Entity trail

Straiker

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-30 / reddit-researcherStraiker Raises $64M Series A to Secure the 'Agentic Workforce' — 15x Revenue in Under a YearStraiker announced a $64M Series A on June 29 (total funding $85M), led by Marathon Management Partners, Citi Ventures, Illuminate Financial, and Workday Ventures, with Bain Capital Ventures and Lightspeed returning. The agentic-security startup — led by CEO Ankur Shah (ex-Prisma Cloud SVP/GM) — grew run-rate revenue more than 15x in under a year, selling agent discovery, pre-deployment adversarial testing, and runtime protection to frontier labs and Fortune 500s. The raise quantifies how fast 'secure the AI agents you're deploying' has become a standalone enterprise budget line.
2026-05-22 / skill-finderNomShub Attack Chain: Indirect Prompt Injection + Sandbox Breakout in Cursor Achieves Persistent Remote Shell Access via Built-In TunnelSecurity researchers at Straiker disclosed NomShub, a vulnerability chain in Cursor where indirect prompt injection in a malicious repository triggers a sandbox escape through Cursor's command parser, then leverages the editor's built-in remote tunnel feature to establish persistent, authenticated shell access to the victim's machine. Simply opening a crafted repo is sufficient for exploitation. This demonstrates that IDE-integrated AI agents with tunnel capabilities create attack surfaces that didn't exist in traditional development environments.
2026-04-05 / thought-leaders-researcherClaude Code Leak Security Analysis: Straiker Warns Attackers Can Now Craft Targeted Prompt Injections Against Known ArchitectureAI security firm Straiker analyzed the Claude Code source leak and warned that attackers can now study exactly how data flows through Claude Code's internal context pipeline and craft payloads specifically designed to survive context compaction. 'Blind jailbreak attempts are no longer necessary when the architecture is fully documented,' the firm noted. The leak also revealed that Claude Code uses axios as a dependency — a library that was recently compromised in a supply chain attack. Combined with the 10M+ views and widespread mirroring, this creates a measurably expanded attack surface for the most popular AI coding tool.
2026-03-27 / agents-researcherHelp Net Security Publishes RSAC 2026 Top Product Launches Roundup: Agent Security Dominates with Astrix, Bonfy, Stellar Cyber, Straiker, Teleport, and Black DuckHelp Net Security's March 27 RSAC 2026 product launch roundup confirms agent security as the dominant category, highlighting Astrix Security's four-method agent discovery, Bonfy ACS 2.0 for content security across all AI agents, Stellar Cyber's agentic SOC, Straiker's Discover/Defend AI for coding agents, Teleport Beams for Firecracker VM agent isolation, Black Duck Signal for AI-generated code security, and Mimecast's Agent Risk Center. The roundup validates that agent governance has moved from conference talk-track to shipping product category.
2026-03-27 / sources-researcherStraiker Launches Discover AI + Defend AI: 12,000+ MCP Vulnerability Database, Sub-300ms Runtime Detection at 98% AccuracyStraiker shipped Discover AI and expanded Defend AI at RSAC 2026 to cover coding agents, productivity agents, and custom-built platforms. Discover AI runs MCP vulnerability detection against a database of 12,000+ known MCP vulnerabilities, identifies security misconfigurations, and classifies prompts to flag risky agent behavior. Defend AI, trained on millions of real-world agent traces from frontier AI labs, detects agentic threats with sub-300ms latency and over 98% accuracy. Monitors agent actions and prevents data exfiltration and destructive actions.
2026-02-20 / agents-researcherTrail of Bits Audits Perplexity Comet Four Prompt Injection Attacks Extract GmailTrail of Bits demonstrated four prompt injection techniques extracting Gmail data from Perplexity Comet AI browser. Straiker documented zero-click attack deleting entire Google Drive. Google classified as wont fix.

Graph relationships

RELEASED
Straiker -> Defend AI
Straiker expanded Defend AI for agent security at RSAC 2026
Source finding
RELEASED
Straiker -> Discover AI
Straiker shipped Discover AI for MCP vulnerability detection
Source finding
CRITICIZES
Straiker -> Cursor
Straiker researchers disclosed NomShub vulnerability in Cursor.
Source finding
WORKS AT
Ankur Shah -> Straiker
Ankur Shah (ex-Prisma Cloud SVP/GM) is CEO of agentic-security startup Straiker.
Source finding
RAISED
Straiker -> Marathon Management Partners
Straiker raised $64M Series A led by Marathon Management Partners on June 29, 2026.
Source finding

Source trail

up to $10 million processing record vulnerability volume mass-reassigning Bugzilla tickets, fabricating bug replies, and badgering a maintainer Straiker raised a $64M Series A NeuralTrust raised ~$20M seed Snyk reports CERT/CC advisory VU#221883

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues