MATT by Mattersec Labs is the AI Security Supervisor for the modern software lifecycle: it keeps a product’s security rules holding, release after release.
About MATT, in three lengths.
MATT by Mattersec Labs is the AI Security Supervisor for the modern software lifecycle. Teams declare the plain-English rules their product must hold, and MATT runs the ExploitOps loop against the live product on every release: Declare, Observe, Prove, Fix, Remember. Each rule comes back holding or broken, with the evidence attached.
Mattersec Labs introduced ExploitOps in 2026, the practice of keeping a declared set of security rules holding as software changes, and built MATT to run it. A team writes down what must stay true about its product in plain English, such as a user never reading another user’s data or an agent acting only inside its scope. MATT observes what changed, proves each rule against the live product with the same attack patterns an adversary would use, hands a broken rule to its owner with the evidence, and re-proves the fix on every release so the same failure cannot return unnoticed. The company publishes the Record, a running account of the incidents of 2026 in which AI models found or exploited real systems, and an open attack library. It was founded by Subho Halder, co-founder of Appknox and lead author of the SecLens benchmark, and Aishwarya Jain, and is based in San Francisco.
The company, in seven lines.
- Company
- Mattersec Labs Inc., a Delaware corporation
- Where we work
- San Francisco, Dubai and Bangalore
- What we make
- MATT, the AI Security Supervisor for the modern software lifecycle
- How it runs
- ExploitOps: declare, observe, prove, fix, remember
- How it starts
- A 15-minute ExploitOps discovery call with a co-founder, then a paid ExploitOps Review scoped on that call, then MATT on your release cycle
- Appknox
- Distribution partner for MATT; the mobile application security company Subho co-founded and led
- Research
- SecLens and the MatterSec 50, published by Mattersec Labs
- Press contact
- founders@matt.security
The founders.
Headshots download at full resolution. Name order is first name, family name; Aishwarya Jain goes by AJ.
-
Subho Halder
Co-founder & CEOCo-founded Appknox in 2014 and led it for twelve years, first as CTO and then as CEO, building mobile application security for enterprises. Lead author of SecLens, the benchmark of how frontier models detect security vulnerabilities. In application security since 2012, with acknowledgements from Apple, Google, Facebook and Microsoft. At Mattersec Labs, Subho leads MATT: the product, the research and the engagements.
-
Aishwarya Jain
Co-founder & CBORuns the commercial side of Mattersec Labs: customers, partnerships and go-to-market. Most of AJ’s work has been in crypto and blockchain: token launches, go-to-market and ecosystem growth for Web3 projects from Dubai, and advising CredShields, the Web3 security auditor, on security. The lesson of those years, that speed without trust creates risk, is why Mattersec exists.
The wordmark.
- →MATT is a word, set in Mattersec Sans at weight 800 with the letters pulled tight, and the period takes the accent colour: mint on dark backgrounds, forest green on light.
- →There is no symbol, monogram or mascot. Please use the files as supplied; do not redraw the wordmark, set it in another typeface or generate it with an image model.
- →Clear space: keep at least the height of the M free on every side.
- →Minimum size: 24 pixels tall on screen, 6 millimetres in print.
- →Backgrounds: ink (#0B0C0C) with the cream wordmark, or cream (#ECEAE4) with the ink wordmark. Over photography, place it on a solid panel in one of those two colours.
How you can use these.
- →Editorial use: news and analysis, podcasts, newsletters, event listings and “as seen in” panels.
- →Name the company as MATT by Mattersec Labs on first mention, then MATT.
- →Quote the Record, the attack library and our posts freely, with a link to the page you are citing.
- →Use the founders’ headshots and bios as supplied here, or ask for a different crop.
- ×Change the wordmark’s colours, proportions, spacing or period.
- ×Imply that MATT endorses, audited or partners with you unless we have said so in writing.
- ×Put the wordmark on products, merchandise or paid advertising.
- ×Pair it with other logos in a way that suggests a joint venture.
Talks, credits and records.
Selected public records, each linked to its source. The full list of talks and trainings since 2012 is on subhohalder.com.
- Apple · Sep 2013iOS 7 security acknowledgement, CVE-2013-0926 ↗
- Meta · 2012Bug bounty leaderboard ↗
- Meta · 28 Dec 2012Press coverage ↗
- Black Hat · 2014Trainer, Mobile Hacking Summit, Black Hat USA ↗
- Black Hat · 2017Arsenal, Devknox, Black Hat USA and Asia ↗
- Black Hat · 2012Speaker, Black Hat Abu Dhabi ↗
- OWASP · Mar 2025Speaker, mobile kernel code and RASP evasion ↗
- Microsoft · ArchiveMSRC acknowledgement ↗
Talk to the founders.
For interviews, comment on an incident or anything on the Record, send your outlet, the angle and your deadline. The founders answer press requests themselves.