Asterisk provides autonomous AI security agents that continuously audit GitHub‑hosted codebases, automatically generate attack vectors, validate exploits with proof‑of‑concepts, and create patches submitted as pull requests. The platform monitors every commit for new zero‑day risks and integrates with AI coding assistants for real‑time snippet scanning, enabling engineering teams to remediate vulnerabilities without manual security effort.
Funding
$500K raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Software development teams often rely on manual code reviews and traditional security testing, which can miss subtle vulnerabilities and delay remediation, leaving production systems exposed to zero‑day exploits.
Solution
Asterisk (operating under the winfunc brand) provides autonomous AI security agents that continuously audit a codebase hosted on GitHub. The agents automatically index the repository, generate attack vectors, and verify exploitability with proof‑of‑concepts. For each confirmed vulnerability, the system creates a patch and opens a pull request, enabling developers to merge fixes directly. Continuous scanning of every new commit keeps the codebase protected against emerging threats without requiring dedicated security personnel. The platform also offers real‑time vulnerability detection within AI‑enhanced editors, allowing developers to scan snippets and verify changes inline.
Target Audience
Primary customers are software engineering teams and DevOps groups that need automated, scalable security testing for their codebases, particularly those using GitHub for version control.
Features
- AI‑driven code indexing and attack‑idea generation across entire repositories
- Automated proof‑of‑concept validation for each identified vulnerability
- One‑click patch generation with pull‑request submission for immediate remediation
- Continuous monitoring of new commits to detect and address zero‑day risks
- Integration with AI coding assistants (e.g., Cursor, Claude) for in‑editor snippet scanning
- Secure GitHub connection with automatic architecture mapping