takes the #4 spot on DesignArena's Image leaderboard. This makes Canva the #2 Image Lab after @OpenAI! Notably, it wins most often on photorealistic product and object shots, setting up studio-style lighting and detailed material textures on a single hero object. It also ranks #1 on the Portrait and Landscape subcategories. Congrats to the @canva team on the launch!
1
11
494
Maybe everyone should just be keeping their secrets with @infisical?
1
1
8
531
I’m so impressed by the whole @useblacksmith team. They’re truly building something people and agents want. CI is a tough, competitive space, and yet look at them go! I’m proud to be an OG and continuing investor in the company.
Replying to @sequoia
@sequoia is leading our Series C at a $1B valuation. We started Blacksmith in 2024 to make CI faster and less painful. In January we ran 5 million CI jobs a week. Today it's over 90 million and growing, and we’re still early.
1
1
9
432
Already reserved mine! Can’t wait to never do chores again
Introducing Voxel, a droid butler made by Tuesday Labs.
2
107
greptile
Greptile is going to be a massive company.
2
10
748
You can’t lose with a deal like this :) Super impressive team!
Introducing overshoot, it will cut your GPU bill in half with zero quality loss, or you don’t pay. Over the past few months, we have forward deployed into AI teams to optimize their inference stacks. They have now cumulatively saved over $5M. Overshoot is software that bakes in our hard-earned inference learnings into a scalable solution. overshoot.ai
126