Pi: $100M AI Cyber Agent from Ex-Tesla Hacker Secures xAI, Patches Bugs in Minutes

Yoni Ramon, the hacker who lead Tesla's in-house security team and secured X during Musk's acquisition, has launched Pi — a $100M-valued AI cyber security agent. The startup, co-founded with ex-Microsoft senior security researcher Guy Arazi, raised $35M from Brightmind Partners and Third Point Ventures, with angel investments from CrowdStrike CEO George Kurtz and Armis cofounders.
How Pi's "Security Brain" Works
Pi ingests a company's full security context: past incidents, codebase, policies, Slack/email threads — processing all data within hours regardless of company size. It prioritizes vulnerabilities and proposes fixes for 90% of reported bugs, according to Navan CISO Mark Carter, an early customer. "Nine times out of 10 you can automatically merge their fix… from the speed from getting to 'I found something' to 'it's fixed,' it's minutes," Carter told Forbes. He estimates it saves at least one to two full-time head counts.
Key Technical Details
- Ramon calls Pi a "security brain" that learns from every incident, policy, and code change inside a client network.
- The agent monitors developers' work in real time, flagging security issues as code is written.
- Pi processes all data within a couple of hours, regardless of customer size.
- Early customers include xAI (Musk's AI lab running Grok and the Colossus supercomputer).
Comparison to Other AI Security Startups
Pi competes with companies like Depthfirst (valued at $580M, $120M funding) which also use AI to find and patch vulnerabilities. Arazi says Pi's differentiation is its "eidetic memory" — learning from a company's unique history to avoid repeated mistakes: "We help companies to secure their software as fast as they build it… The idea is not to make the same mistakes over and over."
For teams running AI workloads on infrastructure like Colossus (Anthropic pays $1.25B/month for compute until May 2029), automated patching at speed is critical. Pi's approach reduces context-switching for security teams and accelerates the fix cycle from hours to minutes.
📖 Read the full source: HN AI Agents
👀 See Also

Sandboxing AI Agents with WebAssembly: Zero Authority by Default
Cosmonic argues that traditional sandboxing (seccomp, bubblewrap) fails for AI agents due to ambient authority. WebAssembly's capability-based model grants zero authority by default, requiring explicit imports for filesystem, network, or credentials.

VulnHunter: Capital One's Agentic AI Code Security Tool Now Open Source
Capital One open-sourced VulnHunter, an agentic AI tool that simulates attacker entry points, falsifies findings to cut false positives, and generates targeted code fixes.

Claude Code Security Advisory: CVE-2026-33068 Workspace Trust Bypass
Claude Code versions prior to 2.1.53 contain a vulnerability (CVE-2026-33068, CVSS 7.7 HIGH) where malicious repositories can bypass workspace trust confirmation via .claude/settings.json. The bug allowed repository settings to load before user trust decisions.

Claude Code Security Plugin: Pushing AppSec into the Developer Workflow
Anthropic shipped a security-guidance plugin for Claude Code that identifies and fixes vulnerabilities during coding. Available to all users via the plugin marketplace, not just Enterprise. Discusses whether this becomes a lightweight assistant, serious AppSec layer, or bridge to Claude Security.