Built by experts in
observability, performance and operating systems

Why we exist

The modern threat landscape is defined by commodity 0-days, easily exploited supply chain paths and opaque, non-deterministic agents. None of it carries a signature to match. Today's tooling models activity as discrete, sampled events, missing more than 99% of causal behavior, how processes, files and connections interact. Detection has hit a wall on this data model. Policy over the flow of behavior cannot be specified at all.

We started Bitbison to build the missing system of record: a complete, causal history of what your systems do, from developer workstation through build to production. It is the foundation for detection and audit that were not possible before. Alerts arrive with the chain that produced them. Policy is written against behavior. Compromise or its absence is verified against the record.

Who we are

Bitbison is built by systems engineers who have spent their careers making systems observable and fast at scale. The team's code already runs on mission-critical infrastructure: operating system kernels, databases and ubiquitous embedded devices.

Our team includes industry experts and academics in operating-system scalability, performance, concurrent data structures, databases and debuggers.

If you're interested in joining, please contact us at hello@bitbison.io.

Our mission

Everyone here shares one mission: to improve the foundations of system and runtime security.

First principles, all the way down

We revisit the problems we are solving from first principles, starting at the kernel, the networking stack and the storage engine underneath.

Built for the loaded host

We design for the heavily loaded host rather than the demo box. Total capture at sub-microsecond per-event overhead with nothing dropped. Storage encodings cheap enough to retain everything.

The graph is the product

We rebuilt detection and policy around cause and effect. A pattern matched against individual events can only approximate the chain of behavior it is meant to describe.

Founders
Samy Bahra
Samy Bahra
Co-founder & CEO

Samy has spent 25 years in systems software: kernel hardening, debuggers, OLAP databases and firm real-time systems. He helped define the architecture of one of the largest real-time advertising exchanges. He was co-founder and CTO of Backtrace, the debugging platform companies relied on for their most critical technology.

Gabriel Parmer
Gabriel Parmer
Co-founder & CTO

Gabriel is Professor of Computer Science at George Washington University, where his research spans operating-system design, isolation and predictability. He created the Composite OS kernel. He has spent two decades building systems, from embedded and real-time kernels to cloud infrastructure, in which reliability is a property of the design.

Backed by

Investors

Lead investor Amplify Partners Amplify Partners

Amplify Partners led our round; their portfolio includes Chainguard, Material Security, Datadog and Fastly.

Work-Bench Work-Bench

We are backed by Work-Bench, early backers of Socure, CoreOS, Authzed and CockroachDB.

With support from
Christopher Key
Christopher Key
  • Former CPO, Mandiant
  • Founder & CEO, Verodin
Thomas Dullien
Thomas Dullien
  • Ex-Google Project Zero
  • Founder, zynamics & optimyze
Ilja van Sprundel
Ilja van Sprundel
  • Chief Scientist, Firmative
  • Former Director of OS Security, IOActive
Richard Johnson
Richard Johnson
  • Founder, Fuzzing IO
  • ex-Director of Security Research, Oracle
Kamal Shah
Kamal Shah
  • Co-founder & CEO, Prophet Security
  • Former CEO, StackRox
Lucas Nelson
Lucas Nelson
  • Co-founder, Lytical Ventures
  • Ex-@stake; Cult of the Dead Cow

and many more…

Come build the security platform for the modern threat landscape

We're hiring systems hackers who care about building a more secure future.