{"slug": "aisle", "name": "AISLE", "category": "ai", "category_name": "AI tools and apps", "description": "", "recommenders": 4, "commenters": 6, "warners": 2, "score": 1.753, "rising": 0.02, "first": "2026-02-05", "latest": "2026-09-02", "why": "We had a few AISLE-generated security reports, and the signal to noise was reasonably good.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 0, "compare": 0, "warn": 2}, "spark": [0, 0, 0, 1, 0, 0, 2, 0, 0, 0, 1, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "We had a few AISLE-generated security reports, and the signal to noise was reasonably good.", "kind": "", "icon": true, "domain": "aisle.com", "github_repo": null, "official_url": "https://aisle.com", "pricing": "", "aliases": ["AISLE"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 792588432, "item_id": 49536777, "url": "https://news.ycombinator.com/item?id=49536777", "by": "rwmj", "date": "2026-09-02", "version": null, "stance": "recommend", "quote": "We had a few AISLE-generated security reports, and the signal to noise was reasonably good.", "excerpt": "We had a few AISLE-generated security reports, and the signal to noise was reasonably good. The most notable bug/exploit their scanner found was: https://gitlab.com/nbdkit/libnbd/-/commit/e50bbd2681117c2dd8bb9f2b3f3105c7a9182f5a The tool basically had to chain two exploits together to reach this. It also came up with a patch to fix which was fairly sensible (but I ended up editing it further for clarity).", "context": "", "use_case": "security bug finding", "switched_from": "", "story": "Six curl CVEs after OpenAI and Anthropic came back with zero"}, {"id": 768943345, "item_id": 48058959, "url": "https://news.ycombinator.com/item?id=48058959", "by": "apexalpha", "date": "2026-05-07", "version": null, "stance": "recommend", "quote": "other companies like AISLE are matching Mythos on vulnerabilities", "excerpt": "At the same time other companies like AISLE are matching Mythos on vulnerabilities using older models but their own harnass: https://aisle.com/blog/aisle-matches-anthropic-mythos-on-freebsd-zero-days So while Mythos certainly is real I think you could do the same with Deepseek pro, GPT 5.5 etc...", "context": "", "use_case": "", "switched_from": "", "story": "Mozilla says 271 vulnerabilities found by Mythos and \"almost no false positives\""}, {"id": 750486753, "item_id": 46905422, "url": "https://news.ycombinator.com/item?id=46905422", "by": "catwell", "date": "2026-02-05", "version": null, "stance": "recommend", "quote": "he's very enthusiastic about AI analyzers such as ZeroPath and AISLE", "excerpt": "Not only that, he's very enthusiastic about AI analyzers such as ZeroPath and AISLE. He's written about it here: https://daniel.haxx.se/blog/2025/10/10/a-new-breed-of-analyzers/ and talked about it in his keynote at FOSDEM - which I attended - last Sunday (https://fosdem.org/2026/schedule/event/B7YKQ7-oss-in-spite-of-ai/).", "context": "", "use_case": "", "switched_from": "", "story": "Anthropic's Claude Opus 4.6 uncovers 500 zero-day flaws in open-source code"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 763723568, "item_id": 47732723, "url": "https://news.ycombinator.com/item?id=47732723", "by": "yorwba", "date": "2026-04-11", "version": null, "stance": "warn", "quote": "Overall I rate Aisle intellectually dishonest hypemongers talking their own book.", "excerpt": "We don't even need to hypothesize that much on the irrelevant nonsense, since they helpfully provide data with the detected vulnerability patched: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier#patched-freebsd-sensitivity-vs-specificity-appendix-patched-freebsd and half of the small models they touted as finding the vulnerability still found it in the patched code in 3/3 runs. A model that f", "context": "", "use_case": "", "switched_from": "", "story": "Small models also found the vulnerabilities that Mythos found"}]}], "who": [], "tags": [], "use_cases": ["security bug finding"], "compared": [{"slug": "claude-mythos", "name": "Claude Mythos", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49536114", "title": "Six curl CVEs after OpenAI and Anthropic came back with zero", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48053816", "title": "Mozilla says 271 vulnerabilities found by Mythos and \"almost no false positives\"", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47732020", "title": "Small models also found the vulnerabilities that Mythos found", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46902909", "title": "Anthropic's Claude Opus 4.6 uncovers 500 zero-day flaws in open-source code", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {"recommend": 1}, "2026-03": {}, "2026-04": {"warn": 1}, "2026-05": {"recommend": 2}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {"recommend": 1, "warn": 1}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 792600000, "item_id": 49537500, "url": "https://news.ycombinator.com/item?id=49537500", "by": "goobreee", "date": "2026-09-02", "version": null, "stance": "warn", "quote": "", "excerpt": "i don't think this is correct. if you look at this article by the curl founder daniel stenberg (https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/), he talks about how he previously ran Mythos on curl and that it found 5 issues: 1 turned out to be a low severity CVE, 3 were false positives, and 1 just a bug. So a) Mythos detects low severity CVEs too, and b) it is fairly noisy", "context": "", "use_case": "", "switched_from": "", "story": "Six curl CVEs after OpenAI and Anthropic came back with zero"}, {"id": 792588432, "item_id": 49536777, "url": "https://news.ycombinator.com/item?id=49536777", "by": "rwmj", "date": "2026-09-02", "version": null, "stance": "recommend", "quote": "We had a few AISLE-generated security reports, and the signal to noise was reasonably good.", "excerpt": "We had a few AISLE-generated security reports, and the signal to noise was reasonably good. The most notable bug/exploit their scanner found was: https://gitlab.com/nbdkit/libnbd/-/commit/e50bbd2681117c2dd8bb9f2b3f3105c7a9182f5a The tool basically had to chain two exploits together to reach this. It also came up with a patch to fix which was fairly sensible (but I ended up editing it further for clarity).", "context": "", "use_case": "security bug finding", "switched_from": "", "story": "Six curl CVEs after OpenAI and Anthropic came back with zero"}, {"id": 768997089, "item_id": 48062318, "url": "https://news.ycombinator.com/item?id=48062318", "by": "jonfw", "date": "2026-05-08", "version": null, "stance": "recommend", "quote": "", "excerpt": "I used to work with a guy who would always say \"if you're looking for trouble, you are going to find it\" When I hear that \"we found X bugs using some new tool\", where the standard for bugs is low and doesn't neccessarily require user impact in realistic scenarios, I think to myself- duh! You went looking for bugs, of course you found them. For a sufficiently complicated product, in my experience, you don't have to lo", "context": "", "use_case": "", "switched_from": "", "story": "Mozilla says 271 vulnerabilities found by Mythos and \"almost no false positives\""}, {"id": 768943345, "item_id": 48058959, "url": "https://news.ycombinator.com/item?id=48058959", "by": "apexalpha", "date": "2026-05-07", "version": null, "stance": "recommend", "quote": "other companies like AISLE are matching Mythos on vulnerabilities", "excerpt": "At the same time other companies like AISLE are matching Mythos on vulnerabilities using older models but their own harnass: https://aisle.com/blog/aisle-matches-anthropic-mythos-on-freebsd-zero-days So while Mythos certainly is real I think you could do the same with Deepseek pro, GPT 5.5 etc...", "context": "", "use_case": "", "switched_from": "", "story": "Mozilla says 271 vulnerabilities found by Mythos and \"almost no false positives\""}, {"id": 763723568, "item_id": 47732723, "url": "https://news.ycombinator.com/item?id=47732723", "by": "yorwba", "date": "2026-04-11", "version": null, "stance": "warn", "quote": "Overall I rate Aisle intellectually dishonest hypemongers talking their own book.", "excerpt": "We don't even need to hypothesize that much on the irrelevant nonsense, since they helpfully provide data with the detected vulnerability patched: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier#patched-freebsd-sensitivity-vs-specificity-appendix-patched-freebsd and half of the small models they touted as finding the vulnerability still found it in the patched code in 3/3 runs. A model that f", "context": "", "use_case": "", "switched_from": "", "story": "Small models also found the vulnerabilities that Mythos found"}, {"id": 750486753, "item_id": 46905422, "url": "https://news.ycombinator.com/item?id=46905422", "by": "catwell", "date": "2026-02-05", "version": null, "stance": "recommend", "quote": "he's very enthusiastic about AI analyzers such as ZeroPath and AISLE", "excerpt": "Not only that, he's very enthusiastic about AI analyzers such as ZeroPath and AISLE. He's written about it here: https://daniel.haxx.se/blog/2025/10/10/a-new-breed-of-analyzers/ and talked about it in his keynote at FOSDEM - which I attended - last Sunday (https://fosdem.org/2026/schedule/event/B7YKQ7-oss-in-spite-of-ai/).", "context": "", "use_case": "", "switched_from": "", "story": "Anthropic's Claude Opus 4.6 uncovers 500 zero-day flaws in open-source code"}]}