🧠 Food for thought

Implications, context, and why it matters.

Backslash targets an unsupervised layer in AI development

• The funding goes toward a practice called “vibe coding,” where software developers use AI agents and prompts to generate code 1.
• It also leans on Model Context Protocol (MCP) servers, connectors between AI coding tools and other software systems that security teams often miss 2.
• Many organizations face risks through MCP servers, including data leakage or exfiltration, prompt injection attacks, and privilege escalation, Backslash said 3.
• Backslash said current application security tools and AI point solutions do not track how AI-generated code gets created and changed across AI-driven coding tools, which leaves security teams without visibility 4.
• The timing matches a Gartner prediction that by 2028, 40% of new enterprise production software will be created using vibe coding techniques and tools, which points to a large market opening 1.

The security industry is moving to secure AI-driven development workflows

• Backslash’s approach shifts application security from scanning only final code to protecting the full AI-driven creation process, including the developer’s tools and prompts 4.
• CEO Shahar Man said security tools need to understand what AI-generated code does and how it was produced 5.
• Some experts warn that widespread MCP use without basic security controls could lead to an “internet-wide vulnerability crisis” 5.
• Faster AI adoption by software developers can reduce oversight for enterprise security teams, which increases interest in platforms that add guardrails without slowing development 1.