This week, our CEO Jonathan Mortensen joined Jay Kapoor on the CLIMB Podcast to unpack a question that’s suddenly top-of-mind for every security leader: What actually happens to your data when you talk to an AI? Jonathan broke down how today’s AI browsers and assistants are quietly creating
We are open-sourcing OpenPCC because we believe real AI privacy infrastructure must be built in the open, and we’re doing so in a way that cannot be rewritten after the fact. Before I explain the specifics, I want to describe the problem: open-source has had some rugpulls recently. So,
As AI becomes more powerful and accessible, the stakes around data privacy and protection are higher than ever. For instance, a single employee, seeking to leverage AI’s ability to read and understand a PDF, can easily upload a confidential document to an LLM and, in doing so, mistakenly expose
Featured in * * * * Print DigitTrendz - Signal for AI Secures $4.2M to Boost Confident Security FinSMEs - Confident Security Raises $4.2M in Funding Fortune Term Sheet - The Windsurf and Scale deals underscore a fragile reality for startup employees Founders Today - Confident Security emerges from Stealth with $4.
Oblivious HTTP (OHTTP), or “Enterprise TOR” as I like to call it, is a specification for making anonymous requests to servers on the Internet. The spec (RFC 9458) was developed in Oct ‘21 and published on Jan ‘24. The “chunked” (e.g., for streaming) version began development in Aug 2023
Today we're releasing confidentsecurity/bhttp, a Go implementation of RFC 9292 Binary Representation of HTTP Messages, or BHTTP for short. Our library's features include: * Encoding and decoding to/from *http.Request and *http.Response types. * Indeterminate-length and known-length BHTTP messages * Encoding/decoding logic that behaves like
At Confident Security, we’re a Go shop. We like Go because Go code is scrutable – what you see is mostly what you get. Go’s error handling is explicit, albeit a bit verbose; it builds fast; it’s strongly typed; it runs pretty fast without much work; and, generally,
Confident Security runs a provably private AI inference engine called CONFSEC. And we've done a lot of engineering to make sure nobody can ever see a submitted prompt. For example, while we can see that requests come in, we have no idea where they're from, what
This week, keep an eye out for our first open-source release. AI privacy for all!
Hacks galore, both MCP and AI data collectors, and more!
AI Agent vulnerabilities, AI economics, and some attention deep dives - we've had a fun week of reading!
We've got some fun articles from last week about chip memory, AI warnings, privacy reminders, and more!