Pi is officially live! Read more on Forbes →

Off-Piste

The Pi mammoth with its arms around a cloud divided into AWS regions

Pi Found a Systemic AWS SDK Flaw. One Malformed Region Took Over a Security Vendor’s Production Cloud

Research7 min read

We autonomously traced the vulnerability across six languages and 2,000+ packages, developed fixes, and proved it could be used to take over a security vendor’s cloud. AWS rated CVE-2026-22611 low severity.

Guy Arazi, Omaid Faizyar and Vishal Chauhan
24 August 2026
Read the research
Bugcrowd + Pi
Partners
4 min read

From any bug bounty report to a fix in your developer's hands, under 30 minutes

Guy Arazi
CEO, Co-founder
A Piece of the Pi
Memory
5 min read

Why Guy and I built Pi: a story about the most expensive thing a security team owns and keeps losing, its own memory.

Yoni Ramon
CPO, Co-founder
Why we built Pi
Founder's note
4 min read

Get secured as fast as you code. A founder's note on why finding the bug was never the hard part — and what we built instead.

Guy Arazi
CEO, Co-founder
The Triage Gap: How Valid Reports Become Public Zero-Days
Triage
5 min read

AI multiplied the reports. No one multiplied the judgment. Triage just became security's biggest challenge.

Guy Arazi
CEO, Co-founder