First principles, all the way down
We revisit the problems we are solving from first principles, starting at the kernel, the networking stack and the storage engine underneath.
The modern threat landscape is defined by commodity 0-days, easily exploited supply chain paths and opaque, non-deterministic agents. None of it carries a signature to match. Today's tooling models activity as discrete, sampled events, missing more than 99% of causal behavior, how processes, files and connections interact. Detection has hit a wall on this data model. Policy over the flow of behavior cannot be specified at all.
We started Bitbison to build the missing system of record: a complete, causal history of what your systems do, from developer workstation through build to production. It is the foundation for detection and audit that were not possible before. Alerts arrive with the chain that produced them. Policy is written against behavior. Compromise or its absence is verified against the record.
Bitbison is built by systems engineers who have spent their careers making systems observable and fast at scale. The team's code already runs on mission-critical infrastructure: operating system kernels, databases and ubiquitous embedded devices.
Our team includes industry experts and academics in operating-system scalability, performance, concurrent data structures, databases and debuggers.
If you're interested in joining, please contact us at hello@bitbison.io.
Everyone here shares one mission: to improve the foundations of system and runtime security.
We revisit the problems we are solving from first principles, starting at the kernel, the networking stack and the storage engine underneath.
We design for the heavily loaded host rather than the demo box. Total capture at sub-microsecond per-event overhead with nothing dropped. Storage encodings cheap enough to retain everything.
We rebuilt detection and policy around cause and effect. A pattern matched against individual events can only approximate the chain of behavior it is meant to describe.

Samy has spent 25 years in systems software: kernel hardening, debuggers, OLAP databases and firm real-time systems. He helped define the architecture of one of the largest real-time advertising exchanges. He was co-founder and CTO of Backtrace, the debugging platform companies relied on for their most critical technology.

Gabriel is Professor of Computer Science at George Washington University, where his research spans operating-system design, isolation and predictability. He created the Composite OS kernel. He has spent two decades building systems, from embedded and real-time kernels to cloud infrastructure, in which reliability is a property of the design.
Amplify PartnersAmplify Partners led our round; their portfolio includes Chainguard, Material Security, Datadog and Fastly.
Work-BenchWe are backed by Work-Bench, early backers of Socure, CoreOS, Authzed and CockroachDB.






and many moreā¦
We're hiring systems hackers who care about building a more secure future.