Evan Lubinsky
Co-founder and CEOGraduate student in Information Security Policy and Management at Carnegie Mellon University. Evan leads the product and works with customers.
We help software teams show their security work when a contract depends on it
Iron Ridge Cyber makes QuickChain. Teams use it to approve the open-source software they bring in and to keep a record of each decision.
Why we started
We kept running into the same problem. Capable teams were losing weeks because their security evidence was scattered. Scanner output sat in one place and the tracking spreadsheet in another, and the engineer who understood the details was usually busy with something else. When a buyer or an assessor asked a direct question, there was no one place to send them.
We want to take the manual work out of software supply-chain security. QuickChain starts where a lot of that risk comes in, when someone asks to use an open-source package or tool. It checks the software, puts the findings that need a person in front of a reviewer, and keeps the decision on file.
The team
Leonardo Peele
Co-founder and CTOGraduate student in Information Security Policy and Management at Carnegie Mellon University. Leonardo builds the scan engine, including the code tracing, and the reports it produces.
Iron Ridge Cyber Inc. is a West Virginia C-Corp, selected for the Vantage Ventures pre-seed accelerator, Cohort 05.
How we build
- Show the evidence
- Every finding comes with its basis, such as the dependency path, the call path or the fix data. A reviewer can check our work.
- Same input, same answer
- The checks are rule-based and never send source code to an AI model. Run the same check twice and you get the same result.
- One record
- The developer who asked, the person who decided, the ISSM and the assessor all read the same record. Nobody has to rebuild it by hand for the next reader.
- Say what we didn’t check
- If a check didn’t run or couldn’t finish, the report says so. When a key check is missing, the recommendation is marked incomplete.