Moataz Soliman retweeted
We’ve been heads down at Vectoral, thinking of ways we can help the broader community combat these new threats.
After a ton of hard work by the team, I’m excited to announce TokenPwn.com
TokenPwn is a free way for users to check whether their key has been found in any info-stealer communities or used to hit our honeypot network.
The last few weeks have been a nightmare for anyone working in security. Tokens have become currency, and API keys are a one-way ticket to extract them.
At Vectoral, as a part of our efforts to stop token theft, we crawl the darker sides of the internet and run our own honeypot network that lets us discover leaked keys before bad actors pick them up.
Here's how it works:
We developed a system that ensures we never see the keys you inquire about.
1. Your browser hashes the key locally (SHA-256).
2. It then "blinds" that hash with a random value only your browser knows, and sends us the blinded version. Our server applies a secret key to it without being able to read what's inside (OPRF).
3. Your browser removes the blinding and uses the result to determine which bucket may contain the entry matching the key.
4. It downloads that bucket. Every bucket is exactly the same size, real entries mixed with padding, so the download says nothing about what's in it.
5. It looks for the tag locally. The match (or non-match) happens entirely in your browser.
We’re all in this together.
Moataz Soliman retweeted
Introducing Strix Firewall, an open-source tool to protect your machine from the recent onslaught of software supply chain attacks.
Strix monitors every package installation at the OS level and blocks malicious dependencies before they reach your machine, whether installed by you or an AI agent.
Install it once, and it runs silently in the background. Also supports proxy mode across multiple package managers.
Moataz Soliman retweeted
I’ve seen a lot of people dunking on @thdxr and @opencode, and I needed to say something.
Frankly, I don’t think anyone understands how sophisticated these attacks are. These aren't script kiddies doing this after school. These are state actors, with real companies fueling the fire.
One of the bigger companies behind distillation has 4 office locations worldwide, and there are a number of companies that are entirely fronts for distillation.
You’ve probably seen their ads. Some have raised venture. I’ve personally seen messages claiming they bought over $5 million in inference for distillation.
They’ve gone so far as to recruit people close to the model labs for better access, and the dollars flowing through the distillation ecosystem are in the 9 figures. These attacks offer a huge economic incentive.
These aren't fly-by-night operations. At Vectoral we've see relays offering affiliate programs, net 30 invoicing for enterprises, and strict SLAs. Together, the top relays get tens of millions of visitors per month.
Frankly, they are more sophisticated than most SAAS companies.
The sad reality is that things likely only get worse from here. We are at war for global AI hegemony.
Moataz Soliman retweeted
Your AI is vaporware without deep integrations with your customers’ systems of record.
Introducing @WithAmpersand: integration infrastructure for enterprise agents.
We power 11x, Orb, and Square's ability to take agentic action in systems of record like Salesforce, SAP, NetSuite, and Workday.
Ask anyone serious about building AI and they’ll tell you:
- The SaaSpocalypse didn’t happen. The world depends on CRMs, ERPs, HRISs, and ITSMs.
- Your customers customized their deployments beyond recognition.
- Systems of record companies are basically monopolies. They never had to make their APIs and MCPs user-friendly.
- Docs don't explain half the weird edge cases you'll hit.
- One bad write can blow up your pilot or renewal.
- Once you finally get it working, someone changes a field and it breaks again.
The world's data lives in structured databases. AI needs a translation layer to work with it.
So, for your AI to truly transform the way enterprises work, you'll need deep integrations built for:
- scoped permissions
- bi-directional actions
- real-time speed for agents
- custom objects, fields, and workflows for each of your customers
We built Ampersand to power the future of software.
AI didn't trivialize writing integrations. It made them the critical path.
I believe that deeply, so I didn't make a launch video about Ampersand.
Instead, it's the best builders I know explaining just how big of a challenge this is.
Moataz Soliman retweeted
We just killed Monid ourselves.
Monid is now open source. The OpenRouter for agent tools.
Your agents can now:
> discover, run, and pay for tools at runtime
> one connection to 2,000 APIs: SEO, leads, social media, search, ecommerce, stocks, video/image/music/3D gen, private company data
> pay per call, no subscriptions
Fork it, self-host it, or plug in as a provider.
We spent weeks killing everyone else. Only fair we kill ourselves too.
Moataz Soliman retweeted
We just killed…everything.
Introducing Monid, the OpenRouter for agent tools.
Today we crossed 4M agent transactions. And raised a $2.1M pre-seed to kill every subscription in the world.
Your agents can now:
> discover, run, and pay for tools at runtime
> one connection to 1,800 APIs: SEO, leads, search, ecommerce, stocks, video/image/music/3D gen, private company data
> all pay per call, 0 subscriptions
Moataz Soliman retweeted
Something we've been working on at 1984 - github.com/1984vc/cap-table
Early founders sometimes don't understand their cap table, or how different investments affect them. You should use AI to cap table model, but you should give it the tools to do it right. This is that tool.
Moataz Soliman retweeted
🚀 @stakpak_dev is joining @vercel
I started Stakpak in 2023 believing software should drive itself. We raised our first round in 2024 to make "Self-Driving Infrastructure" possible, and with a small team out of Egypt, we built one of the first open-source agent harnesses, a production-ready DevOps agent, and first-of-a-kind agentic security systems from scratch. Shipping features months before the rest of the industry. We learned what it takes to build and run agents in production for ~2 years.
Vercel is no longer just the frontend cloud. They're building the Agentic Infrastructure company, the platform where agents deploy, where you build and run your own agents, and where infrastructure itself is managed by agents. Vercel is making self-driving infrastructure possible at scale. We're excited to join and help build the best agentic infrastructure in the world.
This journey started in Egypt, bootstrapped for 2 years, before raising venture capital and moving to San Francisco. Grateful to @VenturesP1 @500GlobalVC @DCGco Ahmed Saafan @mzsoliman @OKGabr Hazem EL Agaty for believing early, and to the open source community that made Stakpak one of the most popular DevOps agents out there!
Stay tuned, we're just getting started 🔥
Moataz Soliman retweeted
At HumanLayer, we’re on a mission to solve the AI slop code problem.
In 2025 we open-sourced our Research, Plan, Implement framework, now deployed inside fortune 500s like Block and Uber - places where shipping slop is just not an option
And that was just the beginning.
Today, we’re opening access to HumanLayer - an Agentic IDE, collaboration platform, and building blocks for your software factory.
HumanLayer enables engineers solving hard problems in complex codebases to:
> move 2-3x faster across the entire SDLC (not just coding)
> maintain rigorous standards for system architecture and program design
Hundreds of engineers at companies of all sizes are already using HumanLayer to ship fast without sacrificing quality.
I'm excited to invite you to try humanlayer today at humanlayer.com, and I'm even more excited to see what you build.
@0xblacklight and I are deeply grateful to our team, our customers who give us so much incredible energy and feedback, our investors who have always been in our corner, and our friends and family who have supported us along this crazy journey
if you're a staff or principal engineer trying to make AI coding work at scale for your team, we'd love to hear from you
as @swyx likes to say - let's make this the year of no more slop
Moataz Soliman retweeted
We’re building the agent-native alternative to AWS, but it's actually good.
- 33,000+ projects created (10% WoW growth)
- 2x weekly active projects (2000 → 4000+)
- 11,000+ GitHub stars (5x in the last 3 months) - faster than React, Supabase, and Linux
Introducing InsForge ↓
Moataz Soliman retweeted
RASPIRE (@raspire_) is building app security at AI speed.
As AI accelerates mobile attacks, their platform protects Android and iOS apps from fraud, reverse engineering, and API abuse with zero code changes. They're already securing apps used by 20M+ people across banking, fintech, and healthcare.
Congrats on the launch, @EzV01d & @hsanmost!
ycombinator.com/launches/QgY…
Moataz Soliman retweeted
.@InsForge turns your coding agent into a principal backend engineer. Backend servers, database, LLM gateway, frontend deployment, and more. Every primitive built for how coding agents actually work, so they can run your entire infrastructure.
Congrats on the launch, @hanghuang_ & @tonychang430!
ycombinator.com/launches/QP6…
Moataz Soliman retweeted
Introducing the new Strix Platform: continuous pentesting for modern apps.
Strix is an open-source framework for autonomous pentesting across apps, APIs, and repositories - helping teams find and validate vulnerabilities, generate fixes, and secure software faster.
Since our launch, we’ve had:
- 80,000+ users worldwide
- 15B+ LLM tokens processed daily
- 78,000+ vulnerabilities reported
- multiple CVEs assigned
- deployed by enterprise security teams worldwide
Today, we’re launching the Strix Platform for teams that want to run Strix continuously.
With Strix Platform, teams can:
- pentest their full stack continuously
- block vulnerable PRs from merge
- validate findings with proof-of-exploit
- get merge-ready fixes
- retest automatically
- track security posture over time
Security shouldn’t be your bottleneck.
Strix helps you ship faster and deploy with confidence.
Try it now 🔗↓
strix.ai/blog/introducing-th…
Moataz Soliman retweeted
Introducing InsForge 2.0: The Backend for Agentic Development
Our OSS backend provides databases, auth, storage, model gateway, and edge functions accessible through a context-optimized layer that agents can better understand and operate end-to-end.
GitHub: github.com/InsForge/InsForge
Key Benchmarks (vs. Supabase MCP):
- 14% higher accuracy
- 1.3x faster per task
- 2.4x fewer tokens
Better. Faster. Cheaper.
Build features more quickly and confidently — all at 41.7% of the cost.
Shipping your ideas today.
$ npx @insforge/cli create
Moataz Soliman retweeted
.@RunAnywhereAI makes it easy for app developers to run AI models directly on phones and edge devices — fast, private, offline — with a single SDK and a dashboard to manage everything across user devices.
Congrats on the launch @sanchitmonga22 and @ShubhamMal72313!
ycombinator.com/launches/PFB…
Moataz Soliman retweeted
If Figma and Amplitude had an AI baby 👀
Design Meets Analytics
AtlasGrid (@AtlasGridAI) is the new ‘source of truth’ for mobile apps. It maps your UI, connects your analytics, and gives your product team a clear picture of what people do in your app.
Accelerate your product iteration: ycombinator.com/launches/Ow5…
Congrats on the launch, @OlegKostour, Aram, and Anton!
Moataz Soliman retweeted
Today we’re excited to launch Bitrig. Bitrig builds native Swift apps just by chatting with AI. In minutes, and with no code required, you can create an app and deploy it directly to TestFlight. youtu.be/e-DqSVEI50w #Swift #SwiftUI #BuildInPublic
Moataz Soliman retweeted
BREAKING: @daytonaio just became the fastest-growing infrastructure company in history.
$0 → $1M ARR in 2 months.
Faster than Stripe.
Faster than Vercel.
Faster than AWS.
Yes, really. 🧵👇
