Co-founder @getfailsafe. Ex-CISO/eng leader @Grab, @Google. Writing on AI security, building companies, and lessons at 40.

Keeping the world safe
Joined April 2022
#1 on the most difficult black box benchmark globally. nuff said.
FailSafe SWARM is #1 on CVE-Bench. 62.5%. Nearly double the next best reported result.
1
50
1,792
Security through obscurity is not security.
despite the unfortunate timing, we take disclosures seriously at @typesafeai at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs in effort to maximize transparency, here is the link: gist.github.com/diogo149/810…
2
530
Advice to CISOs for 2027 - ask for budget for agentic tooling.
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
3
491
Wui | FailSafe retweeted
🚨 Security vulnerabilities reported in a SINGLE day: PHP — 2 CVEs Node.js — 10 CVEs NGINX — 5 CVEs Go — 1 CVE GitLab — 12 CVEs eMudhra — CA certificate compromise
214
1,450
353
12,511
1,006,091
My biggest takeaway? 1 school kid with a flash subscription hacked the largest banks in South Korea in his dorm room, with no professional training. Enterprises need to wake up and stop thinking security through obscurity (and some traditional security tools) will protect them in today’s world.
Last week some of South Korea's biggest banks were hit by a cyberattack. Thanks to a report from CrowdStrike tonight, we now know the entire hack may have been done by a single person. He used a combined stack of an open-source AI penetration tool named ARTEX, DeepSeek v4.1-Flash, GLM-5.3, Grok 4.6, and Claude Code.
4
587
Wui | FailSafe retweeted
If you're in Singapore for @F1 Week, Singapore @GovWare and @token2049, we're lining up a stellar set of events for our partners, clients, and friends: 👇🧵
1
2
5
659
That's why the good people at @getfailsafe put together a plan - The CISO's 100-Day Guide to 2027. A scorecard, a Master Budget Map (increase, decrease, justify, named vendors), and a 100-day plan to land a costed ask. getfailsafe.com/cisobudget20…
1
1
91
Also live: our AI Security Pathfinder Programme, under Monetary Authority of Singapore (MAS)'s FSTI 4.0 track. Up to 50% co-funding, S$200k for Singapore-licensed entities, S$100k outside Singapore. 100 days isn't a lot of time. It's exactly enough, if you start now.
1
42
In 100 days, your board will expect a response to agentic threats. In 100 days, you're gonna be facing roughly 10x the number of agents probing your attack surface. Are you ready?
1
1
5
742
Our @getfailsafe agent created this with one prompt and $6.80 in credits. gg marketing agencies.
4
413
Wui | FailSafe retweeted
Announcing FailSafe's listing as a solution provider on the @MAS_sg Pathfinder Programme (PathFin.ai). PathFin.ai is a collaborative initiative between the Monetary Authority of Singapore and the financial industry that fosters knowledge exchange in Artificial Intelligence (AI) implementations. For financial institutions in Singapore, this means FailSafe’s agentic offensive security platform is now among the solutions available for consideration through the programme. FailSafe SWARM continuously pentests applications, APIs, cloud and AI systems the way a real attacker would. Confirmed findings include proof-of-concept evidence, remediation guidance and audit-ready reporting, supported by traces showing how vulnerabilities were identified and validated. The practical difference is cadence. Offensive testing that keeps pace with release cycles rather than arriving once a year. SWARM achieved the highest publicly reported score on CVE-Bench v2.1.0, an autonomous black-box exploitation benchmark, scoring 62.5% in the zero-day setting on a single run per target. Let's chat about a new security model for the age of AI.
1
2
2
470
Wui | FailSafe retweeted
FailSafe SWARM is #1 on CVE-Bench. 62.5%. Nearly double the next best reported result.
2
10
2
214
9,156
wish i got this advice when i was 19.
I've tasted the 9-to-5. I've also tasted being a founder. I highly recommend being born into generational wealth.
1
5
814
feels like a movie right there.
To summarize: HuggingFace got autonomously compromised by a model from an American company. HF then tried to use American frontier model(s) to defend themselves, but were blocked by guardrails. HF then had to turn to open source Chinese models to defend themselves from another American company.
4
624
Wui | FailSafe retweeted
Attending @superai_conf ? Come for the closing event of the week, where our cofounder @0xWui will be chatting about agents, enterprise deployments and more! luma.com/mqxgtrj5
1
1
10
506
Replying to @getfailsafe
@getfailsafe is hosting an enterprise agent mixer with @awscloud , @coinbase , @NEARProtocol and friends. Agents are moving from demos to production. That means new questions around evals, security, runtime controls, and trust. We’ve been spending a lot more time in the Bay lately as we deepen our R&D presence here. Come join us!
2
2
8
543
100%
PSA: I now consider *all* of DeFi unsafe. Coding agents are superhuman at finding vulnerabilities, and smart contract security is too asymmetric: defenders need to fix every bug while attackers need just one exploit to steal funds.
1
2
172
chad
FailSafe Swarm has been cooking with @nvidia's Nemoclaw, @NEARProtocol 's Openclaw, @NousResearch's Hermes and more. Keeping the world safer, one PR at a time. receipts below 👇🧵
3
3
164
Wui | FailSafe retweeted
4
5
707