The AI That Found A Bug In The World’s Most Audited Code

Episode notes

Matt Knight spent five years as OpenAI’s CISO. Now he runs what colleagues call “the most interesting job at the company”: leading Aardvark, an AI agent that finds security vulnerabilities the way a human researcher would - by reading code, writing tests, and proposing patches. It recently found a memory corruption bug in OpenSSH, one of the most heavily audited codebases in existence. In this conversation with a16z’s Joel de la Garza, Matt traces the evolution from GPT-3 (which couldn’t analyze security logs at all) to GPT-4 (which could parse Russian cybercriminal chat logs written in slang) to today’s models that discover bugs humans have missed for decades. They also discussed the XZ Utils backdoor that nearly compromised half the internet and why 3.5 million unfilled security jobs might finally get some relief, and how Aardvark could give open source maintainers a fighting chance against nation-state attackers. If you enjoyed this episode, please be sure to like, subscribe, and share with your friends.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• Ep 93: CEO of Redwood Research Buck Shlegeris on OpenAI/HuggingFace Revelations, Fixing AI Safety & Takeover OddsUnsupervised Learning with Jacob Effron · on OpenAI98 / 100
• The 18x Midas Lister Betting $3B on AI (and calling most of it fake) | Navin Chaddha, MayfieldThe Peel with Turner Novak · on OpenAI91 / 100
• Paul Graham On Startups, Ambition, and Great FoundersY Combinator Startup Podcast · on OpenAI88 / 100
• How SSW turned AI into ½ their pipeline - Ulysses Maclaren, COO of SSWSaaS Stories · on OpenAI86 / 100
• Unscripted with Victor: Agentic AI, Fintech's Future, and the Death of the App EconomyVentures from The Valley · on OpenAI83 / 100
• The Agile Insurer: How AI, People and Strategy Are Reshaping Insurance | 8 Industry LeadersMaking Risk Flow · on OpenAI80 / 100

• How AI Is Rewriting the Rules of Cybersecurity | Truffle Security & Socket95 / 100
• Building Self-Accelerating AI with Mirendil65 / 100
• Inside vLLM: The Engine Powering Open-Source AI
• Ideogram’s Open-Weights Image Model and the Future of AI Design
• Building Search for AI Agents with Exa CEO Will Bryk