Agentic AI in Production

Head of AI at ArmorCode
I build AI agents that do real work. Right now that is security, where the bar for trust is highest.
My team ships Anya, an autonomous AppSec agent in Fortune 500 production. The Claude Code and MCP tooling I build along the way is open source.
Get In Touch Read the Writing
Let's talk → Read the writing
Scroll
About

Builder

10
Years
3
Teams
1
Exit
1,600+
GitHub Stars

I build things: AI systems, engineering teams, open source tools.

Not decks. Not strategies. Things that ship and work.

The pattern is always the same: real problem, small team, relentless focus.

Open Source

reddit-mcp-buddy
740+ ★ Creator
Clean, LLM-optimized Reddit MCP server. Browse posts, search content, analyze users.
claude-code-hooks
430+ ★ Creator
A growing collection of useful Claude Code hooks. Copy, paste, customize.
awesome-claude-skills
410+ ★ Creator
Curated collection of 50+ verified skills for Claude Code, Claude.ai, and API.
SGLang
30k+ ★ Contributor
High-performance serving framework for large language and multimodal models.
vLLM
85k+ ★ Contributor
High-throughput LLM inference engine powering production AI at scale.
find-sec-bugs
2.4k+ ★ Contributor
Security vulnerability scanner for Java applications. SpotBugs plugin for SAST.

Experience

2023 – Present
Head of AI
ArmorCode · Series B
Leading AI strategy and 7-engineer team building Anya, the world's first autonomous ASPM agent. 80% MTTR reduction for Fortune 500 customers. Architected enterprise MCP server for 40B+ security findings.
2021 – 2023
Engineering Manager
Urban Company · $2.8B Unicorn
Built 12-engineer security organization from scratch. Drove platform initiatives achieving 99.999% uptime. Implemented GDPR-compliant privacy architecture for IPO readiness.
2018 – 2021
Founding Engineer → EM
AvidSecure → Sophos
Employee #1. Built MVP leading to acquisition in 6 months. Scaled platform from 10 to 10K customers and team from 0 to 25 engineers.
2016 – 2018
Sr. Software Engineer
NTRO
Built secure software systems for critical infrastructure protection.

Writing

Anatomy of a $5 “Good Morning”
July 8, 2026
My most expensive API requests ever are an acknowledgment, a menu choice, and a parade of good mornings. Where agent tokens actually go, receipt by receipt.
Prompt Caching Doesn't Cache Prompts
July 7, 2026
Prompt caching is the single biggest cost lever for LLM agents, but it doesn't cache your prompt. What it actually caches, and why it matters.
You're Slower Than You Think: The 4 Levers of AI-Era Speed
May 19, 2026
AI made optimizing your own workflow nearly free. Four levers (Connect, Encode, Teach, Parallelize), each with a tell you can catch yourself in.
The 2-Minute Claude Code Upgrade You're Probably Missing: LSP
February 28, 2026
Every Claude Code user is running without LSP. That means 30-60s grep searches instead of 50ms precise answers.
Claude Code's Most Underrated Feature: Hooks
January 25, 2026
From the event logger to safety hooks that block dangerous commands and protect secrets.
All posts →

Let's Build

VCs

I translate AI hype into ROI reality

Due Diligence Calls →

Founders

I invest time in breakthrough ideas

Technical Advisory →

Engineers

I build teams that change trajectories

Open to Coffee Chats →

Speaking

DEFCON · OWASP · c0c0n

Invite to Speak →
karan@karanbansal.in LinkedIn → X → GitHub (1,600+ ★) →