Chaser Systems
@chasersystems.bsky.social
DiscrimiNAT Firewall: A transparent NAT gateway alternative that allows product teams to discover and update narrow allowlists for their apps’ outbound connections, easily.
https://chasersystems.com/
https://chasersystems.com/
Learn about CoverDrop's use of #Rust in #Cambridge on 12th Nov by Daniel Hugenroth @lambda.bsky.social . Pizzas on us!
Cambridge Rust event November 12th!
Sponsored by @chasersystems.bsky.social 🦀
Event link: www.meetup.com/cambridge-ru...
Sponsored by @chasersystems.bsky.social 🦀
Event link: www.meetup.com/cambridge-ru...
November 10, 2025 at 5:23 PM
Learn about CoverDrop's use of #Rust in #Cambridge on 12th Nov by Daniel Hugenroth @lambda.bsky.social . Pizzas on us!
What data do coding agents send, and where to?
Our report seeks to answer some of our questions for the most popular coding agents. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage. You can see the system prompts in the appendix.
chasersystems.com/blog/what-da...
Our report seeks to answer some of our questions for the most popular coding agents. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage. You can see the system prompts in the appendix.
chasersystems.com/blog/what-da...
November 4, 2025 at 12:11 PM
What data do coding agents send, and where to?
Our report seeks to answer some of our questions for the most popular coding agents. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage. You can see the system prompts in the appendix.
chasersystems.com/blog/what-da...
Our report seeks to answer some of our questions for the most popular coding agents. Incidentally, a side-effect was running into OWASP LLM07:2025 System Prompt Leakage. You can see the system prompts in the appendix.
chasersystems.com/blog/what-da...
Looking at us-east-1 this morning like... 👀
We're giving away 1,000 of our "It's always DNS" stickers and sticky-notes to decorate your laptops! Fill in the linked form below and we'll get it mailed directly to you, wherever you are in the world.
forms.office.com/e/14jHFdU9Kv
#aws #itsalwaysdns
We're giving away 1,000 of our "It's always DNS" stickers and sticky-notes to decorate your laptops! Fill in the linked form below and we'll get it mailed directly to you, wherever you are in the world.
forms.office.com/e/14jHFdU9Kv
#aws #itsalwaysdns
October 20, 2025 at 11:18 AM
Looking at us-east-1 this morning like... 👀
We're giving away 1,000 of our "It's always DNS" stickers and sticky-notes to decorate your laptops! Fill in the linked form below and we'll get it mailed directly to you, wherever you are in the world.
forms.office.com/e/14jHFdU9Kv
#aws #itsalwaysdns
We're giving away 1,000 of our "It's always DNS" stickers and sticky-notes to decorate your laptops! Fill in the linked form below and we'll get it mailed directly to you, wherever you are in the world.
forms.office.com/e/14jHFdU9Kv
#aws #itsalwaysdns
Azure default outbound access connectivity change postponed from 30 Sep '25 to 31 Mar '26.
azure.microsoft.com/en-us/update...
azure.microsoft.com/en-us/update...
Azure updates | Microsoft Azure
Subscribe to Microsoft Azure today for service updates, all in one place. Check out the new Cloud Platform roadmap to see our latest product plans.
azure.microsoft.com
September 8, 2025 at 9:29 AM
Azure default outbound access connectivity change postponed from 30 Sep '25 to 31 Mar '26.
azure.microsoft.com/en-us/update...
azure.microsoft.com/en-us/update...
Release Notes | Chaser Systems
version 2.20 (2025-08-27)
chasersystems.com
September 1, 2025 at 6:05 AM
Release Notes | Chaser Systems
version 2.20 (2025-08-27)
chasersystems.com
August 27, 2025 at 5:44 PM
Reposted by Chaser Systems
Another short-lived credential leak causes widespread data theft. Here at @chasersystems.bsky.social we're researching & prototyping practical second-factor methods for service account style usage.
cloud.google.com/blog/topics/...
cloud.google.com/blog/topics/...
Widespread Data Theft Targets Salesforce Instances via Salesloft Drift | Google Cloud Blog
UNC6395 stole data from Salesforce instances by exploiting compromised OAuth tokens from the Salesloft Drift app.
cloud.google.com
August 26, 2025 at 8:47 PM
Another short-lived credential leak causes widespread data theft. Here at @chasersystems.bsky.social we're researching & prototyping practical second-factor methods for service account style usage.
cloud.google.com/blog/topics/...
cloud.google.com/blog/topics/...
Reposted by Chaser Systems
Cambridge Rust meetup August 13th 🦀
www.meetup.com/cambridge-ru...
Event sponsored by Chaser Systems: chasersystems.com!
#rust #cambridge
www.meetup.com/cambridge-ru...
Event sponsored by Chaser Systems: chasersystems.com!
#rust #cambridge
Monthly Rust Meetup, Wed, Aug 13, 2025, 6:45 PM | Meetup
## Details
Join us for the new and improved monthly Cambridge Rust meetup, hosted at Quantinuum's office on Hill's Road.
Speaker: **Ian Jackson**
Ian Jackson is a longst
www.meetup.com
July 31, 2025 at 5:53 PM
Cambridge Rust meetup August 13th 🦀
www.meetup.com/cambridge-ru...
Event sponsored by Chaser Systems: chasersystems.com!
#rust #cambridge
www.meetup.com/cambridge-ru...
Event sponsored by Chaser Systems: chasersystems.com!
#rust #cambridge
Welcome to the team Lucas Pye! Lucas is joining us as an intern until mid-September and is researching what telemetry is gathered from developer machines by various popular agentic coding tools. When he's not intercepting #egress traffic you can find him climbing!
(screenshot of MitMed Cursor)
(screenshot of MitMed Cursor)
July 28, 2025 at 1:50 PM
Welcome to the team Lucas Pye! Lucas is joining us as an intern until mid-September and is researching what telemetry is gathered from developer machines by various popular agentic coding tools. When he's not intercepting #egress traffic you can find him climbing!
(screenshot of MitMed Cursor)
(screenshot of MitMed Cursor)
We're back at @fwdcloudsec.org again today, drop by our booth and try our mini-CTF to win a #YubiKey. Only 4 left, so be sure to come by early!
July 1, 2025 at 2:01 PM
We're back at @fwdcloudsec.org again today, drop by our booth and try our mini-CTF to win a #YubiKey. Only 4 left, so be sure to come by early!
We're demoing DiscrimiNAT Firewall at the venue this year. See you in Denver!
We're happy to announce Chaser Systems is a Bronze sponsor for fwd:cloudsec North America 2025! chasersystems.com
June 4, 2025 at 11:34 PM
We're demoing DiscrimiNAT Firewall at the venue this year. See you in Denver!
TLS ECH (formerly ESNI) is an emerging threat in traffic observability.
Learn about what it is, its background and original purpose, and how to disable it in controlled environments - especially Chrome and headless Chrome in the linked solution article:
chasersystems.com/blog/disabli...
Learn about what it is, its background and original purpose, and how to disable it in controlled environments - especially Chrome and headless Chrome in the linked solution article:
chasersystems.com/blog/disabli...
June 4, 2025 at 11:27 PM
TLS ECH (formerly ESNI) is an emerging threat in traffic observability.
Learn about what it is, its background and original purpose, and how to disable it in controlled environments - especially Chrome and headless Chrome in the linked solution article:
chasersystems.com/blog/disabli...
Learn about what it is, its background and original purpose, and how to disable it in controlled environments - especially Chrome and headless Chrome in the linked solution article:
chasersystems.com/blog/disabli...
Our founder @new23d.bsky.social's talk accepted for @fwdcloudsec.org at Denver in June on AWS IAM Roles Anywhere with ACME-enabled PKI certs distribution (using Let's Encrypt Staging)
Videos will be available on YouTube later and we'll post an update when they are.
Videos will be available on YouTube later and we'll post an update when they are.
May 27, 2025 at 11:00 AM
Our founder @new23d.bsky.social's talk accepted for @fwdcloudsec.org at Denver in June on AWS IAM Roles Anywhere with ACME-enabled PKI certs distribution (using Let's Encrypt Staging)
Videos will be available on YouTube later and we'll post an update when they are.
Videos will be available on YouTube later and we'll post an update when they are.
We make it easier for you to enable an outbound network traffic firewall in full allowlist enforcement mode -- with discovery, dry run and micro-segmentation.
Available on AWS and GCP. Search for DiscrimiNAT Firewall in your cloud web console.
#egress #filtering
Available on AWS and GCP. Search for DiscrimiNAT Firewall in your cloud web console.
#egress #filtering
March 31, 2025 at 9:34 AM
We make it easier for you to enable an outbound network traffic firewall in full allowlist enforcement mode -- with discovery, dry run and micro-segmentation.
Available on AWS and GCP. Search for DiscrimiNAT Firewall in your cloud web console.
#egress #filtering
Available on AWS and GCP. Search for DiscrimiNAT Firewall in your cloud web console.
#egress #filtering
Wildcards are now GA from us for network egress on GCP.
Took time to develop since we didn't want the solution to be trivially bypassable with SNI Spoofing [1] or cause interruptions to your traffic intermittently with false positives (as is the case with known issue FWAAS-1501 of Palo Alto [2]).
Took time to develop since we didn't want the solution to be trivially bypassable with SNI Spoofing [1] or cause interruptions to your traffic intermittently with false positives (as is the case with known issue FWAAS-1501 of Palo Alto [2]).
March 13, 2025 at 10:55 AM
Wildcards are now GA from us for network egress on GCP.
Took time to develop since we didn't want the solution to be trivially bypassable with SNI Spoofing [1] or cause interruptions to your traffic intermittently with false positives (as is the case with known issue FWAAS-1501 of Palo Alto [2]).
Took time to develop since we didn't want the solution to be trivially bypassable with SNI Spoofing [1] or cause interruptions to your traffic intermittently with false positives (as is the case with known issue FWAAS-1501 of Palo Alto [2]).
Wildcards were a game-changer in GCP for this👇customer in reducing #egress management overhead.
✅Monitoring / Dry-Run mode
✅SNI spoofing proof tech
✅Public Suffix List / Effective TLD checks
✅Terraform
Deploy now or get a demo from engineering: chasersystems.com
👇
✅Monitoring / Dry-Run mode
✅SNI spoofing proof tech
✅Public Suffix List / Effective TLD checks
✅Terraform
Deploy now or get a demo from engineering: chasersystems.com
👇
February 24, 2025 at 7:21 AM
Wildcards were a game-changer in GCP for this👇customer in reducing #egress management overhead.
✅Monitoring / Dry-Run mode
✅SNI spoofing proof tech
✅Public Suffix List / Effective TLD checks
✅Terraform
Deploy now or get a demo from engineering: chasersystems.com
👇
✅Monitoring / Dry-Run mode
✅SNI spoofing proof tech
✅Public Suffix List / Effective TLD checks
✅Terraform
Deploy now or get a demo from engineering: chasersystems.com
👇
We're looking for a solid, network security cloud engineer to work on DiscrimiNAT Firewall and a new SaaS product we're developing.
www.linkedin.com/jobs/view/41...
www.linkedin.com/jobs/view/41...
Chaser Systems hiring Senior Cloud Security Engineer in Cambridge, England, United Kingdom | LinkedIn
Posted 4:53:14 PM. Note: This is a 3/5 days a week on-site position in Cambridge. The other 2/5 days you may choose to…See this and similar jobs on LinkedIn.
www.linkedin.com
February 6, 2025 at 10:25 AM
We're looking for a solid, network security cloud engineer to work on DiscrimiNAT Firewall and a new SaaS product we're developing.
www.linkedin.com/jobs/view/41...
www.linkedin.com/jobs/view/41...
Update network endpoints for Win32 apps and PowerShell scripts by December 27, 2024*
mc.merill.net/message/MC96...
* we only just found out, but your egress FQDNs allowlist might need an update
mc.merill.net/message/MC96...
* we only just found out, but your egress FQDNs allowlist might need an update
MC964310 - Take Action: Update network endpoints for Win32 apps and PowerShell scripts by December 27, 2024 | Microsoft 365 Message Center Archive
Update network endpoints for Win32 apps and PowerShell scripts by December 27, 2024, due to Edgeio retirement. Ensure access to new CDN endpoints to maintain functionality for Intune deployments. Refe...
mc.merill.net
January 2, 2025 at 9:09 AM
Update network endpoints for Win32 apps and PowerShell scripts by December 27, 2024*
mc.merill.net/message/MC96...
* we only just found out, but your egress FQDNs allowlist might need an update
mc.merill.net/message/MC96...
* we only just found out, but your egress FQDNs allowlist might need an update
Comparison page with GCP NGFW is now up, scoped to egress filtering. Advantages DiscrimiNAT has:
🌟 Wildcard Support
💨 Low* DNS TTL handling
🔍 Monitoring, Discovery & Dry-Run mode
👮 Spoofing Prevention
chasersystems.com/discriminat/...
* no more dropped connections to 5s TTL AWS S3
🌟 Wildcard Support
💨 Low* DNS TTL handling
🔍 Monitoring, Discovery & Dry-Run mode
👮 Spoofing Prevention
chasersystems.com/discriminat/...
* no more dropped connections to 5s TTL AWS S3
December 12, 2024 at 11:57 AM
Comparison page with GCP NGFW is now up, scoped to egress filtering. Advantages DiscrimiNAT has:
🌟 Wildcard Support
💨 Low* DNS TTL handling
🔍 Monitoring, Discovery & Dry-Run mode
👮 Spoofing Prevention
chasersystems.com/discriminat/...
* no more dropped connections to 5s TTL AWS S3
🌟 Wildcard Support
💨 Low* DNS TTL handling
🔍 Monitoring, Discovery & Dry-Run mode
👮 Spoofing Prevention
chasersystems.com/discriminat/...
* no more dropped connections to 5s TTL AWS S3
DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on GCP.
Release notes: chasersystems.com/docs/discrim...
Release notes: chasersystems.com/docs/discrim...
December 4, 2024 at 6:59 AM
DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on GCP.
Release notes: chasersystems.com/docs/discrim...
Release notes: chasersystems.com/docs/discrim...
DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on AWS.
Release notes: chasersystems.com/docs/discrim...
Release notes: chasersystems.com/docs/discrim...
December 2, 2024 at 1:15 PM
DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on AWS.
Release notes: chasersystems.com/docs/discrim...
Release notes: chasersystems.com/docs/discrim...