3 ms·
Show HN: Beating GPT5.5-xhigh for Coding agent security with SLMs and IRM
Coding agents craft arbitrary code so securing them is more complicated than red-teaming. We post trained a cyber-security small llm, changed how it reasons and supplemented our controls using program analysis techniques such as inline reference monitoring to outperform GPT5.5-xhigh on hard benchmarks like LinuxArena and SleightBench.
Free product available at harden.run and full benchmarks in the blog post.
- kartikrawat 1mo agointeresting. Seems like a product which should be used by everyone who is using any coding AI agent tool, and it's a free product, which makes it more of a no-brainer
- Adecubed 1mo ago[flagged]
- mailrishav9 1mo agonice. i've always wondered what my agents are doing behind my back, seems like a good way to see that.
- pushpakpujari 1mo agoExciting. Peace of mind to run coding agents non-stop without worrying about my database getting deleted
- beyondscale-yes 1mo agoFine-tuned SLMs could make security monitoring more practical at scale. The real challenge is auditability, non-coding behaviors, and detecting coordinated attacks across multiple agents, not just individual calls.
- xms17189 1mo agoHow does the inline reference monitor handle tool calls that are dynamically composed by the coding agent, and what evidence do you expose when a call is blocked or rewritten?