We've just shipped a major product release to Semgrep's hosted version! We now automatically calculate the developer fix rate for Semgrep reports. We believe fix rate is more important than true positives: it shows whether developers will bother to fix issues Semgrep reported. If in the end the developer doesn’t care, we’ve been worse than useless — we’ve wasted their time. We can’t claim to be developer-centric security tooling unless we’re making developers net more productive.

Fix rate is the main feature but we’re also announcing:
• graduation from beta to general availability for Ruby, Typescript, TSX, and JSX — which takes us to 17 languages!
• SAML, SSO login (for enterprise accounts)
• and automatic setup for GitHub repos

I've linked the accompanying blog post below 🙃

Big, big day today! My team, r2c, has launched Semgrep, after a long long time getting it ready for this moment. It's the whole thing: TechCrunch article, Product Hunt, Hacker News, and so on. Go check us out ☺️

Heya! Let me just take a quick moment here to showcase another project we're working on now with the same team as the aforementioned Bento.

is a tool we're developing for security teams. The short pitch is, it lets you write some heckin' smart search queries for source code, with a simple and familiar syntax. We're getting quotes such as "holy crap, why has this not existed? that should have been there a long time ago" from a Fortune 500 ProdSec lead. Which is the same as I'd say as well, to be honest :D

Hey all! I'm super excited to be going public today. Moreso than this being a promising career move, I'm just freakishly excited about the concept itself!

I'm now trying to figure out what the logical progression of human equity is. Are we gonna have shareholder meetings where y'all get to vote what direction my career should go in? Are we gonna see shareholder initiated co-founder pairings as some sort of a merger? Is my lifelong nemesis going to short-sell me?

Jokes aside, I sure hope those board meetings are actually going to happen! Let me know with a comment if you'd like to join a scheduled call to trial the concept.

PS: Remember that forecasting competition? As if yesterday I somehow managed to climb up to first place! See here, and please wish me more luck :) https://www.metaculus.com/contests/?selected=covid-19-forecasting-tournament&invite=kMKoAZ

…and as my second update, I'm testing a hypothesis with a fake landing page:

I put this site together in a couple hours, just to make it easier to pitch the idea to potential first customers, who would end up providing a real life use case, so that I can develop this service grounded in reality and closer to product/market fit than if I just went into it blind. I'm also in talks with a potential co-founder, who had already been dreaming of more or less the same product.

On the digital nomad side, I do have bad news. It was only responsible of me to rent a home in my hometown, Budapest, for the next two months with Covid-19 being such a serious threat. On a related note, I've been trying to improve my epistemological and forecasting skills, so I started modelling and making pandemic-related predictions in a contest: https://www.metaculus.com/contests/?selected=covid-19-forecasting-tournament&invite=kMKoAZ — so far I've been hovering between 2nd and 4th place in the contest, which is much better than I expected.

Hope y'all are doing well!

Heya community! Excited to say that my IPO is coming along well and should soon open :)

To report a bit on what I've been up to, my consultancy is off to a good start, with four clients from all over the world having contracted me ƒor product development related work so far. I'm involved in a wonderful cyber-security / code analysis project now, — which is basically a commercial application of all the experience I got from being an open source maintainer of https://coala.io/ before.

Let me share a bit more exciting news in a separate post right now…

Hi there, I just created a page here. You can now subscribe on my updates.