E195: Taking on the New AI Attack Surface With Manifold: Runtime, Skills & Supply Chains

E195: Taking on the New AI Attack Surface With Manifold: Runtime, Skills & Supply Chains

Author: Robby (MTF); Tim (Essence VC) May 26, 2026 Duration: 45:18

The latest Open Source Startup Podcast episode has our co-hosts Robby and Tim in conversation with Neal Swaelens and Oleks Yaremchuk, 2 of the Co-Founders of runtime agent security company Manifold Security.

Manifold recently released Manifest, their open-access, graph-based supply chain intelligence tool for users to scan skills and plugins to uncover any potential supply chain risks.

In this episode, Neal and Oleks explain why AI agents are reshaping cybersecurity - shifting the focus from guardrails to runtime security.

As tools like Claude Code and Codex spread rapidly, companies often have little visibility into the agents, plugins, skills, and external assets employees are using, creating major supply chain and runtime risks.

Drawing on their experience building LLMGuard and leading security teams at Protect AI and Palo Alto Networks, they argue that runtime detection and response is still a wide-open market opportunity.

They also discuss what it takes to build in the crowded AI security space, where buyers now expect real products instead of roadmap promises.

The conversation highlights lessons from open projects like LLMGuard and Manifest, why reducing noise and false positives matters, and how open ecosystems can help establish trust and industry standards for securing AI agents and assets.


Building a company around open source software is a unique and often misunderstood path, full of specific challenges and rare opportunities. The Open Source Startup Podcast digs into that journey directly with the people who have navigated it, moving beyond theory to the practical realities shared in conversation. Hosts Robby and Tim bring their distinct perspectives from MTF and Essence VC to these discussions, creating a space where founders speak candidly. You’ll hear from the architects behind names like HashiCorp, MongoDB, and Vercel, as well as leaders from Chronosphere, DBT, and mobile.dev, as they unpack their experiences. This podcast focuses on the pivotal decisions around community building, monetization strategies, and maintaining project ethos under the pressures of scaling a business. Each episode serves as a detailed case study, revealing how these companies turned publicly available code into sustainable, impactful enterprises. The dialogue naturally explores the tensions between open collaboration and commercial needs, offering a real-world blueprint that is both instructive and nuanced. For anyone curious about the intersection of community-driven development and venture-scale growth, this series provides an essential and unfiltered resource.
Author: Language: English Episodes: 50

Open Source Startup Podcast
Podcast Episodes
E162: The AI Code Editor War with Zed [not-audio_url] [/not-audio_url]

Duration: 30:04
Nathan Sobo is the Founder of Zed, the next-gen code editor that enables high-performance collaboration - powered by AI. Open source zed has 53K Stars on GitHub and is used by engineers at Vercel, Apple, Anthropic, and G…
E161: Reimagining Python Notebooks with Marimo [not-audio_url] [/not-audio_url]

Duration: 34:14
Akshay Agrawal is the Founder & CEO of Marimo, the next generation Python notebook. Their open source reactive notebook for Python, also called marimo, has almost 9K stars on GitHub. Marimo has raised $5M from investors…
E160: Open Source Secrets Management with Infisical [not-audio_url] [/not-audio_url]

Duration: 39:33
Vlad Matsiiako is CEO & Co-Founder of Infisical, the open source secrets management platform. Their open source project, also called infisical, has 16K stars on GitHub and helps users sync secrets across their teams and…
E159: Innovating on Distributed SQL Databases with Yugabyte [not-audio_url] [/not-audio_url]

Duration: 41:41
Karthik Ranganathan is Founder & CTO of Yugabyte, the PostgreSQL-compatible distributed database for cloud native applications. Their open source database, also called yugabyte, has almost 10K stars on GitHub. Yugabyte h…
E158: Open Source Diagramming and Charting with Mermaid Chart [not-audio_url] [/not-audio_url]

Duration: 40:47
Andrew Firestone is CEO and Knut Sveidqvist is CTO of Mermaid Chart, the open source text-based diagraming software platform. The mermaid project has over 70K stars on GitHub and is an open source diagramming and chartin…
E157: Build Your Own Production-Grade AI CoPilots With Copilotkit [not-audio_url] [/not-audio_url]

Duration: 36:08
Atai Barkai is Co-Founder & CEO of Copilotkit, the platform to build production-grade AI Copilots 10x faster. Their open source project, also called copilotkit, has almost 13K stars on GitHub and provides React UI + eleg…
E156: Code-First Product Integrations with Ampersand [not-audio_url] [/not-audio_url]

Duration: 25:53
Lauren Long is Co-Founder & CTO of Ampersand, the developer platform for native product integrations. Ampersand has raised $5M from investors including Matrix, Base Case Capital, Flex Capital, and 2.12 Angels. In this ep…
E155: Taking on Elasticsearch - the ParadeDB Story [not-audio_url] [/not-audio_url]

Duration: 33:17
Philippe Noël is Co-Founder & CEO of ParadeDB, the modern Elasticsearch alternative built on Postgres. They're purpose-built for heavy, real-time workloads and their open source project, also called paradedb, has over 6K…
E154: Bringing OpenTelemetry to Mobile Observability [not-audio_url] [/not-audio_url]

Duration: 41:40
Eric Futoran is Co-Founder & CEO of Embrace, the mobile observability platform built on OpenTelemetry. Embrace has raised almost $80M from investors including NEA, Greycroft & Eniac. In this episode, we dig into the crea…