Aephix has been accepted into the Cloudflare for Startups program.
The grant will strengthen the Aephix platform and widen what Aephix covers across the agent supply chain, furthering the mission.
What Aephix does
Agents pull artifacts at generate-time: packages, models, skills, MCP servers, extensions, and containers. Those artifacts arrive from different registries and under different names, with nothing tying them to one another. Aephix Threat Research surfaces coordinated activity across them, links the pieces to a single operation, and briefs subscribers on it every week in Sleuth.
In July, Aephix named the next package an adversary would publish before it shipped. It arrived about a day later, preempted by the account and endpoint already on file.
Aephix Threat Research publishes first-hand analyses of malicious artifacts found in that supply chain. Aephix Academy publishes plain-language guides to how the attacks work.
Our growing arsenal
Aephix Vantage is the free cross-ecosystem view. Anyone can check an artifact before it reaches a build, with no account required.
Sleuth is the paid intel report: Weekly Sleuth every week and Quarterly Sleuth every quarter, straight to a subscriber’s inbox. Sign up for the free newsletter to follow the research and know when subscriptions open.