KronaSecurity

Hey! 👋

I'm a solo founder building KronaSecurity, an application security platform focused on vulnerability management.

I started working on it because I saw how quickly application security can become fragmented.

A company might use one tool for SAST, another for DAST, another for SCA, something else for pentesting, and then have separate processes for managing domains, vulnerabilities, SLAs and remediation.

Finding vulnerabilities isn't necessarily the hardest part.

The harder questions are:

What should we fix first?
Which assets are actually exposed?
Who is responsible for fixing each issue?
Are we meeting our remediation SLAs?

That's what I'm trying to solve with KronaSecurity.

Today the platform includes:

🔐 DAST
💻 SAST
📦 SCA
🌐 Attack Surface Management
🎯 Vulnerability prioritization
⏱️ SLA management
📊 Reports & dashboards
🧑‍💻 IDE security scanning, including VS Code

I'm also working on AI-powered penetration testing.

The platform is now publicly available and anyone can create a free account:

👉 https://kronasecurity.es

I'm at the stage where I want to stop building in isolation and start learning from real users.

So I'd really appreciate feedback from other founders, developers, security engineers and DevSecOps teams:

What would you improve?
What is missing?
How do you currently manage vulnerabilities?
What would make you actually pay for a product like this?

I'm bootstrapping KronaSecurity and I'm particularly interested in finding the first companies willing to test it and give honest feedback.

Happy to answer questions about the product, the technical side or the journey of building it.

Thanks for reading! 🚀