Veria Labs
verialabs.com
Actively hiring
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
Funding and backers
Backers
1
Y Combinator
Momentum
15/100
rising traction
Last sign of life
this month
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
Oct 2025
Went through Y Combinator
Sep 23, 2025
On the Hacker News front page From MCP to shell: MCP auth flaws enable RCE in Claude Code, Gemini CLI and more · 148 points
Tractionpublic signals, read monthly
Web presence
top 7%
of 133.2M domains by links, Common Crawl
Hacker News stories
1
best: 148 points
Backed byfrom the funds' portfolios and accelerator catalogs
Y Combinator Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
Antigen continuously maps and exploits your attack surface, fixes confirmed vulnerabilities, and verifies every remediation with AI-powered…
CodeWall is an AI penetration testing platform that autonomously maps your attack surface, chains real exploits, and delivers verified…
Casco maps and attacks your running product with AI agents, preserves reproducible exploit evidence, offers optional human verification…
See, prioritize, and eliminate external threats across vendors, domains, identities, and digital attack surfaces - managed by RiskProfiler…
Protect your web and mobile apps with Codesealer. Secure APIs, conceal source code, and eliminate attack surfaces. Try Codesealer today for…
AI-powered autonomous pentesting, plus deep-dive engagements by our in-house certified pentesters. Every fix retested and proven closed.
News
A Technical Breakdown of Jolt's Cryptography (and the exploit)
The mathematics of the missing Dory commitments behind the Jolt exploit.
Read more
Report
Hacking a16z: Breaking Jolt and Dory
How our agent found a full proof forgery in Jolt, a16z's zkVM.
Read more
Report
How Veria AI Found an Arbitrary Proof Forgery in Aleo
How a weak Fiat-Shamir transcript allowed arbitrary transaction forgery on Aleo, and earned us a $65,000 bounty.
Read more
Report
Pwning Pydantic's Monty: A $5K Sandbox Escape
Pydantic offered $5,000 to escape Monty, their Rust-built Python sandbox for AI agents. We chained two GC bugs into a use-after-free and walked away with the bounty.
Read more
Report
Securing Open Source Part 2: Cracking Kraken
Malicious dApps can impersonate trusted apps and disguise Solana transactions as harmless message signatures, allowing potential fund theft when chained together.
Read more
Report
Securing Open Source Part 1: Goose 1-Click RCE
We found a 1-click RCE in Block's Goose AI agent: any website could silently execute commands on your machine.
Read more
Report
Announcing our $3.2M Seed Round
We spun out of the #1 hacking team in the US and raised a $3.2M seed to make getting hacked a thing of the past.
Read more
Report
Breaking FRI in Eigen's zkVM
How missing index checks in FRI allow full proof forgery in Eigen's zkVM.
Read more
Report
From MCP to Shell
How MCP authentication flaws enable RCE in Claude Code, Gemini CLI, and more.
Read more
Report
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
0
Countries
1
San Francisco
United States
HQ