The trusted source for open source (& memes).
- Tweets 4,748
- Following 116
- Followers 6,539
- Likes 12,627
Pinned Tweet
Today, we're starting Athena's disclosure program. The first release is 14 vulnerabilities that were quietly fixed in open source projects but never got a CVE, so they never popped up on your scanners. Each now has an advisory on our public VEX feed, a free patch in our GitHub repo, and a remediated artifact available in Chainguard Repository.
Below, we show what these silent vulnerabilities can hide.
Read more about Athena's disclosure process: chainguard.dev/unchained/ath…
1
9
28
1,857
We're making a $200M multi-year commitment in EMEA. This includes opening our new office in Clerkenwell, London, as well as adding 200 new roles across engineering, sales, and customer success.
On our continued investment in EMEA, Chainguard GVP of EMEA, Ian Burley, says, “some of the best engineering and security teams we work with are in EMEA, and they know prevention is the only option.
More details: prnewswire.co.uk/news-releas…
1
1
10
598
We'll handle the building blocks so you can handle the building 💪
Lemuel Valdez, CISO at Cobham Satcom, shares why they trust Chainguard to reduce vulnerability risk: chainguard.dev/customers/cob…
1
6
237
Chainguard ⛓️ retweeted
Chainguard CEO @lorenc_dan: the average time to exploit has gone negative. "You're only limited by token cost."
Back in August, Dan (co-founder & CEO of @chainguard_dev) and I got into:
- why the long tail of never-exploited bugs is gone
- why fixing bugs, not finding them, has always been the bottleneck
- how agents made maintaining a fork cheap again
Brought to you by:
• @WalrusProtocol - Walrus Memory gives AI agents portable, verifiable memory that carries context across apps, sessions, and other agents: walrus.xyz/cot
• @SvixHQ - reliable webhooks for startups and the Fortune 500. Qualified startups get $12,000 in credits, YC companies $50,000: link.svix.com/cot
Look up the @chain_ofthought podcast on YouTube, Spotify, Apple Podcasts (links below), or wherever you listen. Thanks, Dan!
1
5
10
833
Assemble was ✨_______✨
We’ll let our #Assemble26LDN attendees fill in the blank 👇
1
6
375
Slow CI was bottlenecking our AI agents… so we fixed it.
🤝 Meet Chainguard Checks: Turn your CI into a fast, pre-commit check, callable from anywhere.
✅ Starts in seconds with dependencies pre-loaded
✅ Runs in isolated microVMs built on zero-CVE Chainguard OS packages
✅ Blocks exfiltration with default-deny network policies and host-side credential injection
✅ Feeds verdicts back into agent loops so agents can iterate until checks pass, so every PR can be born green
Chainguard Checks is now available in beta. Try it free for 30 days: chainguard.dev/unchained/int…
9
331
Public registries will give you whatever you ask for (and what you don’t *cough cough malware*).
Chainguard Libraries for Go and .NET only allow you to pull packages that have already been scanned for malicious behavior and vetted for security concerns ✅ Now available in early access.
Adam La Morre demos how you can avoid the next malware attack on NuGet and Go 👇 chainguard.dev/unchained/cha…
1
7
313
#Assemble26LDN dump incoming 📸🇬🇧
Thanks to everyone who joined us in London for a jam-packed day of panels, product announcements, and workshops. ‘Till next time! 💜
1
8
335
93% of security leaders say they can't fix AI-driven exploits as fast as attackers find them.
We surveyed 1,300 security leaders across nine global markets about AI and patching:
📊 76% of these leaders have already dealt with an AI-driven attack in the past year
📊 54% admit they sometimes leave high or critical vulnerabilities unpatched on purpose
📊 At $1B+ companies, that rate is more than 2x what we saw at companies under $250M
The leaders who believe AI has already outpaced their team are the least likely to leave critical flaws open. We share our full findings in The AI Exploit Gap: chainguard.dev/unchained/the…
2
1
6
352
*of course* we made the #LinkedInTopStartups list for the third year 💥 in 💥 a 💥 row 💥
Huge shoutout to our customers, partners, and Chainguardians for helping us get here. For the full list: linkedin.com/pulse/linkedin-…
1
5
259
Introducing Chainguard Harness: a vulnerability hunter that uses Anthropic’s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in a live build of your application.
Chainguard reproduces every finding and reviews every fix before it reaches you. No model access required.
Chainguard Harness is available now in Claude Marketplace by @AnthropicAI, so Anthropic customers can use their existing commitment to buy it: claude.com/marketplace/agent…
5
6
94
8,525
🚨ICYMI: Here’s what we announced during the #Assemble26LDN keynote 🚨
🐕🦺 Chainguard Harness: find and remediate vulnerabilities with Claude Mythos 5.1 before they become zero-days. Now in beta.
✅ Chainguard Checks: a new CI-less approach to securing your builds, designed for how AI-driven development has changed what teams need from CI. CI jobs turn green up to 12x faster than traditional CI runs. Now in beta.
2
5
22
1,496
🏝️ Chainguard Workspaces: secure sandboxes for agentic software development and production agent loops. Now in beta.
📚 Chainguard Libraries: broader ecosystem coverage with new Libraries for Go and .NET, deeper protection with CVE remediation for Go and JavaScript, and faster threat response with zero-day protection powered by Athena.
🧑🌾 Guardener Use Cases: Guardener can now migrate your containers from the CLI, swap your GitHub Actions for Chainguard Actions with the GitHub app, and show migration opportunity insights in a new console dashboard.
1
5
238
⚖️ Compliance Dashboard: real-time compliance metrics for DISA STIG and FIPS 140-3 base images, all in one place.
🎬 Chainguard Actions: hardened catalog of 1,000+ GitHub Actions is built and continuously maintained in the Chainguard Factory. Now generally available.
🔌 Chainguard MCP: secure access to Chainguard artifacts, version information, and APIs, right from your AI coding tools and agents.
Get the full run-down in our recap blog: chainguard.dev/unchained/eve…
1
140
3… 2... 1… it’s time to ASSEMBLE 🎬
Join our #Assemble26LDN keynote: linkedin.com/events/75129019…
1
9
458
Linky’s a light packer (minimal images ONLY).
Next stop: #Assemble26LDN 🇬🇧
3
285
We built a harness around Mythos to find vulnerabilities in the open source production that integral systems depend on.
The first finding is now public: chainguard.dev/unchained/the…
5
22
6,132
We're honored to be named one of Fortune’s Best Workplaces in Technology for the second year in a row! 🎉
This recognition comes straight from our team. It’s based on what Chainguardians say about working here, which makes it even more meaningful.
Thank you to our team for making Chainguard a great place to build 💜 greatplacetowork.com/best-wo…
1
8
247