Find Vulnerabilities with AI. Keep Your Code Private.
Find exploitable vulnerabilities while keeping source code on your own infrastructure, with SecMate disclosures and a local-model review comparison.
Ramtine Tofighi Shirazi
Co-Founder and CEO
Ramtine Tofighi Shirazi, Co-Founder and CEO
Ramtine leads SecMate’s mission to make research-grade security a practical tool in your workflow. A former Innovation Director at Quarkslab, he holds a PhD in machine learning applied to cybersecurity. His background in leading large security teams and building commercial solutions from advanced research underpins SecMate’s focus on surfacing high-signal, actionable findings instead of noisy alerts.
10m
Mistral Vibe Shell Permission Bypass Leading to Arbitrary Code Execution
Two Mistral Vibe permission bypasses could execute arbitrary code or access files outside the workspace when repository content led the model to issue …
8m
Which Vulnerabilities Do AI Coding Agents Still Produce?
Coding agents may handle familiar defences such as parameterised queries better than security requirements that depend on context. C/C++ studies do …
2m
CVE-2026-43603: Local Denial of Service in AMD's Linux GPU Driver
SecMate automatically discovered CVE-2026-43603 in AMD’s Linux GPU driver. A NULL-pointer dereference can cause a kernel crash and local denial …
9m
Five Bosch Sensortec SensorAPI and COINES SDK Vulnerabilities
SecMate found five memory-safety vulnerabilities in Bosch Sensortec’s BHI360, BHI385 and BME690 Sensor APIs and the COINES sensor evaluation …
20m
From USB to ESP: CPG-Guided Local Analysis
How SecMate reduces repository-scale analysis to source-backed CPG evidence slices, applied to three disclosed vulnerabilities in Espressif USB host …
14m
Corrupting the Secure World: Three Memory-Safety Flaws in OP-TEE
SecMate’s automated analysis discovered three memory-safety issues in OP-TEE, an open-source Trusted OS for Arm TrustZone commonly deployed with …
5m
Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
13m
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
4m
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …