Aviv Mussinger

CEO & Co-Founder

LinkedIn

Aviv is co-founder and CEO of Kodem. He believes application security went wrong by optimizing for how much it could find rather than how much of it was true, and that the way back is unglamorous: work out what actually executes in production, and let that decide what matters.

He spends most of his writing on definitions, because he thinks the category argues about tools while leaving its terms undefined. Runtime intelligence, reachability, exploit probability and agentic risk all mean something specific, and being precise about them is what makes the rest of the conversation possible.

Blogs by Aviv Mussinger

What is Runtime Security?

Runtime security uses evidence from a running application to decide which risks are real. How it differs from static analysis, SCA, WAF and RASP, and where it stops.

What is RAG Security?

RAG security covers the risks of retrieval-augmented generation: injection through retrieved content, data poisoning, and leakage. The threats and how to defend.

What is Remote Code Execution (RCE)?

Remote code execution (RCE) lets an attacker run code on your system. How RCE attacks work, what causes them, and why runtime reachability decides which ones matter.