← The record

The second ascent

AppSec Venture

Founder / Principal Engineer - autonomous application-security platform

Cybersecurity · AI · 2026 - present · France

5 → 1security layers unified across code, dependencies, secrets, AI review and compliance
Overview

An autonomous application-security platform built to guard the entire software estate, especially as AI-generated code increases both output and risk. It reviews every change inside the pull-request workflow, bringing static analysis, dependency and supply-chain auditing, exposed-secret detection, AI-written-code review and compliance mapping into a single layer. Its whole-codebase model reasons across call graphs, trust boundaries and dependency reachability; specialised adversarial agents hunt in parallel, then validate, deduplicate and refute findings before returning severity-rated issues with actionable fixes. The platform is read-only, EU-hosted and launched into private beta in 2026 under Yggdrasil Digital.

What was built
  • Building an autonomous application-security agent that reviews pull requests and combines static analysis, dependency auditing, supply-chain risk and secret detection in one layer.
  • Designed whole-codebase reasoning and adversarial multi-agent validation to find cross-file and AI-generated-code flaws while reducing duplicate and false-positive findings.
  • Maps actionable findings and suggested fixes to OWASP, CWE, NIST, SOC 2, ISO 27001, GDPR and NIS2 controls.
  • Launched the read-only, EU-hosted platform into private beta in 2026 as a Yggdrasil Digital venture.