Jack Cable is co-founder and chief executive of Corridor, a cybersecurity company protecting software produced by AI coding agents. A former federal cybersecurity adviser and champion ethical hacker, he is confronting a double threat: increasingly powerful models can exploit vulnerabilities while autonomous programming multiplies the code exposed to attack.
From ethical hacking to cybersecurity policy
Cable discovered his first major vulnerability in a financial website whose mishandling of negative transactions could have allowed unauthorized transfers. He reported the flaw responsibly and entered bug-bounty competitions. While still in high school, he won the Pentagon’s 2017 Hack the Air Force challenge after identifying 30 valid vulnerabilities. He ultimately reported more than 350 vulnerabilities across organizations including Google, Facebook, Uber, Yahoo, and the Department of Defense.
He subsequently worked with the Pentagon’s Defense Digital Service on vulnerability disclosure and bug-bounty programs. While studying computer science at Stanford, he helped establish the university’s bug-bounty program and co-authored Stratosphere, research applying password-generation techniques to discover exposed cloud-storage buckets.
At the Cybersecurity and Infrastructure Security Agency, Cable worked on election security and led development of Crossfeed, an open-source system for identifying exposed organizational assets. He also created Ransomwhere, an open-source ransomware-payment tracker. After serving as a security architect at Krebs Stamos Group, he became a TechCongress fellow advising Senator Gary Peters and the Senate Homeland Security and Governmental Affairs Committee. He returned to CISA as a senior technical adviser and helped lead its Secure by Design initiative.
Cable founded Corridor with former CISA colleague Ashwin Ramaswami. The company raised $5.4 million in seed funding and recruited Alex Stamos as chief security officer; Cable later announced a $25 million Series A led by Felicis at a $200 million valuation.
How Cable approaches AI security
Prevent vulnerabilities before the pull request.Corridor embeds pre-pull-request security guardrails near code generation, giving security teams visibility into autonomous coding without slowing development.
Eliminate recurring vulnerability classes. Cable favors memory-safe programming languages such as Rust and Go and targeted rewrites of critical open-source dependencies, reducing entire categories of exploitable failures.
Give coding agents security context. Functional software can still violate authorization rules or expose sensitive business logic when models lack organizational context; benchmarks such as BaxBench illustrate the gap between correct code and secure code.
Equip defenders with capable models. Cable supports American-made open-weight models that security teams can adapt for defensive work, arguing that adversaries already have access to powerful alternatives.
