Last night, I became aware of the concerns raised in Josh's post. I reached out publicly and over DM to offer a potential explanation based on the limited information available at the time, while working to understand what happened. As background, we’ve internally been pushing 100% on security of the Railway platform. At Railway, we believe that cyber threats are real and mounting, and we’ve built out tooling for automatic scanning + CVE remediation (for both our infrastructure and customers). Over the last few weeks, oncall engineers were instructed to red team our infrastructure. We maintain specific policies and short lived grants for when these actions occur. Subsequently, I became aware that an employee at Railway had constructed, on their own time, a tool for proactive identification + reporting of bug bounties within the broader community. The employee, using their own personal accounts, personal credit card, and time outside of work hours, signed up for a personal subscription to a hosted service running Deepseek. I can confirm they ran this tool once and only once, on a singular external provider, and halted it proactively within 15 minutes of starting. Railway does not condone these actions. We expect all our employees to uphold our standards of conduct, whether acting on behalf of Railway or in a personal capacity. We create an environment where internal red teaming has strict guidelines, and when bug bounty disclosures must occur, we follow every letter of responsible disclosure. We have addressed this incident with the employee directly and have taken appropriate action. We are also reinforcing our expectations for employee conduct to help prevent similar situations.

@joshmanders @jakerunzer @Railway @ngeloxyz Yea that looks pretty agentically 'off the rails' to me I think the models are getting a bit too good at this point and we'll have to ban any sort of non-manual testing externally Will make sure this never happens again. Apologies @joshmanders!

Done right for an organization, whenever you 1.5-2x headcount, you will 10x throughput That is the goal It means you are hiring great people, the systems are building leverage, and you are building the right things

Ironically, we’ve been doing “Sandboxes” since 2020. Fast, Dynamic, persistent compute Now combine this with cloud agents, live branches (🔜), feature flags and observability Unleash every agent, in parallel with zero friction, to build anything instantly

@ivanburazin Tech consistently forgets that most things are not technology problems, they are human psychology, habit, and risk tolerance problems. They take time. This makes tech often right about the thesis, and wrong about the timeframe over which it’s realized.

~5m RPS on the Railway network right now The infra team has been putting in insane work to scale at the pace needed to meet demand from AI All systems go 🟩🚅🟩. Onward and Upwards

My biggest life pro tip is buy 5x the amount of consumables you use and slap em in various places Toothbrush, charging cable, deodorant, etc. In your car, in your luggage, in your day bag. Then you never think about it again; it’s awesome