Zarif Latif

About

I'm a solo student founder from Bangladesh obsessed with compiler internals and program analysis. I built Railo because I got tired of watching security scanners generate hundreds of alerts that nobody ever fixes. Railo takes those alerts and auto-writes the Fix PR โ€” using deterministic AST rewriting (LibCST) and Z3 formal verification to prove the exploit is eliminated before opening a single line of code. No LLMs. No hallucinations. Math. Already shipped verified Fix PRs to HTTPie (34kโ˜…) and BentoML (9kโ˜…) automatically. Zero test regressions. Building in public. Always happy to talk security, formal methods, or developer tooling.

Badges

Gone streaking
Gone streaking
Gone streaking 5
Gone streaking 5

Maker History

  • Railo
    RailoAuto-writes the security Fix PR. Not just the alert.
    Sep 2026
  • ๐ŸŽ‰
    Joined Product HuntAugust 26th, 2026

Forums

โ€ข

3d ago

Railo - Auto-writes the security Fix PR. Not just the alert.

Security scanners find bugs. Your team still has to fix them. Railo closes that gap; it takes your open findings and automatically opens deterministic, test-passing Fix PRs for Python and TypeScript. No LLMs. No hallucinations. Deterministic AST engine + Z3 formal verification proves the exploit path is eliminated before any PR is created. Already patched HTTPie (34kโ˜…) and BentoML (9kโ˜…) in production. Free plan ยท Pro $49/mo ยท Team $199/mo
View more