Blast Radius
Attackers now move faster than the patch cycle, and most companies can't see the code they actually run.
Core trick
Maps compromised npm and PyPI package versions to the applications that depend on them, then gates the next build on that result.
Description
Attackers now move faster than the patch cycle, and most companies can't see the code they actually run.
When an npm or PyPI library is compromised, most companies find out from the news or a customer, hours after the bad code has already shipped. Blast Radius tells SRE and security teams within a minute whether they’re exposed, shows which customer-facing features are affected, and blocks the next build from shipping the bad version. A second agent watches access to sensitive data and flags anomalous behavior before it turns into a leak. The result is faster response, smaller exposure, and protected customer trust.
README excerpt
# Blast Radius Human-reviewed incident response for npm and PyPI dependencies, backed by Snowflake. The implementation, local demo, tests, MCP server, client agent, review dashboard, and additive Snowflake deployment scripts are in [vuln-sentinel](vuln-sentinel/README.md).