Find Vulnerabilities with AI. Keep Your Code Private.
Find exploitable vulnerabilities while keeping source code on your own infrastructure, with SecMate disclosures and a local-model review comparison.
Maxime Rossi Bellom
Co-Founder and CTO
Maxime Rossi Bellom, Co-Founder and CTO
Maxime is turning years of offensive research into a security teammate for developers. As a researcher at Quarkslab, he led work that hacked Google Pixel and Samsung Galaxy phones, and he is a frequent speaker at conferences like Black Hat. That attacker experience now powers SecMate’s mission to find the exploitable issues in complex code that traditional scanners miss.
10m
Mistral Vibe Shell Permission Bypass Leading to Arbitrary Code Execution
Two Mistral Vibe permission bypasses could execute arbitrary code or access files outside the workspace when repository content led the model to issue …
8m
Which Vulnerabilities Do AI Coding Agents Still Produce?
Coding agents may handle familiar defences such as parameterised queries better than security requirements that depend on context. C/C++ studies do …
2m
CVE-2026-43603: Local Denial of Service in AMD's Linux GPU Driver
SecMate automatically discovered CVE-2026-43603 in AMD’s Linux GPU driver. A NULL-pointer dereference can cause a kernel crash and local denial …
9m
Five Bosch Sensortec SensorAPI and COINES SDK Vulnerabilities
SecMate found five memory-safety vulnerabilities in Bosch Sensortec’s BHI360, BHI385 and BME690 Sensor APIs and the COINES sensor evaluation …
20m
From USB to ESP: CPG-Guided Local Analysis
How SecMate reduces repository-scale analysis to source-backed CPG evidence slices, applied to three disclosed vulnerabilities in Espressif USB host …
14m
Corrupting the Secure World: Three Memory-Safety Flaws in OP-TEE
SecMate’s automated analysis discovered three memory-safety issues in OP-TEE, an open-source Trusted OS for Arm TrustZone commonly deployed with …
5m
Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
13m
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
4m
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …