TL;DR: For companies running large fleets of OS-level endpoints (running GPU clusters, having a network of cloud devices, or deploying on-device), Palisade detects and fixes operating-system vulnerabilities (privilege escalation, remote code execution, memory corruption) that are extremely hard to detect and mitigate without applying AI to kernel-level data (syscalls, eBPF traces, process/memory events, network packets). A fix that used to take weeks to roll out, Palisade now applies in minutes across every endpoint.

Hey YC! I'm Prince, an ML researcher and engineer who dropped out from Caltech at 18 to build Palisade.

What’s the problem: Modern attacks increasingly target the operating system, but most security products only observe the network, cloud, or application layers. That leaves OS vulnerabilities among the hardest problems to detect and the slowest to remediate across a fleet.

Why I’m building this: Since I was 16, I have done plenty of professional red-team and blue-team security work. One pattern kept showing up: OS-level vulnerabilities were consistently the hardest to handle. Detection required low-level visibility, and even after identifying a vulnerability, rolling out a mitigation across hundreds or thousands of machines often took weeks. My background in both machine learning and operating systems convinced me this didn't have to be a manual process, so I built Palisade to automatically detect and remediate these vulnerabilities at the kernel level across an entire fleet.

What Palisade does: Palisade watches your systems at the kernel level—syscalls, eBPF traces, process and memory events, and network packets—and uses AI to find OS vulnerabilities other tools miss, then implement the fix automatically across every endpoint.

The Palisade control plane, live against a real kernel (LSM-BPF). The live feed at the bottom: every row is a real syscall decision.

The vulnerabilities it catches are the ones you can't see from the app or network layer alone:

• Privilege escalation
• Remote code execution
• Memory corruption

Most are caught before an exploit ever happens, and the fix is applied immediately, fleet-wide. The same patch that used to take weeks now lands in minutes.

The host audit: real findings ranked by severity. The bottom one is the cloud-metadata exposure: the same path behind the Capital One breach. One click on Apply fix and it's installed as a kernel rule.

Palisade can already detect and fix real problems:

• CVE-2024-1086: use-after-free in the Linux kernel's netfilter (nf_tables); local privilege escalation to root
• CVE-2025-6019: libblockdev/udisks privilege escalation to full root
• CVE-2025-32463: sudo --chroot local privilege escalation to root

Who it's for: Companies running a lot of OS-level endpoints, where a single kernel vulnerability multiplies across the whole fleet. Whether it’s network servers or GPUs, we have you covered.

https://youtu.be/CTVhq7jfTPY

Our asks:

• Intros: if you run a large fleet of OS-level endpoints, or know a security/infra lead who does, I'd love an intro.
• See the demo and tell me if you’d use it. Brutal feedback welcome.

— prince@palisade-ai.com, https://calendly.com/prince-palisade-ai/30min, DMs welcome