Vivek R

About

We built an autonomous hacking agent. Most AppSec tools report potential vulnerabilities. We prove them. Winfunc connects to your GitHub repositories, analyzes how your system actually behaves, and finds vulnerabilities that matter. It then generates working exploits and submits merge-ready patch PRs. We’re especially strong at catching the classes of bugs most tools miss: • business logic flaws (price manipulation, unauthorized transfers) • authorization bypasses • race conditions and TOCTOU bugs • memory safety issues I started working on this problem after seeing how broken the traditional AppSec workflow is. Security teams spend huge amounts of time triaging scanner noise while real vulnerabilities slip through. At the same time, engineering velocity keeps increasing while security teams stay small. We built Winfunc to change that. The platform runs continuously on every commit and focuses on signal over noise. Along the way we’ve disclosed critical vulnerabilities in projects and platforms including Supabase, Anthropic, React, Node.js, NGINX, Gumroad, and Bun.

Experience

Education