Vivek R
| Vivek R | |
| Occupation | Co-founder and CTO of winfunc |
|---|---|
| Known for | Co-founding winfunc (YC S24) |
Vivek R is an Indian-born, San Francisco–based software engineer and entrepreneur. He is the co-founder and chief technology officer of winfunc, an AI-native security auditing platform that participated in Y Combinator's Summer 2024 batch.[1]
Career
Before founding winfunc, Vivek R held several roles in infrastructure and platform engineering. He worked as a software engineer at Wagr from 2020 to 2021, and served as chief technology officer of IEDC MEC during the same period. In 2020, he was selected as a Google Summer of Code scholar with the GNOME Foundation. He subsequently worked as an infrastructure consultant at ThoughtWorks from 2021 to 2022, followed by a position as a platforms engineer at Chorus One, a blockchain infrastructure operator, from 2022 to 2024. He holds a BTech in Computer Science.
In 2024, Vivek R co-founded winfunc alongside Mufeed VH. The company develops an AI-native security engineering platform designed for mission-critical codebases. Winfunc functions as an autonomous security auditing system that combines static application security testing (SAST), dynamic application security testing (DAST), infrastructure-as-code (IaC) scanning, and software composition analysis (SCA) into a single platform.[2]
The platform is designed to autonomously find, verify, and patch security vulnerabilities in codebases in a manner comparable to a human security engineer. It performs context-aware scanning to identify business logic errors and automates the full auditing cycle, generating reports that the company states contain zero false positives. For each vulnerability discovered, the system provides an exploit path, setup details, and patch guidance tied to the specific code path that caused the issue.
Winfunc's agent has identified real vulnerabilities in products and services operated by notable technology companies and projects, including Google, Anthropic, Brave, Microsoft, NVIDIA, Supabase, Sentry, Cal.com, Gumroad, Bun, Hoppscotch, and The New York Times.
The company operates in the artificial intelligence, software as a service (SaaS), business-to-business (B2B), and cybersecurity sectors.
References
- ↑ "winfunc – Y Combinator". 'Y Combinator}'. Retrieved 2026-03-18.
- ↑ "winfunc – Autonomous AI-native security audits". 'winfunc}'. Retrieved 2026-03-18.