Ryan MacDonald

Millions of servers run the world's critical infrastructure, defended by teams too small to keep up. They've stitched together 15 years of open-source tooling but attackers now weaponize CVEs in hours while defenders are still grepping logs. Blacklight is a low-dependency agentic harness that turns the hooks already wired into existing OSS security tools into an autonomous defense layer. Detect on one host, triage and contain across the fleet, at attacker speed. The substrate isn't migrating to enterprise XDR. Blacklight makes the substrate agentic.