Necco Ceresani
GTM Lead
Fifteen years building engineering platforms, currently focused on advanced AI infrastructure at yeet. I love turning the deeply complex topics into something everyone can understand. I relate deeply with the core yeet philosophy that you can just build things.
Blog
View all →File Shield + Flight Recorder: How Yeet Stops the Trivy Attack Pattern with eBPF
The Trivy attack exfiltrated credentials from 10,000+ CI/CD pipelines by reading files it already had access to. We fed the incident report into yeet's AI and built a kernel-level block in hours. Here's what we built — and why it matters for every team running AI coding agents on their infrastructure.
What is eBPF? How It Works in the Linux Kernel (Simple Guide)
What is eBPF? A simple, non-technical explanation of how eBPF works, why it matters, and how tools like Yeet make kernel-level observability, security, and networking accessible with JavaScript.
The Observability Industry Has the Wrong Customer: Why AI Agents Need a New Stack
The observability industry is built on one invisible assumption: a human is looking at the data. Every design decision — dashboards, static alerts, pre-aggregated metrics, advance instrumentation — follows from that assumption. Two simultaneous shifts are breaking it: production systems now move faster than humans can observe, and AI agents can reason about structured data without any of the affordances the current stack was built to provide. Together, these shifts don't just demand faster tooling — they make the current architecture the wrong abstraction entirely. This post lays out what observability looks like when the primary consumer can reason, and the five first-principles design choices that follow.
The Advantage of Yeet: A Programmable Kernel Runtime for Bespoke Observability and Agentic Infrastructure
Yeet is a programmable kernel runtime that combines eBPF, JavaScript, GraphQL, and AI agents in a single Linux daemon. It replaces generic observability dashboards with bespoke instrumentation tools — custom-built for each application, with kernel-depth visibility, deployed in minutes. Yeet is the first platform where AI agents can read, query, and act on live infrastructure at the kernel level.
Learn About Yeet
Learn about yeet
Topical Takes
View all →How to Monitor HTTP Traffic on Linux in 2026: What the Kernel Sees That Your Proxy Doesn't
A sidecar proxy sees the traffic you routed through it. The kernel's TC layer sees what actually crossed the wire, including loopback, without anything being rerouted. Compares OpenTelemetry, Envoy, tcpdump, Pixie, Cilium Hubble and httpwatch, and how to pick the one that answers your question.
How to Monitor HTTP Traffic on Linux in 2026: Why the Kernel Sees What Your Access Log Doesn't
How to see the HTTP requests crossing a Linux host, including the ones your access log never records because they never reached a handler. Covers eBPF capture at the kernel's TC layer, tcpdump, Coroot, Pixie, Cilium Hubble, a proxy and OpenTelemetry, with the commands to run and the kernel version each one needs.