The Bug Catchers Bet
mav@mavdotso
−2.9%
since Oct 6
The idea
I believe AI is letting teams write code far faster than anyone can safely test it, so bugs are hitting production quicker than humans can catch them. This take owns the safety net across that whole pipeline: scanners that catch vulnerabilities in machine-written code, tools that watch production for breakage, gatekeepers that test before shipping, and incident response when something slips through, plus large steady platforms as ballast. I spread it across all these layers rather than betting on one name, keep some cash on the side, and expect to hold for years as this plays out structurally.
What it owns
- AI-written code carries vulnerabilities at scale, and these companies scan for and catch them. · CrowdStrikeIt protects the cloud systems where new code runs, and more code with less human review means more vulnerabilities for it to address., Palo Alto NetworksIt is the biggest security platform, and consolidation of security spend onto large platforms captures growth in software security products., SentinelOneIt uses AI to catch threats automatically, fitting a world where vulnerabilities arrive faster than human analysts can review them., TenableIt maps where a company is exposed before attackers find it, catching what slipped past testing as bugs reach production faster., QualysIt scans systems for known vulnerabilities, the direct version of catching what machine-written code lets through into production.25%
- When buggy code hits production, these tools spot the breakage first, and more shipped code means more to watch. · DatadogIt is the largest independent platform teams use to monitor live software for failures, so its usage-based revenue model ties directly to how much code runs in production., DynatraceIt sells deep monitoring to large enterprises shipping machine-written code and added tooling for watching AI systems themselves through acquisition., ElasticIt powers the log search tools teams use to diagnose what broke and why, connecting its observability business to the volume of code shipped and the logs that code generates.21%
- Giants that own big pieces of the pipeline and monitoring stack steady a basket built for a multi-year shift. · MicrosoftIt owns GitHub, the pipeline most code passes through, plus the AI tools generating much of that code, winning either way the bug problem gets solved., Cisco SystemsIt owns Splunk, one of the biggest tools for monitoring production and digging through logs when things break in real time., IBMIt owns HashiCorp for managing infrastructure safely and Instana for monitoring production, two pieces of the safety net together.18%
- Pipelines and testing platforms that code must pass through before release become more valuable as code volume explodes. · GitLabIt runs the pipeline code passes through before shipping, including automated tests and reviews that catch bugs early in the process., AtlassianIts Jira is where bugs get tracked and triaged, so a flood of production issues runs through its tools as faster shipping creates more work., JFrogIt manages and checks the packages and artifacts that go into every release, mattering more when AI tools pull in code nobody wrote.18%
- More production bugs means more incidents, and these tools run the response when things break. · ServiceNowIt runs the workflows big companies use to handle IT incidents end to end, routing more of their breakage through its platform., PagerDutyIt pages an engineer when production breaks, so more bugs reaching production means more incidents routed through it and growing revenue.8%
- Cash10%