Top all-time · #12228
EdgeBit
Company blog · edgebit.io/blog · on HN as robszumskisecuritysystems
EdgeBit is the company blog at edgebit.io, writing about security and systems. Since 2022, 6 different Hacker News readers have linked it 27 times, most often “Protect Vault unseal keys using Nitro Enclaves and a cryptographic attestation”. It is still writing: the last post was on 2025-09-29, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
The linked EdgeBit site is a company page for live software vulnerability analysis. The comments are about its pricing page, a malware warning, and password storage advice, not about the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
EdgeBit secures your software supply chain by focusing on code that is actually running. This simplifies vulnerability management as it cuts through noise.
Most-linked posts?
- Protect Vault unseal keys using Nitro Enclaves and a cryptographic attestation2 people · 3 mentions · first linked 2022-11-06
What Hacker News says?
this is an area that is top of mind for me right now. you don't have to vendor your deps to get a detailed report of what changed, and bonus, how your app calls into it. just wrote about it: https://edgebit.io/blog/code-diff-reachability/
Comment linking /blog/code-diff-reachability/
on “Snyk security researcher deploys malicious NPM packages targeting cursor.com”Submitted Principles for Building One-Shot AI Agents as a story · 93 points
HN discussionOn a related note; if you're still considering whether you should put passwords, or rather, hashes thereof—in your application database of choice—please, decide against doing so at all costs! Instead, you should probably use a dedicated secret management deployment: think Hashicorp Vault[1], OpenBao[2], or Keto[3] if you'd like to go beyond with ReBAC (Relationship-based access control) of Google's Zanzibar[4] fame.…
Comment linking /enclaver/docs/0.x/guide-vault/
on “A security incident that may involve your Plex account information”Submitted Enclaver: Protect Containers In-Use with AWS Nitro Enclaves and KMS as a story · 10 points
HN discussionI just wrote a post on this. We have an eBPF + SBOM based security tool and it runs great due to hooking the kernel directly via Kube DaemonSet: https://edgebit.io/blog/base-os-vulnerabilities/ tl;dr: Amazon prioritizes patching really well, fixing real issues first
Comment linking /blog/base-os-vulnerabilities/
on “Bottlerocket – Minimal, immutable Linux OS with verified boot”Submitted Getting acquainted with eBPF as a security tool as a story · 4 points
HN discussionRob from EdgeBit (YC W23) – super excited to bring our dependency autofix tech + static analysis tools to FOSSA! You can read more on our blog: https://edgebit.io/blog/edgebit-joins-fossa/
Comment linking /blog/edgebit-joins-fossa/
on “Fossa Acquires Edgebit - Auto Dependency Updates”Submitted Use Code Reachability to Fix Security Issues, Not Vuln Prioritization as a story · 3 points
HN discussionYou can run Vault inside of an enclave to protect it's memory: https://edgebit.io/enclaver/docs/0.x/guide-vault/
Comment linking /enclaver/docs/0.x/guide-vault/
on “CircleCI says hackers stole encryption keys and customers’ source code”Submitted Security for Nodes under GKE and EKS: 0 vulns or 70? as a story · 2 points
HN discussionI'm curious to hear what tools folks are using for generating software bill of materials (SBOMs) today? We're huge fans of the Syft project: https://github.com/anchore/syft You can read more about our "realtime SBOM" concept as well: https://edgebit.io/blog/realtime-sbom/
Comment linking /blog/realtime-sbom/
on “Launch HN: EdgeBit (YC W23) – live software vulnerability analysis”Submitted The identity of your code can’t be stolen as a story · 2 points
HN discussionFYI I don't know what you have on the https://edgebit.io but some files got quarantined by MS defender on my company laptop Trojan: Trojan:JS/Phish.RA!MTB
Comment linking /
on “Launch HN: EdgeBit (YC W23) – live software vulnerability analysis”Submitted The identity of your code can’t be stolen as a story · 2 points
HN discussionSmall bit of feedback - you have a pricing page [1] that has no prices on it. It offers me the chance to start a free trial and says it's priced per server, but I'm not going to sign up or start a free trial if I don't know what the price per server actually is. [1] https://edgebit.io/plans/
Comment linking /plans/
on “Launch HN: EdgeBit (YC W23) – live software vulnerability analysis”Submitted Protect Vault unseal keys using Nitro Enclaves and a cryptographic attestation as a story · 2 points
HN discussionThis incident and the Colonial Pipeline attack were the main drivers behind the Biden cybersecurity executive order "Executive Order on Improving the Nation’s Cybersecurity" [1] which has driven changes to policy at NIST, FDA, OMB and others [2]. My opinion is that while these policies are fuzzy and lack specifics, it's just the first round of pushing industry in the correct direction without mandating specific tool…
Comment linking /regulations/
on “The Untold Story of the Boldest Supply-Chain Hack Ever”Submitted Use Code Reachability to Fix Security Issues, Not Vuln Prioritization as a story · 1 points
HN discussionAn interesting architectural goal: this uses containers both as the source for your app code but also as the output, which is a self-installing container. This means that systems like Kubernetes or anything that runs containers can install and run a secure enclave on a suitable node. You can read more here: https://edgebit.io/enclaver/docs/0.x/architecture/
Comment linking /enclaver/docs/0.x/architecture/
on “Show HN: Enclaver – create and run secure enclaves”Submitted Use Code Reachability to Fix Security Issues, Not Vuln Prioritization as a story · 1 points
HN discussionSubmitted Using a Hardware Root of Trust to Generate Trustworthy SBOMs as a story · 1 points
HN discussionSubmitted Using Linux IMA with eBPF to protect a workload from supply chain risk as a story · 1 points
HN discussionSubmitted Generating SBOMs Remotely with a Hardware Root of Trust as a story · 1 points
HN discussionSubmitted Breaking down the CVSS v4 spec for scoring vulns as a story · 1 points
HN discussionSubmitted Getting acquainted with BPF as a security tool as a story · 1 points
HN discussionSubmitted The True Cost of Automatic Vulnerability Patching as a story · 1 points
HN discussionSubmitted Isolate customer GitHub creds to your integration code with a secure enclave as a story · 1 points
HN discussion