Top all-time · #15153
Tolmo
Company blog · tolmo.com/blogsecurityai
Tolmo is the company blog at tolmo.com, writing about security and ai. Since 2026, 5 different Hacker News readers have linked it 8 times, most often “Fable 5 wrote a Windows kernel in 38 minutes”. It is still writing: the last post was on 2026-10-22, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Tolmo's blog for a post on how LLMs surfaced the impact of an already-known PHP bug. Most comments on the blog's links are job postings for the company.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Autonomous security agents on a live knowledge graph of your code, cloud, and vendors. Tolmo finds vulnerabilities, misconfigurations, and threats, then ships the fix.
Most-linked posts?
- Fable 5 wrote a Windows kernel in 38 minutes3 people · 3 mentions · first linked 2026-06-23
- Technical details of php2shell discovered 2 years ago2 people · 2 mentions · first linked 2026-10-22
What Hacker News says?
Tolmo | multiple roles | San Francisco, Ca, USA | ONSITE | Full time I am hiring for multiple roles in cybersecurity x AI [1] We have security research and fullstack engineer (platform, product). We are hiring in SF in office only at this point. Candidating is one form away[2] [1] https://tolmo.com/about/careers/ [2] https://jobs.ashbyhq.com/tolmo/form/website-generic
Comment linking /about/careers/
on “Ask HN: Who is hiring? (October 2026)”Submitted Fable 5 wrote a Windows kernel in 38 minutes as a story · 4 points
HN discussionTolmo | multiple roles | San Francisco, Ca, USA | ONSITE | Full time I am hiring for multiple roles in cybersecurity x AI [1] We have security research and fullstack engineer (platform, product). We are hiring in SF in office only at this point. Candidating is one form away[2] [1] https://tolmo.com/about/careers/ [2] https://jobs.ashbyhq.com/tolmo/form/website-generic
Comment linking /about/careers/
on “Ask HN: Who is hiring? (September 2026)”Submitted Technical details of php2shell discovered 2 years ago as a story · 3 points
HN discussionYes, the actual bug was known before, but LLMs undoubtedly surfaced the impact: https://tolmo.com/blog/faster-than-anyone-can-fix-them/ What the PHP2Shell discoverer said on finding the issue: https://calif.io/php2shell/ > No special harness, or access to models that weren't generally available to everyone were used in the initial bug discovery. I focused on something I had a background in, knew its vulnerability hi…
Comment linking /blog/faster-than-anyone-can-fix-them/
on “Is this the new cyber normal?”Submitted Fable 5 wrote a Windows kernel in 38 minutes as a story · 2 points
HN discussionSubmitted Security checklist for AI startup CTOs as a story · 2 points
HN discussionSubmitted Fable 5 wrote a Windows kernel in 38 minutes as a story · 1 points
HN discussion