👋 Hey, Egemen here.
I have been pushing every pull request through the cheapest model I can get away with, and I assumed that trade was fine.
Until it wasn’t.
Here’s a snapshot of what’s on the menu today:
💡 Spotlight: Sales is changing
🧠 Deep-Dive: Cheap reviewers miss the permission bugs
🗺️ Method: Unify your team and tech stack
⚾️ Catch: TLDR
☝️ Scaled This Past Week: Highstock
💡 Spotlight
Some teams never seem to stop moving. They're on Attio, the agentic CRM.
Every customer signal is captured in one shared context layer, always current and compounding. Agents and workflows build pipeline, chase every buying signal, and move deals forward, an always-on revenue engine running alongside your team.
With Attio, you’ll get:
Leads automatically prioritised and routed to the right rep
Expansion and risk signals caught the moment they land
Follow-ups written in your voice, already there when you arrive
Teams like Parallel, Turbopuffer, and Wordsmith build on Attio. Are you one of them?
In partnership with
🧠 Deep-Dive: Cheap reviewers miss the permission bugs
I have been pushing every pull request through the cheapest model I can get away with, and I assumed that trade was fine.
A benchmark Entelligence published on 14 September made me check the assumption. They ran GPT-5.6 Luna and GPT-6 Astra over the same 50 public pull requests with the same prompt, pooled every finding, then had two separate models judge the pool. 143 bugs passed both judges.
9 of 24 Security bugs caught by the $0.0041 reviewer. The $0.113 reviewer caught 19.
The number under the headline is the one I care about. On security bugs, Luna found 9 of 24 while Astra found 19.
On the Keycloak pull requests, where most changes touch authentication and permission logic, Luna found 6 verified bugs to Astra's 14, and only half of what it raised there survived verification.
The two bugs it missed read fine line by line. One let a federated recovery code be used more than once. The other let a global view permission override denials set on individual clients.
You catch those by working out what the permission model allows after the change, and a diff does not carry that.
GreyNoise published a campaign three days before that benchmark. AI agents built on a Codex harness and a DeepSeek model exploited two PaperCut flaws across 395 organizations in 48 countries, going from an empty workspace to remote code execution in under four hours.
At peak the agents took 11 organizations in 26 seconds. Attackers moved to agents first. The bug class your cheap reviewer misses is the class those agents hunt fastest.
👉 Keep the cheap model on every pull request and add the expensive one on any diff that touches auth, permissions, billing or data access.
Running both models across all 50 pull requests cost $5.86, so budget is not the constraint here. Tag those paths in your repo this week, because no model works out from a diff alone which change opens a door.
🗺️ Method
Unify Your Teams and Tech Stack With HubSpot
Connect your customer data, teams, and tools without the hassle of complex integrations or lengthy setups. One easy platform gives marketing, sales, and service teams a unified customer view and the tools to turn it into growth.
Why HubSpot and what's new
• Generate leads and automate marketing with Marketing Hub
• Build your pipeline and close more deals with Sales Hub
• Scale customer support and drive retention with Service Hub
• Keep customer data clean, connected, and actionable with one, unified platform
Join 306,000+ in over 135 countries using HubSpot to grow their businesses.
See what a more connected approach to growth can do for you and your team. Get setup quickly and start checking off your hardest tasks.
⚾️ Catch
Don't be behind at the next campaign review
Your team is already testing the channel you haven't read about yet. TLDR Marketing is the 5-minute daily brief that keeps you ahead. Free, and read by 330K+ marketers.
☝️ Scaled This Past Week: Highstock
Highstock closed a $30M Series A led by a16z, with Greylock Partners, Abstract, Daybreak and angels including Max Mullen and Lenny Rachitsky.
Highstock runs a B2B marketplace for surplus consumer goods. Brands list stock they cannot move through normal retail, and Highstock routes it to vetted buyers, from live sellers on Whatnot and TikTok Live through to international retailers, then handles fulfillment end to end.