About

Author

Johnny Wang

Date

05/01/2026

Location

San Francisco, CA

AI is making hacking easier than ever.

More than 160 new critical vulnerabilities are discovered daily. That is a 4.6x increase from merely three years ago.

The proliferation of vibe-coded artifacts and the C-suite's eternal pursuit of high token usage as a proxy for productivity has caused major degradation of quality throughout the software world. This software then ships and gets deployed at global enterprises, blissfully unaware that the same vendors they have trusted for decades have turned into slop.

Meanwhile, nefarious actors are running LLMs 24x7 as hyper-intelligent security fuzzers. The mean time from disclosure to exploit has collapsed from 63 days to 5. Defenders are still ticketing patches in Jira on a quarterly cadence.

In 2026 alone, we have seen:

  • Lovable being breached despite repeated warnings from good-faith researchers

  • Vercel customers leaking environment variables after attackers chained a single OAuth token from an upstream vendor most of them had never heard of, with Vercel's own CEO publicly attributing the attackers' velocity to AI augmentation

  • An open-source framework called CyberStrikeAI quietly running through more than 600 Fortinet appliances across 55 countries, fully automated, no human in the loop


An unsupervised LLM with a CVE feed has more patience than any enterprise's patch SLA. That asymmetry is not a future problem. It is the present, and it is getting worse every quarter.

The only thing that scales against machine-speed attack is machine-speed defense. That is what we are building.

Who we are

Stealth global team with decades of vulnerability research background, together with SF-based elite AI team. We have very high bar in engineering, and care very much about product design. Come build with us.

Contact

We’ll get back to you within 1–2 days.

© 2026 Hinoki Security. All rights reserved.

© 2026 Hinoki Security. All rights reserved.