# NorForge

> NorForge is an employee-owned sovereign AI security company building the next generation of security technology. Founded in 2026 by senior operators who ran the technical arm of a Silicon Valley private equity firm.

## Pages

- [https://norforge.com/](https://norforge.com/): The company, its team credentials, and how to get in touch.
- [https://norforge.com/about](https://norforge.com/about): Mission, background, team, leadership, and board of directors.
- [https://norforge.com/contact](https://norforge.com/contact): Get in touch - every inquiry is read and answered by an engineer.
- [https://norforge.com/security-policy](https://norforge.com/security-policy): How to report a security vulnerability in NorForge's systems.
- [https://norforge.com/privacy](https://norforge.com/privacy): NorForge's privacy policy: what data we collect, how we use it, and your rights under GDPR.
- [https://norforge.com/terms](https://norforge.com/terms): Terms of service for norforge.com: acceptable use, intellectual property, and governing law.
- [https://norforge.com/blog](https://norforge.com/blog): Engineering notes, analysis, and perspectives from the NorForge team.
- [https://norforge.com/blog/inside_cairn](https://norforge.com/blog/inside_cairn): NorForge research into publicly exposed Cairn AI pentesting panels: how threat actors select targets, direct autonomous agents, exploit vulnerabilities, and expose their victims' secrets in the process.
- [https://norforge.com/blog/ai-hackbots-who-fixes-what-they-find](https://norforge.com/blog/ai-hackbots-who-fixes-what-they-find): Erlend Oftedal on why finding bugs is now cheap but fixing them safely is still hard, how to give coding agents real security guidance through skills, and what defense in depth means when AI writes most of the code.
- [https://norforge.com/blog/why-ai-programs-stall-before-scale](https://norforge.com/blog/why-ai-programs-stall-before-scale): Four barriers keep AI programs at pilot scale: hidden usage, legacy data foundations, so-so automation, and a shrinking skills base. What the firms that scale do instead.
- [https://norforge.com/blog/field-notes-cloudflare-security-audit-skill](https://norforge.com/blog/field-notes-cloudflare-security-audit-skill): Field notes on Cloudflare’s open-source security-audit-skill: six-phase audits, adversarial verification, sandbox requirements, and what it found on a real open-source monorepo.