[ { "id": 102, "name": "Sift", "slug": "sift", "former_names": [ "Sift Science", "Sift", "Sift Science" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4eb5f9ca677956a27183ce3ae798b02616a1e3e2.png", "website": "https://sift.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Sift is the leader in Digital Trust & Safety, empowering digital disruptors to Fortune 500 companies to unlock new revenue without risk. Sift dynamically prevents fraud and abuse through industry-leading technology and expertise, an unrivaled global data network of 70 billion events per month, and a commitment to long-term customer partnerships. Global brands such as DoorDash, Twitter, and Wayfair rely on Sift to gain a competitive advantage in their markets. \r\n", "one_liner": "The Leader in Digital Trust & Safety", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1326789337, "tags": [ "Fintech", "Machine Learning", "SaaS", "B2B" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2011", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/sift", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2011/sift.json", "year_founded": 2011, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/getsift/", "x_url": "https://twitter.com/GetSift", "fb_url": "https://www.facebook.com/GetSift", "cb_url": "https://www.crunchbase.com/organization/sift-science", "github_url": "https://github.com/SiftScience", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4eb5f9ca677956a27183ce3ae798b02616a1e3e2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 29043, "full_name": "Jason Tan", "title": "Founder/CEO", "founder_bio": "I'm an engineer/entrepreneur with a passion for great products and amazing people. I love to learn, whether it be from books or people, and constantly challenge myself and others to be better. I thrive off positive energy and feed it right back. I believe there's opportunity everywhere you look -- the world is only as small as you make it.", "is_active": false, "linkedin_url": "http://www.linkedin.com/in/jas0ntan", "x_url": " https://twitter.com/jasontan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e8d7ed82da200ef22e4b8d28f9e1443e20fc2980.jpg" } ], "jobs": [], "news": [ { "title": "With prices cratering, many crypto holders stopped looking at their accounts. Scammers did not | Fortune", "url": "https://fortune.com/crypto/2022/09/30/crypto-holders-stopped-looking-at-accounts-scammers-did-not/", "date": "Jan 21, 2023" }, { "title": "App-based romance scams surge during pandemic ", "url": "https://www.nbcnews.com/now/video/app-based-romance-scams-surge-during-pandemic-144763973847", "date": "Jan 21, 2023" }, { "title": "Pig butchering: A day in the life of a cyberfraud fighter | VentureBeat", "url": "https://venturebeat.com/security/pig-butchering-a-day-in-the-life-of-a-cyberfraud-fighter/", "date": "Oct 28, 2022" }, { "title": "How crypto scams work – and why enterprises need to take note | VentureBeat", "url": "https://venturebeat.com/security/how-crypto-scams-work-and-why-enterprises-need-to-take-note/", "date": "Aug 08, 2022" }, { "title": "Fraud as a service: Scammers are using encrypted messaging to undercut BNPL revenue • TechCrunch", "url": "https://techcrunch.com/2022/04/21/fraud-as-a-service-scammers-are-using-encrypted-messaging-to-undercut-bnpl-revenue/", "date": "Apr 21, 2022" } ], "launches": [] }, { "id": 375, "name": "Clickfacts", "slug": "clickfacts", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://clickfacts.com", "all_locations": "San Francisco, CA, USA", "long_description": "ClickFacts is a Malware Software Solutions company for buyers and sellers of online media. Its automated plug and play malware discovery solution tests online ads (SWFs & 3rd Party Ad Tags) and web pages within websites to ensure they do not distribute malware onto users’ computers (which can lead to identity theft). Its moderation software solution monitors websites to ensure the ads running on them are free of inappropriate content (e.g., nudity, racism), and its Ad Buddy product provides to advertisers real-time continuous monitoring and a complete history of where their ads have run. ClickFacts Inc. was founded in 2005 by Mikhail Ledvich, Mikhail Gurevich, and Greg Gurevich in Boston Mass, with initial funding by YCombinator. It is now based in San Francisco, California.", "one_liner": "", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1326791690, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2005", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/clickfacts", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2005/clickfacts.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/clickfacts", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 648001, "full_name": "Greg Gurevich", "title": "Founder", "founder_bio": "Expert in Machine learning, Electronic trading and Market Microstructure", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/greggurevich", "x_url": "", "avatar_thumb_url": "/avatars/thumb/missing.png" }, { "user_id": 1428313, "full_name": "Mikhail Gurevich", "title": "Founder", "founder_bio": "Just an engineer trying to build cool stuff.\n", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/mikhailgurevich/", "x_url": "https://twitter.com/mikhailgurevich", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c12c792ca95b489fc7a9d93571b63974451eb1ed.jpg" }, { "user_id": 146339, "full_name": "Mikhail Ledvich", "title": "Founder/Product Architect", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/mledvich", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e3de904362f4508394f5641207a03223c859f88a.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 750, "name": "Smyte", "slug": "smyte", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://smyte.com", "all_locations": "San Francisco, CA, USA", "long_description": "Smyte stops spam, scams, harassment and credit card fraud for marketplaces and social networks. We automatically classify your website and mobile app's event data and stop bad actors at scale.", "one_liner": "Smyte stops bad actors on social networks and marketplaces.", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1416218728, "tags": [ "Security", "Fraud Detection" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/smyte", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2015/smyte.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/smyte", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 4251, "full_name": "Pete Hunt", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/profile/view?id=21952666", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7c3090b2a38b82916117ac3322340892e643ffc1.jpg" }, { "user_id": 11182, "full_name": "Julian Tempelsman", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/profile/view?id=130147198", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/dbbe11997e34b99304fbb5cb16c0efd3310c4e12.jpg" }, { "user_id": 8547, "full_name": "Josh Yudaken", "title": "Founder/Lead Infrastructure Engineer", "founder_bio": null, "is_active": true, "linkedin_url": "http://za.linkedin.com/pub/josh-yudaken/5/ba8/958", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fcdc8b6f69e2d5fc0e43265fc1487d054aca9e53.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 759, "name": "CyberFend", "slug": "cyberfend", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://cyberfend.com", "all_locations": "San Francisco, CA, USA; Santa Clara, CA, USA", "long_description": "Cyberfend offers a robust security solution to protect your web and mobile applications from sophisticated attacks and fraudulent activity. Cyberfend's solution detects account take-over, payment fraud and the use of stolen credentials. All of these problems are relevant to every consumer facing web and mobile product/service. \n\nCyberfend’s solution uses a new security paradigm – human cognitive science coupled with advanced machine learning. The result is a robust detection system with near zero false positives and false negatives. Today Cyberfend protects nearly a billion login and payment transactions every month for many large e-commerce, web and payment customers. \n\nCyberfend's product is at the intersection of almost every single cutting edge technology today : a) Our core product employs heavy machine learning b) On the backed, our product is cloud based and deals with enormous scale (customers are directing significant portions of their traffic to us) c) On the front end we need to deal with both web and mobile (IOS, SDK) challenges.Please visit us at: www.cyberfend.com.\n\nCyberfend is backed by Y Combinator, SV Angel and A Capital. \n\nCyberfend was acquired by Akamai Technologies in December 2016.", "one_liner": "Cyberfend delivers robust, real-time web and mobile security by…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1416219580, "tags": [ "Cybersecurity", "Fraud Prevention" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cyberfend", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2015/cyberfend.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/cyberfend", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 63716, "full_name": "Sreenath Kurupati", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/profile/view?id=5872270", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/edeb8e60bbda11fabb0c1db6e53d65ceded29300.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 854, "name": "ThinAir", "slug": "thinair", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://thinair.com", "all_locations": "San Francisco, CA, USA; Palo Alto, CA, USA", "long_description": "At ThinAir They are building the future of data security--and it's wrought with exciting engineering challenges!\r\n\r\nAs a cloud-based SaaS product, ThinAir is the first data security solution that allows everyone—administrators and employees alike—to take control over their most sensitive data in a way that enhances, not hinders their productivity.\r\n\r\nThey were the 2014 DEMO Enterprise's DEMOGod Winner and they completed Y Combinator as part of W15.", "one_liner": "Intelligent data security for teams", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1419817287, "tags": [ "Cybersecurity", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/thinair", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2015/thinair.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/thinair", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 72020, "full_name": "Tony Gauda", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tonygauda", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c4fc6005c4f40b1fb2967af10c4711a5c487a42c.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 891, "name": "Cymmetria", "slug": "cymmetria", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://cymmetria.com", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Cymmetria is a cybersecurity company at the forefront of deception technology, and offers the only commercially available deception technology that has caught 5 nation-state APTs.\n\nCymmetria’s deception products, MazeRunner and ActiveSOC, give organizations the ability to hunt attackers, detect lateral movement inside the perimeter, automate incident response, and mitigate attacks. The company also offers deception as a service, enabling organizations to customize deception technologies for their business environment. \n\nFounded in 2014 by security expert Gadi Evron, Cymmetria is changing the asymmetry of cybersecurity, giving defenders the upper hand.\n\nFor more information, visit www.cymmetria.com.", "one_liner": "Shifting the asymmetry of cyber security.", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1429997726, "tags": [ "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "Israel", "Middle East and North Africa" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cymmetria", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2015/cymmetria.json", "year_founded": null, "city": "Tel Aviv-Yafo", "country": "IL", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/cymmetria", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 82967, "full_name": "Gadi Evron", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://il.linkedin.com/in/gadievron", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8fe9658aed273fdae7714f53a1b0d70a954b4bc4.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 894, "name": "Foxpass", "slug": "foxpass", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3c5bf5efdae9a1f09f6bf09d6ac33cf2461c3698.png", "website": "https://www.foxpass.com", "all_locations": "San Francisco, CA, USA", "long_description": "Foxpass increases your organization's server and network security by ensuring employee accounts have access only to what they need.\r\n\r\nOur cloud-hosted LDAP and RADIUS systems help you bring best-practices to your infrastructure. And they're backed by your existing Google Apps accounts.", "one_liner": "Making enterprise security practices available for all companies.", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1429998616, "tags": [ "DevSecOps" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/foxpass", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2015/foxpass.json", "year_founded": 2015, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/foxpass", "x_url": "http://twitter.com/foxpass", "fb_url": "http://facebook.com/foxpass", "cb_url": "https://www.crunchbase.com/organization/foxpass", "github_url": "https://github.com/foxpass", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3c5bf5efdae9a1f09f6bf09d6ac33cf2461c3698.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 83835, "full_name": "Aren Sandersen", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/arens", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/35f502b495393c53a0090a6a6364b6ef94bd3340.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 909, "name": "Appcanary", "slug": "appcanary", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/812e3473cee76ddf3c226c05edc2883848c5fb14.png", "website": "http://appcanary.com", "all_locations": "Toronto, ON, Canada", "long_description": "Never run vulnerable software again.\r\nWe monitor your servers, and notify you when you need to update. \r\n\r\nTry us for free: https://appcanary.com", "one_liner": "Appcanary tracks the dependencies you use in your apps and servers…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1430156121, "tags": [ "Security", "Monitoring" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/appcanary", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2015/appcanary.json", "year_founded": null, "city": "Toronto", "country": "CA", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/appcanary", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/812e3473cee76ddf3c226c05edc2883848c5fb14.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 73179, "full_name": "Filipa Mendonça-Vieira", "title": "Founder", "founder_bio": "perfect and upright, eschews evil. S15, acquired by GitHub.\n\npragmatic & empathetic engineering leader with a professional focus on security tooling and development at \"web-scale\".", "is_active": false, "linkedin_url": "https://ca.linkedin.com/in/phillmv", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f583e7e461ab8fcde91bdd6b4487fb8df6671f0b.jpg" }, { "user_id": 68370, "full_name": "Max Veytsman", "title": "Founder", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/profile/view?id=116004429", "x_url": "https://twitter.com/mveytsman", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c6819c0380fc97447df5f9c8d9f8a07925cdc8cf.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 912, "name": "Sphere Secure Workspace", "slug": "sphere-secure-workspace", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://sphere.works", "all_locations": "London, England, United Kingdom", "long_description": "Sphere Secure Workspace\r\n\r\nFor a product demonstration, or for any other enquiries please contact at info@sphere.works", "one_liner": "", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1430156122, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United Kingdom", "Europe" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/sphere-secure-workspace", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2015/sphere-secure-workspace.json", "year_founded": null, "city": "London", "country": "GB", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/sphere-secure-workspace", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 89133, "full_name": "Dominik Thalmann", "title": "Founder/CTO", "founder_bio": null, "is_active": true, "linkedin_url": null, "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3e325e24052c48f651730e9103732484d0df3a70.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 940, "name": "Traversal Networks", "slug": "traversal-networks", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://traversalnetworks.com", "all_locations": "San Francisco, CA, USA; Mountain View, CA, USA", "long_description": "Traversal Networks develops a new form of Network Intrusion Detection System designed to catch unknown threats. The Lateral Threat Detector appliances are easily installed on your corporate network. These analyst-assisted sensors learn traffic patterns on each of your network segments and detect lateral exploitation, backdoors, bots, malware, and network reconnaissance.\n\nThe Traversal Networks operate on four different platforms: learn, reputation, machine learning and search.\n\nTraversal Networks has developed heuristics using a corpus of live network data combined with expertise in botnet detection to help filter traffic. Additionally, Traversal Networks uses IP and DNS reputation across all its deployed devices to detect new threats.\n\nThe Lateral Threat Detector appliances utilize reinforcement learning to continually enhance filtering performance on each network segment, and submit prefix-preserving anonymized data to our cloud making it available to be quickly searched in real time.\n\nThe Traversal Cloud Analysis platform was designed to enable its security analysts to quickly pivot on anomalous traffic seen across its network and classify it as malicious or benign.", "one_liner": "Enterprise Threat Detection: Tuning, Triage, and Analysis by Experts.", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1430156132, "tags": [ "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/traversal-networks", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2015/traversal-networks.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/traversal-networks", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [], "jobs": [], "news": [], "launches": [] }, { "id": 1032, "name": "Castle", "slug": "castle-2", "former_names": [ "Castle.io", "Castle", "Castle Intelligence" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8d7fdbafd7f8ab52a136ccd6f568c251351c96b8.png", "website": "https://castle.io", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Instantly stop automated and human-originated account takeovers, fake accounts, and any behavior that violates your platform policies.", "one_liner": "Block bots & bad behavior", "team_size": 20, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447566615, "tags": [ "Developer Tools", "SaaS", "Security", "Fraud Detection" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/castle-2", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/castle-2.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/castle-intelligence", "x_url": "https://twitter.com/Castle_IO", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/castle-2", "github_url": "https://github.com/castle", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8d7fdbafd7f8ab52a136ccd6f568c251351c96b8.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 40815, "full_name": "Johan Brissmyr", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/brissmyr", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7b325a5454671a0c325a49b2f9b6940c8af0b4c0.jpg" }, { "user_id": 40816, "full_name": "Sebastian Wallin", "title": "Founder/CTO", "founder_bio": "", "is_active": true, "linkedin_url": "http://se.linkedin.com/in/sebwal/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/113e2eb5b57b288539628814d18c16361bc14ca9.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1040, "name": "Patchwork Security", "slug": "patchwork-security", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://patchworksecurity.com", "all_locations": "San Francisco, CA, USA; Oakland, CA, USA", "long_description": "We’re taking everything we know as security engineers, automating it, and making it easy for everyone to use.", "one_liner": "Security patch notifications for servers. Build it, deploy it, and…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447568415, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/patchwork-security", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/patchwork-security.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/patchwork-security", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 66437, "full_name": "Shamiq Islam", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/shamiqislam", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/54117b8d4d2edb3535be398f6da9fb7782efbc35.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1043, "name": "Salt Security", "slug": "salt-security", "former_names": [ "Secful", "Salt" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/ee67d3955bee952b7146cbf36150b372e91df27a.png", "website": "https://salt.security/", "all_locations": "New York City, NY, USA; Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Salt Security protects the APIs that form the core of every modern application. Its patented API Protection Platform is the only API security solution that combines the power of cloud-scale big data and time-tested ML/AI to detect and prevent API attacks. By correlating activities across millions of APIs and users over time, Salt delivers deep context with real-time analysis and continuous insights for API discovery, attack prevention, and shift-left practices. Deployed quickly and seamlessly integrated within existing systems, the Salt platform gives customers immediate value and protection, so they can innovate with confidence and accelerate their digital transformation initiatives.\r\n\r\nSalt pioneered API security and is the industry leader for API security with a proven record of success. You can watch a 90-second overview video of the Salt Security API Protection Platform here: https://youtu.be/Z5nzavnBJj4\r\n", "one_liner": "Protects organizations from getting breached through their APIs.", "team_size": 200, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447568415, "tags": [ "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "Israel", "America / Canada", "Middle East and North Africa", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/salt-security", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/salt-security.json", "year_founded": 2016, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/saltsecurity", "x_url": "https://twitter.com/SaltSecurity", "fb_url": "https://www.facebook.com/SaltAPIProtectionInc", "cb_url": "https://www.crunchbase.com/organization/saltsecurity", "github_url": "https://github.com/SECful", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/ee67d3955bee952b7146cbf36150b372e91df27a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 110819, "full_name": "Roey Eliyahu", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/profile/view?id=AAIAABIcm5MBfqBCyLhsb4LF4s6RylWpU2QCVVQ", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/df5346c06b3c82fec2cad29aaef8ddbbe21210a7.jpg" } ], "jobs": [], "news": [ { "title": "Salt Security releases Salt Labs State of API Security Report", "url": "https://salt.security/api-security-trends", "date": "Apr 27, 2022" }, { "title": "Salt Security announces $140 million Series D round", "url": "https://salt.security/blog/how-salt-is-having-the-best-journey??utm_source=twitter", "date": "Feb 10, 2022" }, { "title": "Formalizing our API security research with the launch of Salt Labs", "url": "https://salt.security/blog/formalizing-our-api-security-research-with-salt-labs", "date": "Jul 14, 2021" } ], "launches": [] }, { "id": 1214, "name": "AmberBox Gunshot Detection", "slug": "amberbox-gunshot-detection", "former_names": [ "Sinclair Fire", "AmberBox" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4520c6bfa42649fe08afe6ca716089765076d7c3.png", "website": "https://amberbox.com", "all_locations": "New York City, NY, USA", "long_description": "AmberBox is the most advanced indoor gunshot detection and response system used in the US today. AmberBox automates emergency processes to significantly reduce response time and remove human error.\r\n\r\nAmberBox detectors utilise a patented gunshot detection algorithm to respond immediately following a firearm discharge. With tri-factor authentication (percussion, audio and infrared), detectors are able to instantly determine a firearm signature with a near-zero false alarm rate. Upon activation, detectors alert first responders through our reporting network, and can integrate with other security systems, such as cameras, access control systems and mass notification to initiate.", "one_liner": "Detect Gunshots | Inform Law Enforcement | Empower First Responders", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1588692019, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/amberbox-gunshot-detection", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/amberbox-gunshot-detection.json", "year_founded": 2015, "city": "New York City", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/amberbox", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4520c6bfa42649fe08afe6ca716089765076d7c3.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [], "jobs": [], "news": [], "launches": [] }, { "id": 1223, "name": "Metapacket", "slug": "metapacket", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://www.metapacket.com", "all_locations": "San Francisco, CA, USA", "long_description": "Metapacket is a proxy platform that detects & prevents malwares from exfiltration. Effectively rendering malware useless.", "one_liner": "Metapacket is the first selective web gateway that stops malware by…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1461210618, "tags": [ "Cybersecurity", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2016", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/metapacket", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2016/metapacket.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/metapacket", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 110582, "full_name": "Nir Krakowski", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://il.linkedin.com/in/nirkrakowski", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3870fdf4b20f969eb89d196db70a712e5923f5d0.jpg" }, { "user_id": 138624, "full_name": "Itamar Gilad", "title": "Founder/CTO", "founder_bio": "Former technical leader at Microsoft and co-founder for Metapacket. Current research and threat detection lead at Wiz (acquired by Google). Passionate researcher, builder and leader.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/igilad", "x_url": "https://x.com/TrustingTrust", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/661d8f6c325c9906f13a91f1f0be8685180fcdfe.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1487, "name": "Ambient.ai", "slug": "ambient-ai", "former_names": [ "Ambient" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/624d0ce6f387431048bed692cfded210ffc7d139.png", "website": "https://ambient.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Ambient.ai is a computer vision intelligence company transforming enterprise security operations to prevent security incidents before they happen. The Ambient.ai platform applies AI and computer vision intelligence to existing sensor and camera infrastructure to deliver continuous physical security monitoring and automate the immediate dispatch of human resources. Ambient.ai is the first platform that goes beyond basic motion detection and image recognition to achieve near-human perception with automated situational context. \r\n\r\nWith physical security incidents on the rise and physical security organizations left under-resourced, Ambient.ai’s computer intelligence platform comes at a time of critical need, which is why the company has raised over $50 million from venture capital investors led by a16z. Today, large enterprises, schools and organizations – including many of the largest US tech companies and other Fortune 500 companies – use Ambient.ai to secure property, people, and assets from the most harrowing physical security threats.\r\n\r\nThe company was founded in 2017 by experts in artificial intelligence from Stanford who previously built iconic products at Apple, Google, Microsoft and Dropbox. We are backed by Andreessen Horowitz (a16z), SV Angel, Y Combinator, and visionary angels like Jyoti Bansal, Mark Leslie and Elad Gil.", "one_liner": "AI company transforming enterprise physical security to prevent…", "team_size": 150, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1478224835, "tags": [ "Computer Vision", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/ambient-ai", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2017/ambient-ai.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/ambient-ai/?viewAsMember=true", "x_url": "https://twitter.com/ambientai?lang=en", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/ambient-ai", "github_url": "https://github.com/AmbientAI", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/624d0ce6f387431048bed692cfded210ffc7d139.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jared Friedman", "url": "https://www.ycombinator.com/people/jared-friedman" }, "founders": [ { "user_id": 88122, "full_name": "Shikhar Shrestha", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/shikharshrestha", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8bdadb754a12475d36800d17aecd97ea76c73801.jpg" }, { "user_id": 156767, "full_name": "Vikesh Khanna", "title": "Founder", "founder_bio": "I am passionate about AI and the transformative influence it'll have on our lives. I founded Ambient AI in 2017 to bring AI to enterprise physical security; with a mission to prevent security incidents. As the CTO and co-founder of Ambient, I am responsible for everything engineering, product and technology at the company. Before founding Ambient, I was building software at Dropbox and Microsoft.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vikesh-khanna-27184722", "x_url": "https://twitter.com/vikeshkhanna", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/389c92d81697addb8545b57a51107996183c5fc2.jpg" } ], "jobs": [ { "id": 75246, "title": "Regional Sales Manager, Strategic Accounts", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/WARD3EV-regional-sales-manager-strategic-accounts", "location": "Florida", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75247, "title": "Technical Account Manager", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/yX2E1PJ-technical-account-manager", "location": "Missouri", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75250, "title": "Software Engineer - Product", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/g46lKp3-software-engineer-product", "location": "Bengaluru", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75252, "title": "Software Engineer - Full Stack", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/nSa9eVd-software-engineer-full-stack", "location": "Bengaluru", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75253, "title": "Staff Software Engineer - Data Platform", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/hO1gob2-staff-software-engineer-data-platform", "location": "SF Bay Area / Redwood City, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$188K - $235K", "equity_range": "", "experience": "6+ years", "visa": "Will sponsor", "skills": [] } ], "news": [ { "title": "This Startup Is Using AI to Turn Video Security On Its Head | Inc.com", "url": "https://www.inc.com/christine-lagorio-chafkin/security-artificial-intelligence-ambient.html", "date": "Sep 19, 2022" }, { "title": "Ambient.ai aims to provide AI-powered building security, minus bias and privacy pitfalls – TechCrunch", "url": "https://techcrunch.com/2022/01/19/ambient-ai-security-without-facial-recognition/", "date": "Jan 19, 2022" } ], "launches": [] }, { "id": 1521, "name": "Apozy", "slug": "apozy", "former_names": [ "Apozy" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2234c64915e488afac0fff43bf91257681089931.png", "website": "https://www.apozy.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Apozy is a browser defense platform powered by \"Native Browser Isolation\" technology. It neutralizes phishing, malware, and impersonation attacks in real-time by sandboxing dangerous websites at the time of click. This creates a safe \"read-only\" environment for browsing, even if the original website is malicious. Businesses use Apozy Airlock to protect their employees from online threats and prevent data breaches.\r\n", "one_liner": "Apozy makes every website safe to browse", "team_size": 9, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1478663435, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/apozy", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2017/apozy.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/2234c64915e488afac0fff43bf91257681089931.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 163535, "full_name": "Erhan Justice", "title": "Founder/CTO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/erhan-justice", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ccbe2839b0f6667a58f1145c810b560219e034f1.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1630, "name": "Upfort", "slug": "upfort", "former_names": [ "Paladin Cyber" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/00594b41a6ca6cb9abcc26aadf60196e866c0990.png", "website": "https://www.upfort.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Upfort is a leading platform for cyber security and insurance that provides holistic protection from evolving cyber threats. Founded in 2017 to expand global access to cyber resilience, Upfort makes cyber risk easy to manage and simple to insure. Upfort delivers turnkey security proven to proactively mitigate risk and comprehensive cyber insurance from leading insurers. With proprietary data and intelligent automation, Upfort’s AI anticipates risk and streamlines mitigation for hassle-free underwriting. Insurers, brokers, and risk advisors partner with Upfort to offer clients resilience and peace of mind against cyber threats.", "one_liner": "Turnkey security & hassle-free cyber insurance from leading insurers", "team_size": 38, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1493398718, "tags": [ "Next-gen Network Security", "Security", "Insurance", "Cyber Insurance" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/upfort", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2017/upfort.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/upfort/", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/paladin-cyber", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/00594b41a6ca6cb9abcc26aadf60196e866c0990.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 183801, "full_name": "Han Wang", "title": "Founder/CTO", "founder_bio": "US Army Officer turned startup founder, with an expertise in browser use, embeddings, cybersecurity and computational mathematics.", "is_active": false, "linkedin_url": "http://www.linkedin.com/in/hanwangcyber", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bbe02674927badf59fcf96f103ee4af74ae089e5.jpg" }, { "user_id": 194783, "full_name": "Daniel Bilbao", "title": "Founder", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/danielbilbao/", "x_url": "https://twitter.com/ddbilbao", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/11dff57bb80d685d42f7dfeb8e14a2f475e92d03.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1663, "name": "D-ID", "slug": "d-id", "former_names": [ "De-ID" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0bfa35a853487ffdadce50500de098ce5beb965d.png", "website": "http://www.d-id.com", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "D-ID enables creators and developers to generate realistic high-quality AI personas easily and ethically through the use of our platform and APIs, based on deep-learning and AI-powered technology - Enabling Creative Reality™.\r\n\r\nD-ID is a Tel Aviv-based Creative Reality™ startup specializing in patented video reenactment technology using AI and deep learning. \r\nEstablished in 2017, D-ID created the first facial image de-identification solution to protect images and videos from facial recognition software. \r\nD-ID's products range from animating still photos to facilitating high-quality video productions and creating viral user experiences. ", "one_liner": "Enable creators and developers to generate realistic AI personas", "team_size": 27, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1493789454, "tags": [ "Deep Learning", "Generative AI", "Entertainment", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Israel", "Middle East and North Africa", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/d-id", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2017/d-id.json", "year_founded": 2017, "city": "Tel Aviv-Yafo", "country": "IL", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0bfa35a853487ffdadce50500de098ce5beb965d.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 188770, "full_name": "Sella Blondheim", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sella-blondheim-531096a5/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/43b5ad2090ac39283e3e0c970d87fb5f95ecb30f.jpg" }, { "user_id": 188641, "full_name": "Eliran Kuta", "title": "Founder/CTO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/eliran-kuta-24165878/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f5b81c9801c3c6b8442b4e566eea1a13366bee93.jpg" }, { "user_id": 186038, "full_name": "Gil Perry", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gil-perry-21532655/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/50c3762c81ee34b5f8a9191b7b2e950e9249d32a.jpg" } ], "jobs": [], "news": [ { "title": "D-ID's newest app uses AI to make videos from photographs | TechCrunch", "url": "https://techcrunch.com/2023/10/24/d-ids-newest-app-uses-ai-to-make-videos-from-photographs/", "date": "Oct 24, 2023" } ], "launches": [] }, { "id": 1691, "name": "Templarbit", "slug": "templarbit", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/388bf404240294f2fa8cff1b093bc8030dcd540c.png", "website": "https://www.templarbit.com", "all_locations": "San Francisco, CA, USA", "long_description": "Developer-oriented security platform, helping small and large companies protect their software from malicious activityDeveloper-oriented security platform, helping small and large companies protect their software from malicious activity", "one_liner": "Protecting applications from malicious activity", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1495673434, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2017", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/templarbit", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2017/templarbit.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/templarbit", "x_url": "https://twitter.com/templarbit", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/templarbit", "github_url": "https://github.com/templarbit", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/388bf404240294f2fa8cff1b093bc8030dcd540c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 50864, "full_name": "Bjoern Zinssmeister", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/zinssmeister/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e153b0461b6fe080e7334c46c2e75c553d8ae468.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1727, "name": "Quantstamp", "slug": "quantstamp", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2dc377e8276c3eddb8f99613f0b90ed45fea6ee7.png", "website": "https://quantstamp.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Quantstamp has protected billions in digital assets from hackers on our mission to secure web3. As a global team of security professionals, we have honed our technology and expertise through hundreds of audits and gained the trust of our clients to keep their innovative products safe.\r\n\r\nIn addition to providing an array of security services, we facilitate the growth and longevity of the web3 space through strategic investments and acting as a trusted advisor to help projects scale. Quantstamp is honored to have worked with some of the top projects in the industry including Aave, Compound, Maker, OpenSea, Polygon and many more.\r\n\r\nAs the leading blockchain security company in this emerging industry, we are always looking for team members that love taking initiative and solving challenging problems. Join the team and help us secure the future of web3.\r\n", "one_liner": "Security auditing for Web3", "team_size": 80, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1509562863, "tags": [ "Crypto / Web3", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/quantstamp", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/quantstamp.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://twitter.com/quantstamp", "fb_url": "https://facebook.com/Quantstamp", "cb_url": "https://www.crunchbase.com/organization/quantstamp-technologies", "github_url": "https://github.com/quantstamp", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/2dc377e8276c3eddb8f99613f0b90ed45fea6ee7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/314be89a5027233d1a5cc3e0b708663c9c151e25.png" ], "primary_partner": null, "founders": [ { "user_id": 214519, "full_name": "Richard Ma", "title": "Founder/CEO", "founder_bio": "Founder and CEO of Quantstamp, the leader in cybersecurity for web3 and AI", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/rtmtd/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4f8f6b3b5d4d9269a54c9a84be2c0b5e8a53f4f5.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1781, "name": "Vanta", "slug": "vanta", "former_names": [ "Vanta" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0660fb546ece5e50a895e790c299dcaaeeefad32.png", "website": "https://vanta.com", "all_locations": "San Francisco, CA, USA", "long_description": "Vanta: the trust infrastructure for YC companies. \r\nThe definitive leader in security and compliance, trusted by 16,000+ companies, including 1,000+ YC startups.\r\n\r\nThe fastest path to your first enterprise deal\r\nReach bigger logos, more revenue, and a stronger story by Demo Day with Vanta.\r\n\r\nAs agents and automation accelerate your path to compliance, buyers get the proof they need to trust you now—not months from now. Your Trust Center launches immediately, giving prospects a live view of your security posture while audit prep is still underway. With 6,000+ Trust Centers across the Vanta network, you enter critical deals with real-time proof and credibility that would otherwise take years to build.\r\n\r\n\"Choosing Vanta early unlocked $1.5M in deals and accelerated our growth by six months. Vanta is the fastest path to doing compliance right—when you're selling SaaS, buyers know the name.\" – Hyperbound (YC S23)\r\n\r\nVanta gives you the fastest, most credible path to compliance across SOC 2, ISO 27001, and more\r\nLet the Vanta Agent handle the bulk of your compliance requirements, from guidance to audit-ready drafts\r\nLaunch your Trust Center and Letter of Engagement on day one\r\nStart faster with pre-scoped requirements informed by 26,000+ audits\r\nAutomate evidence collection across 400+ integrations\r\nValidate posture hourly with 1,400+ tests\r\nFind and fix gaps before they become audit findings\r\nRun your audit fully in-platform with startup-friendly, AICPA peer-reviewed firms\r\n\r\nAgentic compliance that runs itself\r\nCompliance shouldn’t become your CTO’s second job. The Vanta Agent acts as your compliance co-founder, handling the heavy lifting while your team stays focused on building. \r\n\r\nGrounded in 26,000+ audits and Vanta’s in-house GRC expertise, the Vanta Agent produces audit-ready drafts of policies, risk registers, vendor reviews, cloud security measures, and other core requirements. It also surfaces what needs attention, so your team can review, approve, and keep moving without slowing product development or adding compliance to the roadmap.\r\n\r\nEvery output is tailored to your business and grounded in continuously validated data from The Trust Graph, the market’s deepest data and intelligence layer, rather than generic templates or disconnected AI responses.\r\n\r\nVanta is also built for the way YC teams work. Through Vanta’s remote MCP server, full REST API, and native integrations with Claude, Codex, Cursor, and more, compliance moves forward directly inside the tools your team already uses to build, ship, and operate.\r\n\r\n“Vanta has saved us hundreds of hours and well over six figures in potential lost deals or added headcount. If you’re serious about security, start early.” – Clay\r\n\r\nThe Vanta Agent can: \r\nGenerate first-to-final drafts of core compliance requirements\r\nTailor policies, risk registers, and vendor reviews to your business\r\nCollect and evaluate evidence continuously\r\nScope controls and map requirements automatically\r\nSurface gaps, explain their impact, and recommend fixes, including code-level remediation guidance\r\nCut security review time by 81% and vendor reviews by 50%\r\n\r\nThe trusted standard\r\nYour first audit becomes part of your company’s reputation. It needs to hold up under enterprise scrutiny, from the platform and evidence to the auditor behind the report.\r\n\r\nVanta is the platform your prospects already know, trust, and run on. Backed by 16,000+ customers, 26,000+ completed audits, AICPA peer-reviewed auditors, and in-house security and compliance experts, Vanta turns your first audit into your strongest sales asset.\r\n\r\n“We chose Vanta because of its reputation with enterprise buyers - when they see the Vanta logo on your Trust Center, you walk in with credibility that usually takes years to build. That matters when you're week four of your company.” – HiLoop (YC S26)\r\n\r\nVanta gives you:\r\nStartup-friendly, AICPA peer-reviewed audit firms\r\nIn-house former auditors and GRC practitioners who understand startup constraints and enterprise expectations\r\nA dedicated Auditor Portal\r\nA Trust Center enterprise buyers already recognize\r\n\r\nTwo-thirds of the Forbes AI 50 run on Vanta, including Cursor, Lovable, Clay, Replit, and Sierra. When prospects see Vanta behind your security program, you enter critical deals with credibility already on your side.\r\n\r\nThe platform you won’t outgrow\r\nThe platform you choose for your first audit should still work when you add frameworks, close larger customers, and hire your first security leader.\r\n\r\nVanta provides mature trust infrastructure from day one, right-sized for your first audit and built to support rapid growth without rework, replatforming, or waiting on a vendor’s roadmap. From one connected platform, you can establish the security foundations customers expect today and add more advanced capabilities as your business, risk, and compliance requirements grow.\r\n\r\n“With Vanta, we’ve been able to simplify the heavy lifting, gain real-time visibility into our security posture, and confidently maintain compliance as we scale.” – Cursor \r\n\r\nWhy early teams start (and stay) with Vanta:\r\nRight-sized security foundations: \r\nInfrastructure and systems: cloud monitoring, endpoint protection, and access management\r\nVendors and third parties: risk visibility and vendor reviews\r\nSecurity assessments: risk assessments and cyber insurance options\r\nEnterprise-ready capabilities: Third-Party Risk Management, 35+ frameworks, AI-powered Questionnaire Automation, and more\r\nContinuous innovation: 300+ product features shipped in 2025\r\nCategory-leading customers: Lovable, Ramp, Cursor, Instacart, Duolingo, Fin, GitHub, and more\r\nLong-term backing: Sequoia, Y Combinator, JPMorgan, Goldman Sachs, Wellington Management, and other leading investors\r\n\r\n\r\nSupport you don’t have to fight for\r\nVanta makes first-time compliance straightforward and predictable. You won’t have to wait on a consultant, ticket queue, or another founder’s calendar to understand what comes next. The Vanta Agent guides you through each requirement, drafts core compliance work, and surfaces exactly what needs attention so your program keeps moving.\r\n\r\nOur commitment to you: \r\nAgentic audit readiness with instant answers and real-time guidance\r\nIn-house expertise from former auditors and GRC practitioners\r\nCommunity support through the Vanta Community and Slack onboarding\r\nInstructor-led training and on-demand learning\r\n24/7 live chat and Help Center support\r\nHands-on vCISO and implementation support\r\nStartup-friendly auditors ready to move at your speed\r\n\r\nWe’re so confident in our support that we publish our performance metrics and G2 reviews—so you can hold us to it.\r\n\r\nTransparent pricing and YC-exclusive discounts\r\nYC companies get exclusive, discounted first-year pricing based on ARR or headcount:\r\n\r\nEssentials Package:\r\nEverything you need and nothing you don’t for first-time compliance\r\nOne framework with pre-scoped controls \r\nThe VantaI Agent: policy generation, evidence evaluation, and program Q&A, control mapping, policy change summaries, SLA tracking \r\nAI test remediation \r\nTrust Center & Letter of Engagement \r\nPersonalized compliance roadmap \r\nContinuous controls monitoring\r\nDevice monitoring, security awareness training, employee onboarding/offboarding\r\nCore Pricing: \r\n<$1M ARR (or <20 headcount): $7,200\r\n$1M ARR (or >20 headcount): $9,000\r\n\r\nPlus Package: \r\nFastest path to compliance AND security foundations to build a trustworthy posture early.\r\nEverything in Essentials, plus: \r\nQuestionnaire Automation \r\n(25 per year)\r\nAccess Management\r\n\r\nPlus Pricing:\r\n<$1M ARR (or <20 headcount): $9,600\r\n$1M ARR (or >20 headcount): $12,000\r\n\r\n\r\nOptional add-ons include:\r\nAdditional frameworks: $5,000 each\r\n144 questionnaires/year: $9,000\r\nCyber insurance, powered by Vouch \r\nBackground checks, powered by Certn", "one_liner": "Vanta—the proven leader in automated compliance helping startups…", "team_size": 700, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1509678272, "tags": [ "B2B", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/vanta", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/vanta.json", "year_founded": 2018, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/vanta-security/", "x_url": "https://twitter.com/trustvanta", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/vanta", "github_url": "https://github.com/VantaInc", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0660fb546ece5e50a895e790c299dcaaeeefad32.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jared Friedman", "url": "https://www.ycombinator.com/people/jared-friedman" }, "founders": [ { "user_id": 16226, "full_name": "Christina Cacioppo", "title": "Founder/CEO", "founder_bio": ".", "is_active": true, "linkedin_url": "http://linkedin.com/in/ccacioppo", "x_url": "https://twitter.com/christinacaci", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1a2bfa978eb234d0623925edeecaf501e3660f63.jpg" } ], "jobs": [ { "id": 63705, "title": "Senior Product Designer", "url": "https://www.ycombinator.com/companies/vanta/jobs/rXM5qLJ-senior-product-designer", "location": "Remote US / Remote (US)", "type": "Full-time", "role": "Design", "role_type": "Web design", "salary_range": "$150K - $170K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 64998, "title": "Senior Software Engineer", "url": "https://www.ycombinator.com/companies/vanta/jobs/6RZQ1cg-senior-software-engineer", "location": "Remote US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$163K - $223K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Exclusive: Vanta hits $300 million ARR as ‘shadow AI’ explodes across corporate America | Fortune", "url": "https://fortune.com/2026/04/29/exclusive-vanta-arr-300-million-sequoia-shadow-ai-claude-cursor/", "date": "Apr 29, 2026" }, { "title": "Helping businesses earn and prove trust: Announcing Vanta’s $150 million Series D", "url": "https://www.vanta.com/resources/vanta-announces-series-d", "date": "Jul 23, 2025" }, { "title": "Announcing Vanta’s $150 million Series C funding", "url": "https://www.vanta.com/resources/vanta-announces-series-c", "date": "Jul 24, 2024" }, { "title": "Vanta continues to revolutionize trust management with latest AI release", "url": "https://venturebeat.com/security/vanta-continues-to-revolutionize-trust-management-with-latest-ai-release/", "date": "Oct 10, 2023" }, { "title": "How Christina Cacioppo Built Startup Vanta Into A $1.6 Billion Unicorn To Automate Complicated Security Compliance Issues", "url": "https://www.forbes.com/sites/phoebeliu/2023/06/25/how-christina-cacioppo-built-startup-vanta-into-a-16-billion-unicorn-to-automate-complicated-security-compliance-issues/", "date": "Jun 25, 2023" } ], "launches": [] }, { "id": 1793, "name": "Sqreen", "slug": "sqreen", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d891f44fe59b3c6d5bbb6ce15c0d60af544b9b8.png", "website": "https://www.sqreen.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Sqreen is the application security platform for the modern enterprise. More than 800 organizations trust Sqreen to protect, observe and test their applications, APIs and microservices. As opposed to pattern-based approaches, Sqreen analyses in-app execution in real time to deliver more robust security without compromising performance.", "one_liner": "Sqreen is the application security platform for the modern enterprise", "team_size": 120, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1510027359, "tags": [ "DevSecOps", "B2B", "Security" ], "tags_highlighted": [], "top_company": true, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/sqreen", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/sqreen.json", "year_founded": 2015, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/sqreen/", "x_url": "https://twitter.com/SqreenIO", "fb_url": "https://www.facebook.com/SqreenIO/", "cb_url": "https://www.crunchbase.com/organization/sqreen", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d891f44fe59b3c6d5bbb6ce15c0d60af544b9b8.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/721571cf15116af13ac57a9703c7ef084c33cf75.png" ], "primary_partner": null, "founders": [ { "user_id": 207041, "full_name": "Pierre Betouin", "title": "Founder/CEO", "founder_bio": "Pierre was leading security products at Datadog following the acquisition of Sqreen (W18) - a cybersecurity company providing a comprehensive security monitoring for cloud and web apps protecting over 800 customers in production.\n\nPierre previously spent 9 years at Apple, where he led the team in charge of security assessments for the Internet Services department, hacking products and designing protection.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/pbetouin/", "x_url": "https://twitter.com/pbetouin", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d773913accb3577e364f48d8247e9689aceedade.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1821, "name": "Hunter2", "slug": "hunter2", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "https://hunter2.com", "all_locations": "Boston, MA, USA", "long_description": "Hunter2 teaches modern appsec to engineering teams through interactive labs. Developers get hands-on practice exploiting and patching real web apps written in their tech stack.", "one_liner": "Hunter2 trains engineering teams in application security through…", "team_size": 0, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1510124608, "tags": [ "Developer Tools", "Education", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/hunter2", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/hunter2.json", "year_founded": null, "city": "Boston", "country": "US", "linkedin_url": null, "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/hunter2", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 107898, "full_name": "Fletcher Heisler", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/fheisler/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/993e7f5175fc5b5e7299636ccc7a7ab0417be0dc.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1863, "name": "Anjuna", "slug": "anjuna", "former_names": [ "Anjuna Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b5b0d847ce1f2270b7fa71e371516e2163c704ac.png", "website": "https://www.anjuna.io", "all_locations": "San Francisco, CA, USA; Palo Alto, CA, USA", "long_description": "Anjuna makes hardware-grade application and data protection simple, fast and enterprise-ready. Anjuna software enables IT to “lift and shift” applications and data into the hardware-encrypted confines of a secure enclave, protecting them from malicious software, insiders, and bad actors. Available from every major chip, cloud, and system vendor, secure enclaves are the data security gold standard. Unlike point memory-only enclave solutions that require expensive and complicated software rewrites, Anjuna enables enterprises to achieve managed enterprise-class enclave protection that span memory, storage, networks, and clouds in minutes--without recoding. Anjuna is based in Palo Alto, California.", "one_liner": "Anjuna enabled organizations to trust any infrastructure", "team_size": 55, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1512586952, "tags": [ "Cloud Workload Protection", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/anjuna", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/anjuna.json", "year_founded": 2018, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/anjuna-security/", "x_url": "https://twitter.com/anjuna_security", "fb_url": "https://www.facebook.com/anjuna.io/", "cb_url": "https://www.crunchbase.com/organization/anjuna", "github_url": "https://github.com/anjuna-security", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b5b0d847ce1f2270b7fa71e371516e2163c704ac.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 221739, "full_name": "Ayal Yogev", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ayalyogev/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/34b627117dd8b637b7f3428a2ec220baa3b79e9c.jpg" } ], "jobs": [], "news": [ { "title": "Why Israel's Ministry of Defense is moving to the public cloud | ZDNet", "url": "https://www.zdnet.com/article/why-israels-ministry-of-defense-is-moving-to-the-public-cloud/", "date": "Mar 23, 2022" } ], "launches": [] }, { "id": 11962, "name": "Dyneti Technologies", "slug": "dyneti-technologies", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5968cca6e04e884fd577a2dfa8625bff7bd3a262.png", "website": "http://www.dyneti.com", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "Reduce payment fraud", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1541124184, "tags": [ "Payments", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/dyneti-technologies", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2019/dyneti-technologies.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/dyneti-technologies", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5968cca6e04e884fd577a2dfa8625bff7bd3a262.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 270646, "full_name": "Julia Zheng", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/julia-zheng-30073529/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a220b1c42299b6fd994c43d9df7dbc940c38e7ee.jpg" } ], "jobs": [ { "id": 80506, "title": "Marketing Intern", "url": "https://www.ycombinator.com/companies/dyneti-technologies/jobs/YFHVUaK-marketing-intern", "location": "San Mateo, CA, US", "type": "Internship", "role": "Marketing", "role_type": null, "salary_range": "$5K - $8.25K / monthly", "equity_range": "", "experience": null, "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [] }, { "id": 12039, "name": "Termius", "slug": "termius", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f2ba51393107c60fc73e0c01a4165e444e0e8755.png", "website": "https://termius.com", "all_locations": "Auckland, New Zealand", "long_description": "Termius is an SSH client that works on desktop and mobile. It syncs and shares data via a secure vault in the cloud, like a password manager. With Termius, engineering and DevOps teams can share the list of servers that can be organized in groups and tagged for faster search. Termius also has built-in Terminal and Snippet Sharing. Terminal Sharing enables getting instant help from colleagues via providing a unique link instantly, and snippets are frequently-used shell commands that allow teammates to learn from each other easily.", "one_liner": "Termius is an SSH client with team collaboration features", "team_size": 35, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1541561695, "tags": [ "Developer Tools", "DevSecOps", "IoT Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "New Zealand", "Oceania", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/termius", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2019/termius.json", "year_founded": 2018, "city": null, "country": "NZ", "linkedin_url": "", "x_url": "https://twitter.com/TermiusHQ", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/termius", "github_url": "https://github.com/termius", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f2ba51393107c60fc73e0c01a4165e444e0e8755.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 268930, "full_name": "Roman Kudiyarov", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/roman-kudiyarov-0980346/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/40c58de9624022c4638dd1c742479f6f07dd412d.jpg" }, { "user_id": 281002, "full_name": "Dmitry Lyfar", "title": "Founder", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/dmitrylyfar/", "x_url": "https://twitter.com/dmitrylyfar?lang=en", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/950955664cf8217db3afe2c6c67df0478d38a3c2.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 12265, "name": "Sublime Black", "slug": "sublime-black", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a864736635415469c6ff1a5b71a52b880d8e38c1.png", "website": "http://sublimeblack.com", "all_locations": "", "long_description": "", "one_liner": "Automating Cyber Security Incident Response Through Artificial…", "team_size": 0, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1543988091, "tags": [ "Cybersecurity", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2019", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "Unspecified" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/sublime-black", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2019/sublime-black.json", "year_founded": null, "city": null, "country": null, "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a864736635415469c6ff1a5b71a52b880d8e38c1.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 257943, "full_name": "Kembey Gbarayor", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/kembeyg", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/569f9561d17540269368324fc3a8a158e9f01728.jpg" }, { "user_id": 285825, "full_name": "Charles Whitby, CISSP, PCIP, CRISC, CISM", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/charles-whitby-cism-crisc-cissp-91819b55/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e825cb228e94c6acb9fb5b9d4f477057ca7eaf46.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 12608, "name": "TRM Labs", "slug": "trm-labs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/19aa5130e3a0a349d200e7510f0c2fe8439a646f.png", "website": "https://trmlabs.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "TRM is on a mission to build a safer world for billions of people. \r\n\r\nAI is extending the capability gap between attackers and defenders. The fundamental unit of scale has shifted from humans to AI tokens. \r\n\r\nTRM combines proprietary data, with an AI investigations platform to build a system of action for crime fighters. Think Claude CoWork for mission critical investigations. \r\n\r\nWe believe AI scale crime deserves AI scale defense. \r\n\r\nJoin our mission ➔ www.trmlabs.com/careers", "one_liner": "TRM is building a safer world for billions of people.", "team_size": 400, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1556572947, "tags": [ "Fintech", "Machine Learning", "GovTech", "Cybersecurity", "Data Engineering" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/trm-labs", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2019/trm-labs.json", "year_founded": 2018, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/trmlabs/", "x_url": "https://twitter.com/trmlabs", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/trm-labs", "github_url": "https://github.com/trmlabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/19aa5130e3a0a349d200e7510f0c2fe8439a646f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 182800, "full_name": "Esteban Castaño", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ecastano/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f30ed5d0c98a481c2748ef4df723efad5018bc7b.jpg" }, { "user_id": 253026, "full_name": "Rahul Raina", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/rahulr0609/", "x_url": "https://twitter.com/rahulr0609", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9759364f37d0fa64a091b6496b181d7ae6a3a814.jpg" } ], "jobs": [ { "id": 76585, "title": "New Product Lead", "url": "https://www.ycombinator.com/companies/trm-labs/jobs/Bt9p7XS-new-product-lead", "location": "US / Remote (US)", "type": "Full-time", "role": "Product", "role_type": null, "salary_range": "$175K - $200K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "TRM Labs’ Financial-Service Backers Come Back For More In $70 Million Series B Expansion", "url": "https://www.forbes.com/sites/mitchellmartin/2022/11/09/trm-labs-financial-service-backers-come-back-for-more-in-70-million-series-b-expansion/", "date": "Nov 16, 2022" }, { "title": "JPMorgan Chase Strategically Invests in Blockchain-focused TRM Labs", "url": "https://blockworks.co/jpmorgan-chase-strategically-invests-in-blockchain-focused-trm-labs/", "date": "Mar 03, 2022" }, { "title": "TRM Labs Raises $60M as Visa, Amex Play Catch-Up on Crypto Tracking", "url": "https://www.coindesk.com/business/2021/12/07/trm-labs-raises-60m-as-visa-amex-play-catchup-on-crypto-tracking/", "date": "Dec 07, 2021" }, { "title": "TRM Labs Raises $14M as Crypto Tracking Steps Into Spotlight - CoinDesk", "url": "https://www.coindesk.com/trm-labs-raises-14m-as-crypto-tracking-steps-into-spotlight", "date": "Jun 17, 2021" } ], "launches": [] }, { "id": 12615, "name": "LunaSec", "slug": "lunasec", "former_names": [ "Refinery Labs" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/acc3150187be7fce01784994ec62525354b915cd.png", "website": "https://www.lunasec.io", "all_locations": "Seattle, WA, USA; Remote", "long_description": "LunaSec is dead, fyi. Please email me personally to get in touch!\r\n\r\n-----\r\n\r\nLunaTrace isn't just another security scanner that blasts you with vulnerabilities. LunaSec has developed a hosted Open Source dependency security tool that is smarter, faster, and quieter than any other. It's backed by a team of security experts who monitor the latest attacks, write remediation guides, and help you patch in hours instead of weeks.\r\n\r\nIn under 2 minutes, for free, you can generate your own vulnerability report to gain insight into the security + compliance of your software by clicking here: https://lunatrace.lunasec.io/\r\n\r\nEmail us at: contact@lunasec.io\r\nOur GitHub: https://github.com/lunasec-io/lunasec", "one_liner": "An Open Source dependency security tool that is smarter than the rest", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1556642382, "tags": [ "Developer Tools", "DevSecOps", "Security Orchestration, Automation and Response (SOAR)", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2019", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/lunasec", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2019/lunasec.json", "year_founded": 2019, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/74743886", "x_url": "https://twitter.com/LunaSecIO", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/lunasec", "github_url": "https://github.com/lunasec-io", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/acc3150187be7fce01784994ec62525354b915cd.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 348018, "full_name": "Free Wortley", "title": "Founder/CEO", "founder_bio": "Background as a Security Engineer with a specific focus on AI Security and AppSec (code and infrastructure security).\n\nFeel free to shoot me an email if you need any security advise. I always love to help other founders figure that stuff out!", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/freewortley/", "x_url": "https://twitter.com/freeqaz", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fa284e485c7d571a86bd9e96d2e0a00ea4b72eea.jpg" }, { "user_id": 325453, "full_name": "Matthew Bryant", "title": "Founder", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/matthew-bryant-a9403289/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3429b946bb099039812d40fc97b84d8cbe41811c.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 12642, "name": "Canix", "slug": "canix", "former_names": [ "Entrc" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/307944ea6b0927bae195cd145f3959c47e943c9c.png", "website": "https://www.canix.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Canix is building the first generation of modern software for the burgeoning cannabis industry. We help our customers overcome daunting compliance regulation, sell more product, and optimize their day to day operations—from cultivation, to processing, to distribution.\r\n\r\nRecent winner of TechCrunch Disrupt 2020, find out more at TechCrunch and canix.com.", "one_liner": "Canix makes it easy to get and stay compliant as a cannabis business.", "team_size": 22, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1556761305, "tags": [ "SaaS", "Cannabis" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/canix", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2019/canix.json", "year_founded": 2018, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/entrc", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/307944ea6b0927bae195cd145f3959c47e943c9c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 243842, "full_name": "Stacey Hronowski", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/stacey-hronowski-3893a43a/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4ab30c0ad85d55f45229d96838a32cbf6698208a.jpg" } ], "jobs": [ { "id": 77064, "title": "Senior Implementation Specialist - Canix", "url": "https://www.ycombinator.com/companies/canix/jobs/ASsCyRh-senior-implementation-specialist-canix", "location": "San Francisco, CA, US / Remote (US)", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$95K - $105K", "equity_range": "0.05% - 0.10%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Canix raises $10M to expand its cannabis seed-to-sale platform across the US and Canada – TechCrunch", "url": "https://techcrunch.com/2022/06/07/canix-raises-10m-to-expand-its-cannabis-seed-to-sale-platform-across-the-u-s-and-canada/", "date": "Jun 07, 2022" } ], "launches": [] }, { "id": 12846, "name": "Traces", "slug": "traces", "former_names": [ "EllipseAI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/95c9d28f031050f88288e5b80195b4ca69c2dd41.png", "website": "https://www.traces.ai", "all_locations": "San Francisco, CA, USA; Mountain View, CA, USA", "long_description": "We analyze thousands of video streams to find and track people without facial recognition. \r\nOur tech is available as an API and has multiple use cases. Unique people counting, forensic people search, falsa alarm filtering and many more. \r\n", "one_liner": "Transform your video monitoring with AI", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1559260859, "tags": [ "Deep Learning", "Computer Vision", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/traces", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2019/traces.json", "year_founded": 2019, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/95c9d28f031050f88288e5b80195b4ca69c2dd41.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 334055, "full_name": "Kostyantyn Shysh", "title": "Founder", "founder_bio": "Co-founder & CEO of Traces AI (YC S19), Founder of Unmorph", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/kostyantyn-shysh-a8ab4a77/", "x_url": "https://x.com/constant_shysh", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b6384ac3531b6a897d520cb1b6a1fd0750b6a194.jpg" }, { "user_id": 304547, "full_name": "Veronika Yurchuk", "title": "Founder", "founder_bio": "CTO and co-founder at Traces AI", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/veronikayurchukdatascience/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fbe8192d9747b0e34beb136a96a5150466fe8e35.jpg" } ], "jobs": [], "news": [ { "title": "This Startup Is Using AI To Trace COVID-19 Patient Contacts At Risk", "url": "https://www.forbes.com/sites/amyguttman/2020/03/31/this-startup-is-using-ai-to-trace-covid-19-patient-contacts-at-risk/?sh=20013a6344ab", "date": "Mar 30, 2020" }, { "title": "Traces AI is building a less invasive alternative to facial recognition tracking | TechCrunch", "url": "https://techcrunch.com/2019/08/15/traces-ai-is-building-a-less-invasive-alternative-to-facial-recognition-tracking/?guccounter=1", "date": "Aug 15, 2019" } ], "launches": [] }, { "id": 13053, "name": "Datree", "slug": "datree", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6fc4eed9550a66ab0a862b8bee8e561d3be5134a.png", "website": "https://datree.io", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Prevent Kubernetes misconfigurations from reaching production with Datree’s automated policy checks for your pipeline. \r\n\r\nThe open-source CLI tool empowers engineers to write more stable and secure configurations, and further supports them in their roles so they can actually sleep at night. \r\n\r\nBy revealing misconfigurations in seconds and combating the issues in early stages of the pipeline, your organization can enforce its standards and secure its infrastructure from development to production. ", "one_liner": "Datree prevents Kubernetes misconfigurations from reaching production", "team_size": 16, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1583804740, "tags": [ "Developer Tools", "B2B" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2020", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "Israel", "Middle East and North Africa", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/datree", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2020/datree.json", "year_founded": null, "city": "Tel Aviv-Yafo", "country": "IL", "linkedin_url": "https://www.linkedin.com/company/datreeio", "x_url": "https://twitter.com/datreeio", "fb_url": "https://www.facebook.com/datreeio/", "cb_url": "https://www.crunchbase.com/organization/datree-io", "github_url": "https://github.com/datreeio", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/6fc4eed9550a66ab0a862b8bee8e561d3be5134a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 295175, "full_name": "Shimon Tolts", "title": "Founder", "founder_bio": "CNCF Ambassador, AWS Hero, Co-Founder of Datree. ex-ironSource GM of Platform Engineering", "is_active": false, "linkedin_url": "https://linkedin.com/in/tolts", "x_url": "https://twitter.com/shimontolts", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/5d9a16ca799df60fb86e1e4115f00191dd69d89e.jpg" }, { "user_id": 401866, "full_name": "Eyar (Epic) Zilberman", "title": "Founder", "founder_bio": "In law school, I researched open-source licensing, fell in love with the technology and became active in the development community. Through open-source, I have grown into the professional I am today, leading my startup. The purpose of Datree is to equip developers with the tools they need to succeed. I intend to remain developer-focused, and to continue giving back to the community that gave me so much back when I began my journey.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/eyar-zilberman/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/70880acc6f9c1299e96434359af6c4ebf5524eed.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 13311, "name": "Riot", "slug": "riot", "former_names": [ "Riot Security Inc.", "Riot Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/36131ce5d03d467ffcb131f3d5407fb52c9be6d9.png", "website": "https://tryriot.com/", "all_locations": "Paris, Île-de-France, France", "long_description": "Riot is a SaaS platform to easily set up a cybersecurity awareness program for teams. We're making tools to protect your employees, and therefore protecting your company.", "one_liner": "Cybersecurity awareness for fast growing companies", "team_size": 160, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1584494110, "tags": [ "SaaS", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/riot", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2020/riot.json", "year_founded": 2020, "city": "Paris", "country": "FR", "linkedin_url": "https://www.linkedin.com/company/tryriot", "x_url": "https://twitter.com/tryriotdotcom", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/36131ce5d03d467ffcb131f3d5407fb52c9be6d9.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 413626, "full_name": "Benjamin Netter", "title": "Founder", "founder_bio": "Highly curious coder, I've been creating products for the past 15 years.\n\n1. At 19, I created a Facebook app that grew from 0 to 500,000 users in a week. That's how my first web server died.\n2. At 20, I won Foursquare Global Hackathon, creating an automatic trip planner.\n3. At 25, I co-founded October, financing European SMBs online. Now 110 employees, 5 offices, raised $60m.\n4. At 30, I founded Riot, a cybersecurity training SaaS. Protecting your company by protecting your employees.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/b-netter/", "x_url": "https://twitter.com/benjaminnetter", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/37e15fe908afb26d24ed4e8a9699eb170046c94b.jpg" } ], "jobs": [ { "id": 51330, "title": "Software Engineer", "url": "https://www.ycombinator.com/companies/riot/jobs/SNOYobE-software-engineer", "location": "Paris", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$45K - $100K", "equity_range": "0.10% - 1.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [ "Elixir", "Node.js", "TypeScript", "SQL" ] }, { "id": 59605, "title": "Account executive", "url": "https://www.ycombinator.com/companies/riot/jobs/Wvs7kgW-account-executive", "location": "Paris, IDF, FR", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$40K - $80K", "equity_range": "0.10% - 0.20%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 95169, "title": "Head of US", "url": "https://www.ycombinator.com/companies/riot/jobs/YLl7jQn-head-of-us", "location": "New-York", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Riot raises $30 million for its cybersecurity product suite focused on employees | TechCrunch", "url": "https://techcrunch.com/2025/02/03/riot-raises-30-million-for-its-cybersecurity-product-suite-focused-on-employees/", "date": "Feb 03, 2025" }, { "title": "Riot prepares your team against highly sophisticated cyberattacks • TechCrunch", "url": "https://techcrunch.com/2023/02/07/riot-prepares-your-team-against-highly-sophisticated-cyberattacks/", "date": "Feb 07, 2023" } ], "launches": [] }, { "id": 13322, "name": "Skypher", "slug": "skypher", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/31ab5dbe8214dbe61ef6043964f8ca4f554e778b.png", "website": "https://skypher.co", "all_locations": "New York City, NY, USA", "long_description": "Skypher is an AI agent platform that automates your security/privacy/ddq/esg compliance questionnaires response process making it 10x faster. We save dozens of hours for @Deel, @Retool or Adobe's engineering, sales, customer success, and security leaders on security questionnaires and speed up their sales cycle by 20%. \r\n\r\nSkypher was launched in 2019 in San Francisco and is now the market leader in security questionnaires response automation with 200+ global customers worldwide across North America, Europe and India. We work with Fortune 500 companies such as Adobe, McKinsey & Company, TeamViewer or CMA CGM as well as fast growing tech companies like Deel, TCN or Retool. With a team of over 30 people across Europe and North America with global offices in New York and Paris.\r\n", "one_liner": "AI agent for Compliance Questionnaires Automation", "team_size": 12, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1583971113, "tags": [ "Generative AI", "Compliance", "Cybersecurity", "AI", "AI Assistant" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/skypher", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2020/skypher.json", "year_founded": 2019, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/26261406/admin/", "x_url": "https://twitter.com/Skypher_HQ", "fb_url": "https://www.facebook.com/SkypherHQ", "cb_url": "https://www.crunchbase.com/organization/skypher", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/31ab5dbe8214dbe61ef6043964f8ca4f554e778b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 332908, "full_name": "Louis Mutricy", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/louis-mutricy-372a1a11b/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c6b7a0cbaf3a3010c1cc6dd9d74149d41c50b93e.jpg" }, { "user_id": 328119, "full_name": "Gaspard de Lacroix", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gaspard-de-lacroix-vaubois-21a580112/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0f7d2e479e513391089ac8cabfc2e646422a8226.jpg" } ], "jobs": [ { "id": 32961, "title": "Full Stack Developer", "url": "https://www.ycombinator.com/companies/skypher/jobs/ZFOZRt9VS-full-stack-developer", "location": "Paris / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$60K - $80K", "equity_range": "0.25% - 2.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [ "JavaScript", "React" ] } ], "news": [], "launches": [] }, { "id": 21770, "name": "SuperTokens", "slug": "supertokens", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4353b29adbf3c289fd3165964d86888720519f1b.png", "website": "https://supertokens.com", "all_locations": "San Francisco, CA, USA", "long_description": "SuperTokens is building open source authentication (as an alternative to Auth0, Firebase and AWS Cognito). Add secure, hassle free authentication to your app in 1 day. We enable startups to launch quicker and focus on their core product offering\r\n\r\n1. We're easier to implement as we take a modular approach - making it possible to pick only the features you need for your use case. This means you need not worry about complications associated with other features (eg: SSO and OAuth if you don’t need it) and this in turn makes it easier to implement and manage SuperTokens.\r\n2. Developer's can own and manage their user's data. \r\n3. SuperTokens can be run on your premise for free and also has a generous hosted tier for those who dont want to manage it themselves.\r\n\r\nSuperTokens is being used by hundreds of developers across the globe.", "one_liner": "Open source alternative to Auth0 / AWS Cognito / Firebase Auth", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1599762607, "tags": [ "Developer Tools", "SaaS", "B2B", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/supertokens", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/supertokens.json", "year_founded": 2019, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/supertokens/", "x_url": "https://twitter.com/supertokensio", "fb_url": null, "cb_url": null, "github_url": "https://github.com/supertokens", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4353b29adbf3c289fd3165964d86888720519f1b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 158737, "full_name": "Advait Ruia", "title": "Founder", "founder_bio": "I am a cofounder at SuperTokens (a service to securely manage web user sessions). My background includes:\n\n- Venture Capital experience at $450M consumer tech fund\n\n- Head of $1.6 million (USD) crowdfunding campaign for BLOCKS smartwatch on Kickstarter\n\n- A BEng in Mechanical Engineering from Imperial College London\n\nI have a strong technical background in engineering and a broad set of leadership and teamwork skills that are demonstrated by my various roles and responsibilities. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/advait-ruia-2aa52a85/", "x_url": "https://twitter.com/Advait_Ruia", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3c6eaba4a85b9d561c3279f3cf7775eac22d23ae.jpg" } ], "jobs": [ { "id": 70936, "title": "Solutions Engineer", "url": "https://www.ycombinator.com/companies/supertokens/jobs/eEVdU9u-solutions-engineer", "location": "US / CA / Remote (US; CA)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$90K - $160K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "JavaScript", "Python" ] } ], "news": [], "launches": [] }, { "id": 21885, "name": "Swif.ai", "slug": "swif-ai", "former_names": [ "BlaBla EdTech", "BlaBla Live", "Swifteam", "Inc.", "Swifteam", "Swif" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f00f6931229f64701cd737b9839f92f72e20005.png", "website": "https://www.swif.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Swif.ai is the Unified Agent & Endpoint Management (UAEM)\r\n\r\nManage every device. Govern every AI agent.\r\n\r\nOne control plane for device management, AI-agent governance, continuous enforcement, and autonomous remediation.", "one_liner": "Manage every device. Govern every AI agent.", "team_size": 20, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597360094, "tags": [ "SaaS", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": [ { "question": "How did your company get started? (i.e., How did the founders meet? How did you come up with the idea? How did you decide to be a founder?)", "answer": "We have 10 people on the team. I was the co-founder of LeadIQ, the leading sales intelligence platform. I managed a fast-growing team of 50 remote employees and onboarded everyone while creating a platform that handled millions of dollars every year. Mert is the CTO and he has over 10 years of experience building device security. Mert and I have both experienced issues of device security and Mert has been building a similar solution for the past 5 years. Jeremy is our sales. He was a former YC founder and recently joined us to drive our sales. He used to host virtual YC demo days." }, { "question": "How did you decide to apply to Y Combinator? What was your experience applying, going through the batch, and fundraising at demo day?", "answer": "Our batch mentor guided us on product iteration and helped us with pitch practices. We genuinely appreciate Tim, Aaron, and Kevin’s mentorship to help us grow!" }, { "question": "How have you kept in touch with the YC community and continued to use YC resources & programs since the batch ended?", "answer": "We worked with many YC companies to help with their device management and compliance needs. We also launched our own YC deal to help new YC batch companies can quickly ramp up their remote device management." }, { "question": "What's the history of your company from getting started until the present day? What were the big inflection points?", "answer": "In 2022, we discovered the power of ChatGPT and realized that we can leverage its platform to simplify device management and remote employee management. This was the pivot point of our product." }, { "question": "What is the core problem you are solving? Why is this a big problem? What made you decide to work on it?", "answer": "Swif is revolutionizing device security with AI, 
we are the first to eliminate the Shadow IT problem—empowering businesses with complete control, visibility, and security." }, { "question": "What is your long-term vision? If you truly succeed, what will be different about the world?", "answer": "Revolutionizing device security with AI, we are the first to eliminate the Shadow IT problem—empowering businesses with complete control, visibility, and security." } ], "url": "https://www.ycombinator.com/companies/swif-ai", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/swif-ai.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://linkedin.com/company/swifai", "x_url": "https://twitter.com/swif_ai", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f00f6931229f64701cd737b9839f92f72e20005.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/3839e1d62757afb3dd90cb7cf0063aa8fa3b4023.png" ], "primary_partner": null, "founders": [ { "user_id": 28055, "full_name": "Angelo (KC) Huang", "title": "Founder", "founder_bio": "Swif.ai is the Security & Compliance UEM.\n\nEvery other MDM is great if you have basic requirements, but if you have security concerns and real compliance requirements, you need something more sophisticated that can handle that.\n\nSwif UEM for when you have real security and compliance concerns.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/angelokh", "x_url": "https://twitter.com/angeloh", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ec27dd6866a09d79b48f7388daef8f230c28296f.jpg" } ], "jobs": [ { "id": 45031, "title": "Backend Developer (Scala/Java)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/VoDI7UY-backend-developer-scala-java", "location": "Taiwan / United States / Canada / Singapore / VN / ID / Remote (Taiwan; United States; Canada; Singapore; VN; ID)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$40K - $70K", "equity_range": "0.10% - 1.00%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Java", "MongoDB", "Python", "Redis", "Scala", "Docker" ] }, { "id": 49868, "title": "DevOps Engineer", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/094hpfh-devops-engineer", "location": "Taiwan / VN / ID / TR / Remote (Taiwan; VN; ID; TR)", "type": "Contract", "role": "Engineering", "role_type": "Devops", "salary_range": "$30K - $50K", "equity_range": "0.10% - 0.50%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "Git", "Google Cloud", "Kubernetes", "Docker" ] }, { "id": 50579, "title": "Frontend Engineer (Vue, Browser Extensions, AI Agent)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/aDnRu3L-frontend-engineer-vue-browser-extensions-ai-agent", "location": "TW / CA / VN / JP / KR / ID / Remote (TW; CA; VN; JP; KR; ID)", "type": "Full-time", "role": "Engineering", "role_type": "Frontend", "salary_range": "$40K - $60K", "equity_range": "0.10% - 0.50%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [ "CSS", "HTML", "JavaScript", "React", "Vue.js" ] }, { "id": 53124, "title": "Backend Engineer (Golang)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/bAPaF28-backend-engineer-golang", "location": "TW / US / CA / SG / ID / VN / MY / TR / Remote (TW; US; CA; SG; ID; VN; MY; TR)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$40K - $70K", "equity_range": "0.10% - 0.25%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Go", "Distributed Systems" ] }, { "id": 55001, "title": "Software Testing Engineer (QA)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/rm6wwJu-software-testing-engineer-qa", "location": "TW / VN / Remote (TW; VN)", "type": "Full-time", "role": "Engineering", "role_type": "QA engineer", "salary_range": "$30K - $50K", "equity_range": "0.10% - 0.50%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [ "GraphQL", "Linux", "Windows", "MacOS" ] }, { "id": 55966, "title": "Full-Cycle Sales AE", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/9H1KM0B-full-cycle-sales-ae", "location": "Sunnyvale, CA, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$30K - $60K", "equity_range": "0.50% - 1.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 61955, "title": "Sales Intern [Summer 2026]", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/iz7AKOn-sales-intern-summer-2026", "location": "US / Remote (US)", "type": "Internship", "role": "Sales", "role_type": null, "salary_range": "$300 - $1K", "equity_range": "0.01%", "experience": null, "visa": "US citizen/visa only", "skills": [] }, { "id": 62132, "title": "Full Stack Software Engineer Intern [Summer 2026]", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/dcyipuS-full-stack-software-engineer-intern-summer-2026", "location": "US / TW / Remote (US; TW)", "type": "Internship", "role": "Operations", "role_type": null, "salary_range": "$500 - $2K / monthly", "equity_range": "0.01%", "experience": null, "visa": "US citizen/visa only", "skills": [ "Linux", "Windows", "MacOS" ] }, { "id": 77904, "title": "Sales Development Representative (SDR)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/lbbQXJj-sales-development-representative-sdr", "location": "US / CA / Remote (US; CA)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$40K - $80K", "equity_range": "0.01%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "What's New: TrustClaw Consumer Onboarding", "url": "https://feedback.swif.ai/changelog/whats-new-trustclaw-consumer-onboarding", "date": "Jun 23, 2026" }, { "title": "TrustClaw Enterprise Onboarding", "url": "https://feedback.swif.ai/changelog/trustclaw-enterprise-onboarding", "date": "Jun 23, 2026" }, { "title": "Founder Note: Swif.ai Statement on Stryker's Microsoft Intune MDM Attacks Wiping 200,000 devices", "url": "https://news.swif.ai/p/founder-note-swif-statement-on-the-stryker-intune-attacks-wiping-200-000-devices", "date": "Mar 22, 2026" }, { "title": "Swif.ai Is Now Live in the EU 🇪🇺 — EU Data Residency Is Here", "url": "https://news.swif.ai/p/swif-ai-is-now-live-in-the-eu-eu-data-residency-is-here", "date": "Mar 16, 2026" }, { "title": "The Stryker Wipe: What 200,000 Lost Devices Teach Us About MDM Blast Radius Protection | Swif", "url": "https://www.swif.ai/blog/stryker-wipe-lessons-about-mdm-blast-radius-protection", "date": "Mar 13, 2026" } ], "launches": [ { "id": 84069, "title": "Swif: Solve Shadow IT with our Chrome extension", "tagline": "Gain full control over Shadow IT—track, secure, and manage unauthorized apps with ease using Swif's Chrome Extension.", "body": "![uploaded image](/media/?type=post&id=84069&key=user_uploads/28055/554bc23e-0c52-44e5-b8e5-d956361fc467)\n\nHey, YC community! We’re the team at [Swif](https://www.swif.ai?utm_source=yclaunch), and we're excited to introduce our **Swif Chrome Extension**, designed to solve the growing issue of Shadow IT in organizations. As businesses scale, it's easy for employees to start using unauthorized SaaS apps, creating security and compliance risks that IT teams struggle to monitor.\n\n**What’s the problem?** Shadow IT refers to apps and services used by employees without IT’s knowledge or approval. This often leads to unmonitored data access, increasing the risk of breaches, non-compliance, and lost productivity. Even well-managed IT teams find it hard to track all software being used across departments.\n\n**How does Swif’s Chrome Extension fix this?** Our Chrome Extension helps you automatically identify and monitor employee access to unauthorized SaaS apps. With **real-time visibility**, Swif detects email and password sign-ups to unapproved apps, enabling IT teams to track usage, ensure compliance, and take action quickly—before a security risk escalates. The extension fits seamlessly into your existing IT workflow, providing a single dashboard for comprehensive oversight.\n\nSwif’s strength lies in its automation. Instead of manually hunting down unapproved apps, our extension monitors usage, generates compliance reports, and offers automated solutions for securing access. This gives you control without adding complexity, saving both time and resources.\n\n![uploaded image](/media/?type=post&id=84069&key=user_uploads/28055/13b44543-ebbc-4d61-ad14-5dd5150a1dd1)\n\n**Why did we build it?** The idea came from our experience working with companies overwhelmed by Shadow IT problems. We saw firsthand how much of a challenge it is to maintain visibility over what employees are using, especially in remote and hybrid work environments. Our mission was to create a tool that does the heavy lifting for IT departments, making it easier to manage without sacrificing security or efficiency.\n\n**What’s next?** We’re excited to offer early access to the Swif Chrome Extension! If you’re managing a fleet of devices or overseeing IT security, sign up to be among the first to try our solution and take control of Shadow IT.\n\n**Call to Action**: Ready to tackle Shadow IT? [Create a Swif account](https://app.swif.ai/chromeextension?utm_source=yclaunch), download the extension, and start managing your apps with ease!", "url": "https://www.ycombinator.com/launches/Lrx-swif-solve-shadow-it-with-our-chrome-extension", "votes": 6, "created_at": "2024-09-17T02:14:17.061Z" }, { "id": 70930, "title": "Swif.ai - Compliance-First Device Security", "tagline": "The YC's Get Start Package for MDM & Compliance Automation", "body": "### **⛔️The problem**\n\n1. Fragmented device management across multiple operating systems and locations.\n2. Time-consuming manual compliance checks and reporting for various regulatory standards.\n3. Inefficient onboarding and offboarding processes for remote and global teams.\n4. Lack of visibility into shadow IT and unauthorized SaaS application usage.\n\n### **🚀The solution**\n\n[Swif.ai](http://Swif.ai) offers a comprehensive solution for device security, compliance management, and IT administration across Linux, Windows, and macOS. It automates patch management for various compliance frameworks, provides real-time compliance status reports, and enables remote device control. Swif's all-in-one platform integrates with HR systems, simplifying employee onboarding and offboarding processes while offering cost-effective access management compared to traditional SSO solutions.\n\n**Customer Benefits**\n\n1. Unified visibility and control over all organizational devices, regardless of operating system or location.\n2. Significant time savings through automated compliance readiness checks and real-time reporting.\n3. Enhanced security posture with the ability to instantly lock or wipe compromised devices remotely.\n4. Reduced IT overhead by consolidating device management, access control, and compliance tools into a single platform.\n\n### **🛠️How it works**\n\nThe setup is extremely easy. Here is 1 min get started video.\n\n![uploaded image](/media/?type=post&id=70930&key=user_uploads/28055/12d9aeea-cdbe-4734-a6d9-441a31135956)\n\n### **✅Our asks**\n\n* Check out our [**website**](https://www.swif.ai) – play around with our **interactive demo**\n* [**Sign up**](https://app.swif.ai/) and use Swif — it’s free.\n* [**Reach out**](https://www.swif.ai/) if you’re interested in a live demo", "url": "https://www.ycombinator.com/launches/IS2-swif-ai-compliance-first-device-security", "votes": 17, "created_at": "2023-04-13T00:24:25.556Z" }, { "id": 66625, "title": "Swif - One-stop device management and security", "tagline": "Order, equip, manage your devices for your distributed teams", "body": "Hello, everyone! This is [Angelo](https://www.linkedin.com/in/angelokh/) here to introduce [Swif](https://www.swif.ai?utm_source=yc&utm_medium=launch&utm_campaign=yc_launch)!\n\n❌ **The Problem**\n\nIn my last startup LeadIQ, I managed 2 remote teams in the US and Singapore. It was really painful to manage devices and cloud app access for employees in different locations. We wanted a better understanding of company devices and employee’s cloud app access, and we used a giant Excel sheet to solve this problem, only to find that the solution can not scale. We took time to find solutions to set up, configure, and then discover that the capabilities of each solution were incomplete or buggy. Companies were wasting money and time. The challenges were real, painful and increased company risks. Employee onboarding and offboarding were a nightmare.\n\n✨ **Our Solution**\n\nSwif helps distributed teams manage their devices, purchase new ones, and retrieve them when employees leave the company. \n\n![uploaded image](/media/?type=post&id=66625&key=user_uploads/28055/4b87f21a-cf0d-4381-b7ba-286c4c293b40)\n\nWhy do we need a new solution for device management?\n\nYou might work in California but have team members distributed in Texas, New York, Paris, and Singapore. Things like these might occur to you:\n\n1. Sending, retrieving, and storing devices for remote teams is painful. \n2. Losing data for security risks could keep you up at night.\n3. Employee data is across multiple platforms, eg. Gusto and Deel, and have no audit trails of who owns which devices.\n\n👉 **Next steps**\n\n1. Sign up for [Swif](https://www.swif.ai?utm_source=yc&utm_medium=launch&utm_campaign=yc_launch) and subscribe with promo code ‘ycdeal’ to enjoy one-year free premium features.\n2. Import your employees from your HRIS. We currently support 30 HRIS connections!\n3. Follow the Quick Start to set up your system to enroll devices and link us to your Apple business manager.\n\nWant to start taking control of your remote fleet? \n\nVisit us at or reach out to us at [support@swif.ai](https://mailto:support@swif.ai).", "url": "https://www.ycombinator.com/launches/HKb-swif-one-stop-device-management-and-security", "votes": 32, "created_at": "2022-10-11T17:09:59.715Z" } ] }, { "id": 21917, "name": "Vectrix", "slug": "vectrix", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9315542ed06d8a722e5739c5365aceb689b1d937.png", "website": "https://www.vectrix.io", "all_locations": "San Francisco, CA, USA", "long_description": "As organizations around the world continue to rapidly adopt SaaS applications as the way they run their businesses, many are left without a way to manage the security of those same applications.\r\n\r\nCorporate IT and security teams are left asking questions like:\r\n- How will I know if someone shares a sensitive Google Doc publicly?\r\n- What if one of our employees doesn't have two-factor authentication enabled in Zoom?\r\n- Will I know when a new user is added to Slack?\r\n- What happens if our Salesforce minimum password setting isn't strong enough?\r\n\r\nWith Vectrix's easy-to-use SaaS security scanning, organizations everywhere can quickly identify security issues and risks like these across their entire suite of SaaS apps, including Google Workspace, Microsoft 365, Slack, Zoom, GitHub, and more.\r\n\r\nWhen new issues arise, IT and security teams can be alerted in real-time so that further action can be taken right away.\r\n\r\nFounded by former security professionals from Autodesk, Vimeo, and PlanGrid, Vectrix is committed to providing teams of all sizes an efficient and reliable way to stay secure in the public cloud.\r\n\r\nGet started at https://www.vectrix.io", "one_liner": "Scan your SaaS apps and instantly identify security issues", "team_size": 7, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597513135, "tags": [ "SaaS", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2020", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/vectrix", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/vectrix.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/vectrixsecurity", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/vectrix-d281", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9315542ed06d8a722e5739c5365aceb689b1d937.png", "app_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/bf-public_profile/21951/app_video.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAQC4NIECANGNRRAJW%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022650Z&X-Amz-Expires=60&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEHEaCXVzLXdlc3QtMiJHMEUCIQC3G81IFSUZtThVVLqv%2FNP8JAonBeKueJ3nqFDE3FxXUwIgKp6ifAPW9xtNk4cHGnVzE9T5oK7HksFpS9B%2BDm%2FLIOQq5QMIOhAAGgwwMDYyMDE4MTEwNzIiDMiErSqdA9fZ5I2ahyrCAyhI4VxFZU5tGwj2zBKwzP3YopALEsVr%2F%2BZE%2BqKG5ExbN%2FLTC2qWrBSqlDY2M5sbNAwfqQqFkcx31kz1vOn4FSuJMRYW%2BkzTF0sHdYK6D3qvReS29sXOai4xEgytMpWv0HHodzBVtqmM6lhZul7EdriU1r3NMgn6kwrys472GaamCoy9cButcMuxdA6JAW7AePBgk0hcnFGzaY5aao9TXEqqqLDlP1z95aeQK0rFfjBuVVTlW6dspQwwAJwsuJjoI9t1YkL4Lit4gUGj1QI7PUIH70gMRgnlfqNLB7jJcwv%2BI4Rfgnv%2FfKmc5%2BoYexcBkjZu9myZq6QOA6uBoHrB0oTKfDnTUxCfp3Zyd%2BYXd%2BRBrzgSL0LnII%2Fr1P71gX8BqFIaJIcILi5J6qUg2doC6qXH8L6zz0Tim2049E5pbQ072LSzepYlZMqQ983uJSL3eUXk86ehR9Lyldz67yIvyCRilZUgb11jcjrMydu%2Fj2RI4J5upBB3IYDl1jhGlV%2FvgsHTaVujKGAhe3lEnUZs9YdCRwpmLb5XcbpM70m15Z8MQhDcr6si85gNENVvPMk4eUw4FkmyLz2%2FrGX%2BhkiQHEAiUzDJ%2FdrWBjqlAa1FguiGB0WcOcaP9Dwwt66PPG2naOQP7x5F5wwTg7gWx2PYYqZ05ZF%2F2dhdA4HJKOntgl0neDqra19sFySGeXNdHt7tNNndMpVniacUOziehXVxpr49zgL%2FhWtvSxfqv2mUAjPVCs%2FBJs6SqN3WzVfiA2RUodOJqzLA7KluY8D8t3zxMbqsQdARPCP3FgqSkJ8A8HTGWYo9w0rLlT%2Fugv6qZCfQcg%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=b45173bdade0dd82582e960a1d9299ce2fabc1bbfcbd5a2d3074506fb59f23a3", "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 481356, "full_name": "Corey Mahan", "title": "Founder", "founder_bio": "Co-founder of Vectrix. Former Director of Security at Vimeo.\n\nCybersecurity leader for over 10 years, working with financial services, video, and energy organizations in both the United States and Australia. Technical, yet personable, leader who prioritizes a people-first approach to achieve secure solutions. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/coreymahan/", "x_url": "https://twitter.com/coreymahan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2b2f7120040797402fdfe9bb5ff8176122058281.jpg" }, { "user_id": 478622, "full_name": "Alex Dunbrack", "title": "Founder", "founder_bio": "Co-founder of Vectrix. Former Security Analyst at PlanGrid and Autodesk.\n\nExperienced security and compliance professional, building compliance and privacy programs at startups and Fortune 100 companies with a focus on automating manual processes.\n\nhttps://www.dunbrack.com/", "is_active": true, "linkedin_url": "https://linkedin.com/in/alexdunbrack", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/112dd175184bc9734e6d9977bb8d2d1f5b7e3cfb.jpg" }, { "user_id": 476147, "full_name": "Matthew Lewis", "title": "Founder", "founder_bio": "My career is focused on improving cybersecurity at scale. \n\nI started in offensive security finding vulnerabilities, moved into security engineering to prevent them through architecture, and now I build security products that security teams across the industry can rely on.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/matthew-lewis-8043a316b/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e419ba135856cf73a84dd125eaef5672ab05f97b.jpg" } ], "jobs": [], "news": [ { "title": "Vectrix has been acquired by Cloudflare! | Vectrix Blog", "url": "https://www.vectrix.io/blog/cloudflare-acquires-vectrix", "date": "Feb 10, 2022" }, { "title": "Vectrix is developing cloud security marketplace built for and by security pros – TechCrunch", "url": "https://techcrunch.com/2020/08/04/vectrix-is-developing-cloud-security-marketplace-built-for-and-by-security-pros/", "date": "Aug 04, 2020" } ], "launches": [] }, { "id": 22004, "name": "Notabene", "slug": "notabene", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2b0f2c4947976db4329789cc22f30a10206acb57.png", "website": "https://notabene.id", "all_locations": "New York City, NY, USA", "long_description": "Notabene helps businesses perform crypto transactions in a regulatory compliant way. Think of us as the SWIFT network for Crypto.\r\n\r\nNew global regulations for crypto transactions are here and will be enforced over the next year. Businesses now have to follow strict rules similar to banks, or shut down. \r\n\r\nWe provide a SaaS platform that allows businesses to perform due-diligence on their counter-parties and manage the risk of incoming and outgoing transactions.", "one_liner": "The Notabene platform is the trust layer for global money movement.", "team_size": 47, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597768786, "tags": [ "Fintech", "Crypto / Web3", "Regtech" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": true, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/notabene", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/notabene.json", "year_founded": 2020, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/notabene-id", "x_url": "https://twitter.com/notabene_id", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/notabene-86d2", "github_url": "https://github.com/Notabene-id", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/2b0f2c4947976db4329789cc22f30a10206acb57.png", "app_video_url": null, "dday_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/video_event/49/1598455796768-zt270zkhs7k-4d552c16e9642a36403a14c30a3b309c/85469ca99681dea38ec8a9b57f83d606.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAQC4NIECABPQ2AHNW%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022650Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=b3a7715b569c705799136bd0252b052fe25c339aaa05074d517abbf0cd1d0335", "company_photos": [], "primary_partner": { "name": "Aaron Epstein", "url": "https://www.ycombinator.com/people/aaron-epstein" }, "founders": [ { "user_id": 489750, "full_name": "Andres Junge", "title": "Founder", "founder_bio": "Developer since 1985. Yaykuy Bitcoin Chile founder. Consensys / uPort co-founder. Notabene co-founder and CTO. Micael Waldorf School co-founder. Have a lovely wife and two awesome kids.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ajunge", "x_url": "https://twitter.com/ajunge_m", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bfa9c8feb61da15639c181ea931c6e1e9d0327d7.jpg" }, { "user_id": 489564, "full_name": "Ania Lipinska", "title": "Founder", "founder_bio": "Ania is a UX designer and Head of Product at Notabene. She has experience leading a variety of design projects for both start-ups and established companies (Comcast, Booking.com, Blade). \nShe brings an unapologetically customer-centric approach to the team.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ania-lipinska/", "x_url": "https://twitter.com/LipinskaAnna", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bcba2b07339d724fa4d005bf8540cf99d4a2a175.jpg" }, { "user_id": 489168, "full_name": "Alice Nawfal", "title": "Founder", "founder_bio": "Alice Nawfal is COO of Notabene. Her role is to combine business strategy with hands-on execution, while navigating a complex regulatory landscape. Prior to Notabene, she co-lead uPort, a platform for user-controlled data. She comes from a management consulting and policy background, having worked at Bain and the Economist, as well as fintechs like Prodigy Finance and norbloc. She has an MBA from Wharton, a policy degree from the Harvard Kennedy School, and Math/Economics degrees from MIT.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/alicenawfal/", "x_url": "https://twitter.com/na_alice", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e22d02b49636991b8de1847615c145f9fbce641c.jpg" } ], "jobs": [ { "id": 77168, "title": "Sales Director, Americas (Institutional)", "url": "https://www.ycombinator.com/companies/notabene/jobs/dWkUMzI-sales-director-americas-institutional", "location": "New York, NY, US / Remote (New York, NY, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Crypto Anti-Money Laundering Specialist Notabene Raises $14.5M Series B Led by DRW", "url": "https://www.coindesk.com/business/2024/11/12/crypto-anti-money-laundering-specialist-notabene-raises-145m/", "date": "Nov 12, 2024" }, { "title": "Notabene raises $10.2M to help crypto exchanges comply with new global regulations – TechCrunch", "url": "https://techcrunch.com/2021/11/08/notabene-raises-10-2m-to-help-crypto-exchanges-comply-with-new-global-regulations/", "date": "Nov 08, 2021" } ], "launches": [] }, { "id": 22141, "name": "SafeBase", "slug": "safebase", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/11ecc83b03cfcf5e3849e1ca5f104ded4d413551.png", "website": "https://www.safebase.io", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Trust Center Platform\r\n\r\nSafeBase Trust Center enables Security teams to proactively share and automate access to security, compliance, and privacy information/ complete security questionnaires.\r\n", "one_liner": "Trust Center platform that scales customer security reviews", "team_size": 60, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1595995902, "tags": [ "SaaS", "Productivity", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2020", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/safebase", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/safebase.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/safebase/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/11ecc83b03cfcf5e3849e1ca5f104ded4d413551.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 468111, "full_name": "Al Yang", "title": "Founder", "founder_bio": "Father of two - lives in the Bay - enjoys company building and golfing. Started SafeBase to help companies share their security and compliance posture and automate access to sensitive information -- a pain he dealt with in his last company (Medumo, acquired by Philips Health). ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/alyang10/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b7940a9cdf08f3d84c64caa8ff5c1e4c24485d17.jpg" }, { "user_id": 452212, "full_name": "Adar Arnon", "title": "Founder", "founder_bio": "Former R&D group leader in an elite technology unit in the Intelligence Directorate of the IDF. Specialized in Cybersecurity and OS architecture. Graduated from the joint-degree MS/MBA program at Harvard.\nI enjoy building stuff, and I enjoy breaking stuff even more. I've had years of varied experiences in the intersection of cybersecurity & web infrastructure, from designing secure networking protocols, to architecting operating system drivers, and managing a reverse-engineering team.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/adarnon/", "x_url": "https://twitter.com/adararnon", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/37a5c3a09564be609b8e785389afe8ddc3943608.jpg" } ], "jobs": [], "news": [ { "title": "SafeBase + Drata: Redefining Trust and Compliance for the Enterprise", "url": "https://safebase.io/blog/drata-acquires-safebase", "date": "Feb 11, 2025" }, { "title": "SafeBase taps AI to automate software security reviews | TechCrunch", "url": "https://techcrunch.com/2024/04/30/safebase-taps-ai-to-automate-software-security-reviews/", "date": "Apr 30, 2024" }, { "title": "SafeBase bags $18M Series A to speed up vendor security auditing process – TechCrunch", "url": "https://techcrunch.com/2022/03/10/safebase-bags-18m-series-a-to-speed-up-vendor-security-auditing-process/", "date": "Mar 10, 2022" } ], "launches": [] }, { "id": 22669, "name": "Stacksi", "slug": "stacksi", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f156eef4b9ac5fa38dd9afff769a51093bf61255.png", "website": "https://www.stacksi.com", "all_locations": "Los Angeles, CA, USA; Remote", "long_description": "Stacksi helps companies automate the process of answering enterprise security questionnaires so they can close deals faster and save their best engineers’ time for more strategic projects.\r\nSalespeople, CTOs, and CEOs of fast-growing enterprise startups can upload security questionnaires into our system. If the company already has written security policies, they can upload those documents, too. From there, Stacksi parses their documents, identifies gaps in their security policies vs. standards, and helps them establish a successful security program. \r\nUltimately, we will help them 1) automate completion of security questionnaires, 2) quickly get through enterprise security audits and 3) improve their security posture.", "one_liner": "Automated Answers to Security Questionnaires", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1614621439, "tags": [ "Compliance", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/stacksi", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/stacksi.json", "year_founded": 2020, "city": "Los Angeles", "country": "US", "linkedin_url": "https://www.linkedin.com/company/stacksi/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f156eef4b9ac5fa38dd9afff769a51093bf61255.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 581239, "full_name": "Emre Murray Mangir", "title": "Founder", "founder_bio": "Current:\n- Product at Ashby (we make powerful and pleasant software for hiring) \nPreviously:\n- Co-founder at Stacksi (W21 - we automate security questionnaires)\n- Co-founder at Mozio (aggregates global ground transport)\n- Former pricing & marketing consultant at Simon-Kucher & Partners (improves unit economics, pricing, and packaging)\n- UC Berkeley - Applied Math, Economics", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/emremangir/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ed4f95dc983aedeaedbf44f5fff4e2ecd55feb15.jpg" } ], "jobs": [], "news": [ { "title": "SafeBase Acquires Fellow Y Combinator-Backed Stacksi to Fuel Its Vision for Zero-friction Security Assessments | Business Wire", "url": "https://www.businesswire.com/news/home/20230906917869/en/SafeBase-Acquires-Fellow-Y-Combinator-Backed-Stacksi-to-Fuel-Its-Vision-for-Zero-friction-Security-Assessments", "date": "Sep 06, 2023" } ], "launches": [] }, { "id": 22698, "name": "Observa", "slug": "observa", "former_names": [ "21 Ravens", "Crucial Detection", "Observa Intel" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8638f021fb4b288aa57f3981a3a65637300055bc.png", "website": "https://www.observa.com", "all_locations": "Remote", "long_description": "", "one_liner": "Catch accidental database exposures before the bad guys", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1621265976, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/observa", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/observa.json", "year_founded": 2020, "city": null, "country": null, "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8638f021fb4b288aa57f3981a3a65637300055bc.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 8570, "full_name": "Rob Picard", "title": "Founder", "founder_bio": "Teleport and Pioneer Fund", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/rob-picard/", "x_url": "https://twitter.com/itsRobPicard", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/28031210a85b5d92639f8da559e926f5d591ec75.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 22781, "name": "Cyble", "slug": "cyble", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f1559fe73a2c1a1b683d40299a231a3a0becfe24.png", "website": "https://cyble.com/", "all_locations": "San Francisco, CA, USA", "long_description": "To reimagine cybersecurity with an AI-native platform that unifies detection, protection and remediation across the digital attack surface\r\n\r\nHeadquartered in Alpharetta, Georgia, and with offices in Australia, Malaysia, Singapore, Dubai, Saudi Arabia and India, Cyble has a global presence. To learn more about Cyble, visit www.cyble.com.  ", "one_liner": "Cyble - World’s First Intelligence-Driven, AI-Native Security…", "team_size": 197, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1613603669, "tags": [ "SaaS", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cyble", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/cyble.json", "year_founded": 2019, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/14707748/", "x_url": "https://twitter.com/cybleglobal", "fb_url": "https://www.facebook.com/cybleau", "cb_url": "https://www.crunchbase.com/organization/cyble", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f1559fe73a2c1a1b683d40299a231a3a0becfe24.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/f0c02392950d43a192dcf370fc8adeb4c2e68680.png", "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/50e6d233b6388c1054148eabb75b51804cc4f024.png" ], "primary_partner": null, "founders": [ { "user_id": 599690, "full_name": "Beenu Arora", "title": "Founder", "founder_bio": "As the co-founder and CEO of Cyble, Inc., I lead a global team of experts and innovators who leverage AI-powered actionable threat intelligence to help our clients manage cyber risks. We specialize in gathering intelligence from the Deepweb, Darkweb, and Surface Web, and delivering timely and relevant insights and solutions to our customers. Our vision is to make the digital world safer and more secure for everyone.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/beenu-arora-b5068412/", "x_url": "https://twitter.com/beenuar", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d32d72c6bca2aa6945215d5d16675e362ba57d2e.jpg" }, { "user_id": 601018, "full_name": "Manish Chachada", "title": "Founder", "founder_bio": "Seasoned finance professional with over 15+ years multinational experience in finance/accounting, business management, international corporate structuring, global tax strategies, fund raising. (Consulting experience - KNAV P.A. (member Allinial Global firms), Controller (Mitchell Group USA, LLC, Executive finance - IT Service - Rolta International", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/manish-r-chachada/", "x_url": "https://twitter.com/manishchachada", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/794e1877a1d0d0aaeb5dad00546051927ebb2063.jpg" } ], "jobs": [ { "id": 63387, "title": "CTO- Cyber Security ", "url": "https://www.ycombinator.com/companies/cyble/jobs/nd6SoAb-cto-cyber-security", "location": "Remote", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$200K - $250K", "equity_range": "", "experience": "11+ years", "visa": "Will sponsor", "skills": [] }, { "id": 64051, "title": "Senior Engineer - ML & AI", "url": "https://www.ycombinator.com/companies/cyble/jobs/kdQ44Xs-senior-engineer-ml-ai", "location": "Bengaluru, KA, IN / Remote (Bengaluru, KA, IN)", "type": "Full-time", "role": "Engineering", "role_type": "Machine learning", "salary_range": "$70K - $120K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Machine Learning", "Natural Language Processing" ] }, { "id": 87439, "title": "Windows Agent Developer", "url": "https://www.ycombinator.com/companies/cyble/jobs/Vzqcjsi-windows-agent-developer", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Embedded systems", "salary_range": "₹4M - ₹6M INR", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "C", "C++", "Windows" ] }, { "id": 87440, "title": "Senior Software Engineer – AI ", "url": "https://www.ycombinator.com/companies/cyble/jobs/oMpfMAl-senior-software-engineer-ai", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "₹4M - ₹6M INR", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Go", "Node.js", "Python" ] }, { "id": 89228, "title": "Sales Engineer - META", "url": "https://www.ycombinator.com/companies/cyble/jobs/iaW40iW-sales-engineer-meta", "location": "Dubai, Dubai, AE / Remote (Dubai, Dubai, AE)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$130K - $180K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 90304, "title": "Backend Engineer / Architect", "url": "https://www.ycombinator.com/companies/cyble/jobs/KnLt3go-backend-engineer-architect", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "₹6M - ₹10M INR", "equity_range": "", "experience": "11+ years", "visa": "US citizen/visa only", "skills": [ "Java", "MySQL", "PostgreSQL", "RabbitMQ", "Spring Framework" ] }, { "id": 92943, "title": "AI SOC Lead", "url": "https://www.ycombinator.com/companies/cyble/jobs/CDhmyAG-ai-soc-lead", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$18K - $25K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Information Security" ] }, { "id": 96077, "title": "Sales Engineer - Philippines", "url": "https://www.ycombinator.com/companies/cyble/jobs/4G67k4K-sales-engineer-philippines", "location": "PH / Remote (PH)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$50K - $65K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97113, "title": "Senior Researcher - Dark Web & Threat Intelligence", "url": "https://www.ycombinator.com/companies/cyble/jobs/idYynR5-senior-researcher-dark-web-threat-intelligence", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$15K - $35K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97114, "title": "Bug Hunter - Dark Web & Threat Intelligence", "url": "https://www.ycombinator.com/companies/cyble/jobs/BZMt0u5-bug-hunter-dark-web-threat-intelligence", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$10K - $18K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97760, "title": "Regional Sales Manager - US Central", "url": "https://www.ycombinator.com/companies/cyble/jobs/uIMRS0E-regional-sales-manager-us-central", "location": "Chicago, IL, US / TX, US / IL, US / LA, US / KS, US / Remote (Chicago, IL, US; TX, US; IL, US; LA, US; KS, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$120K - $150K", "equity_range": "", "experience": "11+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 98490, "title": "Brand Monitoring Specialist - Bangalore (Hybrid)", "url": "https://www.ycombinator.com/companies/cyble/jobs/niyJoHX-brand-monitoring-specialist-bangalore-hybrid", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$8K - $10K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 99224, "title": "Account Executive - Big 4, Strategic Advisory & Consulting", "url": "https://www.ycombinator.com/companies/cyble/jobs/pfbIcW0-account-executive-big-4-strategic-advisory-consulting", "location": "US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$100K - $150K", "equity_range": "", "experience": "11+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 99707, "title": "Forward-Deployed Engineer (FDE) - Bangalore/Delhi", "url": "https://www.ycombinator.com/companies/cyble/jobs/XloGjT2-forward-deployed-engineer-fde-bangalore-delhi", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN / Remote (DL, IN; Delhi, IN)", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$18K - $35K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 102363, "title": "DevOps Engineer", "url": "https://www.ycombinator.com/companies/cyble/jobs/murTsCP-devops-engineer", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Devops", "salary_range": "$15K - $25K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 106571, "title": "Data Protection Officer (DPO)", "url": "https://www.ycombinator.com/companies/cyble/jobs/r9nhaKE-data-protection-officer-dpo", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Legal", "role_type": null, "salary_range": "$20K - $40K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 106708, "title": "Principal Product Architect", "url": "https://www.ycombinator.com/companies/cyble/jobs/hJ0oibW-principal-product-architect", "location": "US / TX, US / Remote (US; TX, US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $200K", "equity_range": "", "experience": "11+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 110598, "title": "Technical Support Lead", "url": "https://www.ycombinator.com/companies/cyble/jobs/88jXu8s-technical-support-lead", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$25K - $40K", "equity_range": "", "experience": "11+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 110762, "title": "QA Engineer", "url": "https://www.ycombinator.com/companies/cyble/jobs/4Vsfqmq-qa-engineer", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$15K - $25K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 110828, "title": "Customer Success Manager (Associate)", "url": "https://www.ycombinator.com/companies/cyble/jobs/PIjWfjW-customer-success-manager-associate", "location": "AU / Remote (AU)", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$80K - $100K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Threat intelligence startup Cyble lands $24M investment | TechCrunch", "url": "https://techcrunch.com/2023/07/31/threat-intelligence-startup-cyble-lands-24m-investment/", "date": "Jul 31, 2023" }, { "title": "Darkweb And Cybercrime Monitoring Startup Cyble Announces US $10 Million in Series A Funding | Business Wire", "url": "https://www.businesswire.com/news/home/20220215006151/en/Darkweb-And-Cybercrime-Monitoring-Startup-Cyble-Announces-US-10-Million-in-Series-A-Funding", "date": "Feb 22, 2022" } ], "launches": [ { "id": 112785, "title": "MalwareAnalyzer: Static scanning, real detonation, an interactive live VM, and a threat graph you can pivot through", "tagline": "We just crossed 500K samples analyzed - free for anyone here.", "body": "Hey all - Cyble (YC W21) here. We've been heads-down on MalwareAnalyzer (): a public malware analysis and threat intelligence platform. Submit a file, a URL, or a hash and get a verdict backed by real evidence. Public analysis is free and unlimited, and no account is required.\n\nWe just crossed 500,000 samples analyzed, which felt like a reasonable excuse to finally post here.\n\n**What's actually in it**\n\n**Multi-engine static scanning.** Free and open engines (ClamAV, YARA, hash feeds, static tooling) run locally; third-party AV engines run on an isolated in-VPC Windows scanner. The report shows only the engines that actually ran — no padded vendor list.\n\n**Real sandbox detonation.** We execute the sample, not just scan it. Full behavior capture across process, file, registry and network activity.\n\n**Interactive live-VM analysis.** Take the wheel mid-detonation: click through installers, dismiss dialogs, trigger the behavior that only fires on user interaction. Choose your guest OS, network mode and engine — and diff two builds side by side.\n\n**URL and phishing analysis.** Paste a link and get the redirect chain, hosting and verdict without touching it yourself.\n\n**Queryable threat-intelligence graph.** Pivot from a sample out to infrastructure, families and related samples. Search the whole corpus by content, indicator, MITRE technique or family — then save it as a standing hunt and get notified when something new matches.\n\n**ATT&CK mapping with receipts.** Every technique is attributed to its source (static capa rule vs. observed at runtime) with confidence weights, plus rule-set hashes so a report is reproducible.\n\n**Reports that admit what they don't know.** If an analysis tier fails to complete, the report is marked degraded and queued for re-analysis rather than presented as clean coverage. A report with no findings _and_ no degradation notice is a real negative result.\n\n**An API with no key required.**\n\n\\`\\`\\`\n\ncurl -X POST \\\\\n\n -H 'content-type: application/json' \\\\\n\n -d \"{\\\\\"fileName\\\\\":\\\\\"sample.bin\\\\\",\\\\\"fileBase64\\\\\":\\\\\"$(base64 < sample.bin | tr -d '\\\\n')\\\\\"}\"\n\n\\`\\`\\`\n\nReturns a task id and a report URL. Submissions are unlimited; lookups are capped at 1,000/day per IP.\n\n**Why this might matter even if you're not a security company**\n\nSomeone on your team is eventually going to get a strange attachment, an unsigned installer from a vendor, or a \"recruiter\" link that smells wrong. Drop it in and get an answer in about a minute - better than a Slack thread of guesses.\n\nFree covers submissions and full reports. Premium compute (private analysis, deep URL scans, the AI assistant) runs on credits, and every account starts with a free grant.\n\nHappy to go deep on any of this - the interactive sandbox was by far the hardest part to get right. Feedback, bug reports and \"your report was wrong about my file\" all very welcome.", "url": "https://www.ycombinator.com/launches/TL7-malwareanalyzer-static-scanning-real-detonation-an-interactive-live-vm-and-a-threat-graph-you-can-pivot-through", "votes": 2, "created_at": "2026-08-31T15:04:07.208Z" }, { "id": 80316, "title": "AmIBreached.com by Cyble: The ultimate data breach monitoring solution 🔒", "tagline": "Your AI-powered sentinel against data breaches.", "body": "👋 We're thrilled to announce the launch of AmIBreached.com, the most advanced and comprehensive data breach detection and monitoring platform on the market.\n\nAs data breaches continue to rise, we've been working tirelessly to develop a solution that empowers individuals and businesses to safeguard their sensitive information. With AmIBreached.com, you can now have peace of mind knowing that your data is secure.\n\n🔍 Key Features of AmIBreached.com:\n\n* Advanced breach detection algorithms that continuously scan the web for compromised data 🚨\n* Intuitive dashboard for easy monitoring and management of your data security 📊\n* Real-time alerts to keep you informed of any potential breaches 📩⚡\n* Seamless integration with popular tools and platforms for a streamlined workflow 🔧🤝\n* Customizable security settings to fit your unique needs 🎚️🔐\n\n👨‍💻👩‍💻 Whether you're an individual looking to protect your personal information or a business aiming to secure your organization's data, AmIBreached has got you covered.\n\n🌍 Join the thousands of satisfied users who trust AmIBreached to keep their data safe and secure. Our cutting-edge technology and dedicated support team are here to ensure your peace of mind in the digital world.\n\n[**Try it out today**](http://amibreached.com/)**. We'd love to hear your thoughts and feedback! Don't hesitate to reach out to our team with any questions or suggestions.**", "url": "https://www.ycombinator.com/launches/KtQ-amibreached-com-by-cyble-the-ultimate-data-breach-monitoring-solution", "votes": 92, "created_at": "2024-04-22T15:23:29.341Z" }, { "id": 73802, "title": "Odin - Attack surface monitoring and internet scanning for everyone", "tagline": "Proactively uncover security risks in your public-facing infrastructure before cybercriminals can exploit them.", "body": "We're excited to share that we launched [Odin](https://getodin.com), our new attack surface monitoring capability!🎉 It's available to try out now at [**getodin.com**](http://getodin.com).\n\n**About**: With its ability to scan the entire IPv4 space, Odin delivers unprecedented visibility into your external attack surface. 🕵️‍♂️\n\n**Key benefits:**\n\n✔️ Catalogs over 100+ internet-facing services to reveal your complete digital footprint\n\n✔️ Builds a comprehensive inventory of hosts, domains, subdomains, certificates, images and more\n\n✔️ Enables easy discovery of unknown assets, misconfigurations, risks\n\n✔️ Provides continuous monitoring for any changes\n\n✔️ Identifies vulnerabilities before attackers can exploit them ⚠️\n\nBy leveraging Odin's unmatched coverage, organizations gain total visibility and control over their attack surface. 💪\n\nOdin represents a significant breakthrough in empowering teams to proactively secure external assets before threats emerge. 🔒\n\nBy signing up, you can:\n\n✅ Test drive the capabilities\n\n✅ Provide key insights to improve the product\n\n✅ Help shape Odin's future\n\n✅ Access SDK: [**https://github.com/cybledev/odin-sdk-go**](https://github.com/cybledev/odin-sdk-go)\\\n[**https://github.com/cybledev/odin-sdk-python**](https://github.com/cybledev/odin-sdk-python)\n\nWe can't wait for you to be among the first to kick the tires on Odin, and let us know your thoughts. Please sign up and play around with the product. 🙏\n\nAnd if you find Odin useful, we'd really appreciate you sharing it with your network as we gear up for the official launch.🚀\n\nLet us know if you have any questions! Excited to hear what you think.\n\nThank you!\n\nCyble Team ([www.cyble.com](http://www.cyble.com))", "url": "https://www.ycombinator.com/launches/JCM-odin-attack-surface-monitoring-and-internet-scanning-for-everyone", "votes": 90, "created_at": "2023-08-04T03:35:23.921Z" } ] }, { "id": 23174, "name": "Feroot Security", "slug": "feroot-security", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1070c02900596bd056caf454feb7a0bd8add2715.png", "website": "https://www.feroot.com", "all_locations": "Toronto, ON, Canada", "long_description": "Feroot (YC W21) is the leading compliance and security platform for b2b websites that helps you easily achieve and maintain compliance with PCI DSS 4.0.1, CCPA, CIPA, HIPAA and 50+ data privacy regulations.", "one_liner": "AI-powered Compliance Platform for PCI 4, CCPA, HIPAA, CIPA, 50+ laws", "team_size": 24, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1630247607, "tags": [ "Compliance", "Security", "Privacy" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/feroot-security", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/feroot-security.json", "year_founded": 2017, "city": "Toronto", "country": "CA", "linkedin_url": "https://www.linkedin.com/company/feroot/", "x_url": "https://x.com/FerootSecurity", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/feroot", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1070c02900596bd056caf454feb7a0bd8add2715.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Aaron Epstein", "url": "https://www.ycombinator.com/people/aaron-epstein" }, "founders": [ { "user_id": 482024, "full_name": "Ivan Tsarynny", "title": "Founder", "founder_bio": "Ivan is the CEO and Co-Founder of Feroot Security. An Intelligent and automated security testing and run-time protection of the client-side of web applications. It provides an early warning, detection and management of data assets and risks. Feroot Security was awarded a number the NextAI Top Venture Award by NextCanada, 2019 Comet TOP 5 Cybersecurity Startups in Canada by Ingram Micro and Microsoft.\n", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ivantsarynny/", "x_url": "https://twitter.com/Ivan_tsarynny", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/caa3c3b12a14548bb40a0e88544ce625ddd4c950.jpg" }, { "user_id": 486368, "full_name": "Vitaliy Lim", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://linkedin.com/in/vitaliylim", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b326d05d029e522a52dd9fdc9e1fa648d9c81ca2.jpg" } ], "jobs": [], "news": [ { "title": "Cybersecurity Startup Using AI Agents Raises $14M: Feroot Pitch Deck - Business Insider", "url": "https://www.businessinsider.com/cybersecurity-startup-feroot-ai-agents-tiktok-series-a-pitch-deck-2025-11", "date": "Nov 19, 2025" } ], "launches": [] }, { "id": 24195, "name": "Tarsal", "slug": "tarsal", "former_names": [ "V-diff", "vdiff" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/75747b61e59eadbd8831c406fbe1beed2fd4957b.png", "website": "https://www.tarsal.co/", "all_locations": "New York City, NY, USA; San Francisco, CA, USA; Remote", "long_description": "Tarsal is a data pipeline custom built for security teams. As security data grows 25% year over year, security teams desperately need access to best-in-class data infrastructure. Tarsal bridges the gap between the modern data stack and security teams, pioneering the modern security data stack. \r\n", "one_liner": "Data pipeline for your security data lake.", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1680491615, "tags": [ "B2B", "Cybersecurity", "Big Data", "Data Engineering" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tarsal", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/tarsal.json", "year_founded": 2021, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tarsal/", "x_url": "https://twitter.com/tarsalhq", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/75747b61e59eadbd8831c406fbe1beed2fd4957b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 504645, "full_name": "Sunny Rekhi", "title": "Founder", "founder_bio": "cofounder/CEO of Tarsal (acq)", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sunny-rekhi/", "x_url": "https://twitter.com/sunnyrekhi", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7871e148fe5e8bc56d0a7ff53112f6ed73439faa.jpg" } ], "jobs": [], "news": [ { "title": "Tarsal Raises $6 Million for Security Data Movement Platform - SecurityWeek", "url": "https://www.securityweek.com/tarsal-raises-6-million-for-security-data-movement-platform/", "date": "Mar 21, 2024" } ], "launches": [ { "id": 71058, "title": "Tarsal: Data pipeline built for modern security teams", "tagline": "Run your SIEM on a generic data lake with one-click connectors that normalize your logs to a unified schema", "body": "### **TL;DR:**\n\n[**Tarsal**](https://tarsal.co) **is the first data pipeline built for modern security teams.** We’re like Fivetran or Segment, but built for security teams.\n\nTarsal provides:\n\n\\- one-click ingestion and normalization for all security logs (e.g multi-cloud infra, Okta, Duo, Slack, CrowdStrike, etc.)\n\n\\- normalization _across_ sources for easy correlation\n\n\\- detections as code\n\n\\- a vendor-agnostic pipeline so you can use the best log destination for the job (supported destinations include Snowflake, S3, Databricks, Splunk, DataDog, etc.)  \n\n### 👤 **The Team**\n\n[**Sunny Rekhi**](https://www.linkedin.com/in/sunny-rekhi/) **(CEO)** was previously an infrastructure + backend engineer at TikTok and Uber, where he worked on high scale data systems.\n\n[**Manny Gundampalli**](https://www.linkedin.com/in/manny-gundampalli-6a982019b/) **(CTO)** was previously a data infrastructure engineer at Plaid, where she worked on Plaid’s highest volume ML pipelines.\n\n### **❌ The Problem**\n\n**Security data has become unmanageable.**\n\n![](https://lh4.googleusercontent.com/48OpE_QVew8YK5ESoSSTbQC9_FXZWfbtePb8yXmZlY7vpDTBGjNbqb7rCW4XRM4BzJtnUng2CeOGYkrqzO3VHXonj_23Q99TUIGRqOHDqZxNC7RdXz-W1sBM78XNig5TovQL1n5S8TtaeKgVdII8W2AtGQ=nw)\n\n* There’s no standard for how security data is defined, so security teams have to write complex queries to account for all the variations.\n* There’s no consistent way to get your log data: some vendors expose a REST API, others expose a GraphQL API. Some give you JSON data, some give you unstructured text. Schematized data is rare.\n* There’s _a lot_ of it. Security data is growing at 23% CAGR, and log storage costs are incredibly high.\n\n## **✨ Our Solution**\n\n[**Tarsal**](https://tarsal.co) is the first data pipeline built for modern security teams. With zero-hassle, one-click connectors, security teams can ingest normalized data and route it to the destination of their choice.\n\n**Our unified schema is specifically designed to reduce the complexity in incident response.** By normalizing a set of standard fields across all log sources, security teams no longer have to write complex queries to track an incident across their systems. Query once against Tarsal fields — let us figure out how that maps back to the original data.\n\n**We save you money on log storage costs by letting you route logs to the cheapest destination.** With data growing 23% year over year, organizations face ballooning infrastructure cost. Tarsal lets you filter + route logs to any of our supported destinations, including major SIEMs, Amazon S3, or a modern data warehouse like Snowflake, BigQuery, or Databricks.\n\n**Tarsal lets you write real-time detections as code.** Write expressive and flexible detections in Python for needs specific to your enterprise. Benefit from pre-built detections that are mapped to specific threats.\n\n**We alert you if anything breaks in your log ingestion.** Rest assured that you’re collecting the data you’d need during an incident. Set up Slack or PagerDuty alerts if any of your logs stop syncing over.\n\n![](https://lh6.googleusercontent.com/s_iuAJD6ZiI_jJBjGYE8ndHSN0grI-BEHRg_unkfAwwFlRvqhiWxfDPsNQ14mUlakvOPbedvfdc_ITMJfFlT3KdMUYolC43L-wwZx39-LbomTRhIstS4EofeIhj2WWBFLqCZEnaoCwbV9DL9_0FP-zKCbw=nw)\n\n### **🎉 Interested?**\n\nEmail us at [founders@tarsal.co](mailto:founders@tarsal.co) and we’ll give you a link to sign up. You can also a book a call with me [here](https://calendly.com/rohit-rekhi/30min) to learn more.", "url": "https://www.ycombinator.com/launches/IU6-tarsal-data-pipeline-built-for-modern-security-teams", "votes": 58, "created_at": "2023-04-19T14:52:36.010Z" } ] }, { "id": 24206, "name": "Hyperbrowser", "slug": "hyperbrowser", "former_names": [ "Supernote", "MetricFlow", "Metlo" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f3b213c6492ebfd585bec4644b94f381db09e0e4.png", "website": "https://hyperbrowser.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Hyperbrowser.ai is the internet infrastructure for AI agents. We provide instant, scalable browser infra with built-in CAPTCHA solving, proxy management, and anti-bot detection. \r\n\r\nDevelopers use us to power their AI agents for data collection, testing, and web automation at scale. We're backed by YC, Accel, SV Angel, and others.", "one_liner": "Web infra for AI agents", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1628188883, "tags": [ "Developer Tools", "B2B", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/hyperbrowser", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/hyperbrowser.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/hyperbrowser", "x_url": "https://x.com/hyperbrowser", "fb_url": null, "cb_url": null, "github_url": "https://github.com/hyperbrowserai", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f3b213c6492ebfd585bec4644b94f381db09e0e4.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 233736, "full_name": "Shri Sukhani", "title": "Founder", "founder_bio": "Founder, CEO @ Hyperbrowser. Previously, Eng at Meta.", "is_active": true, "linkedin_url": "https://linkedin.com/in/shrisukhani", "x_url": "https://twitter.com/SukhaniShri", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2f3240bc666e1dfca46ebfcd404ae37b74a306a7.jpg" }, { "user_id": 556017, "full_name": "Akshay Shekhawat", "title": "Founder", "founder_bio": "Founder @ hyperbrowser.ai", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/akshay-shekhawat/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/58c28996848605d8a210a90cbcc336cdf54ac647.jpg" } ], "jobs": [ { "id": 75560, "title": "Growth Engineer Intern", "url": "https://www.ycombinator.com/companies/hyperbrowser/jobs/1LZDDAF-growth-engineer-intern", "location": "IN / Remote (IN)", "type": "Internship", "role": "Engineering", "role_type": "Full stack", "salary_range": "₹25K - ₹200K INR", "equity_range": "", "experience": null, "visa": "US citizen/visa only", "skills": [ "JavaScript", "Python", "React", "TypeScript", "Growth design", "Next.js" ] } ], "news": [], "launches": [ { "id": 89908, "title": "HyperAgent: Open Source AI Browser Automation Framework", "tagline": "Automate the Web with LLMs", "body": "**TL;DR / Summary:**\n\nHyperagent is the AI-native browser automation framework - think Playwright supercharged with AI. No more brittle scripts, just powerful natural language commands.\n\nHyperAgent gives you:\n\n* 🤖 **AI Commands**: Simple APIs like [page.ai](http://page.ai)(), page.extract() and executeTask() for any AI automation\n* ⚡ **Fallback to Regular Playwright**: Use regular Playwright when you don’t need AI\n* 🥷 **Stealth Mode** – Avoid detection with built-in anti-bot patches\n* ☁️ **Cloud Ready** – Instantly scale to hundreds of sessions via [Hyperbrowser](https://app.hyperbrowser.ai/)\n* 🔌 **MCP Client** – Connect to external tools for full workflows (e.g. writing web data to Google Sheets)\n\n⭐ **Check it out and give it a star on Github!**\n\n\\\n\\\n\\\n\\\n**Browser Automation Is Broken**\n\nWe built HyperAgent because **browser automation is broken.** We've all been there – spending hours writing scripts that shatter the moment a website changes. With AI agents becoming mainstream, we need automation that's as adaptive as they are, and doesn’t break every time a css class changes.\n\nWith HyperAgent, we’re adding AI to your existing toolkit, wrapping playwright in simple, natural language commands that just work. So you can have the best of both worlds - keep what you love about playwright and automate the rest with AI.\n\n**HyperAgent Quickstart**\n\nTo use HyperAgent on an existing page, you can simply call [**page.ai**](http://page.ai):\n\n```\nawait page.ai(\"Find a route from Miami to New Orleans, and provide the detailed route information.\")\n```\n\n![uploaded image](/media/?type=post&id=89908&key=user_uploads/556017/f6d70ca6-70cf-4dff-a206-9263341cd681)\n\nThis will go to google maps, enter in the origin and destination, then return the route back.\n\nTo extract information from a page, call **page.extract:**\n\n```\nawait page.extract(“find the major cities that this path goes through\")\n```\n\n![uploaded image](/media/?type=post&id=89908&key=user_uploads/556017/2ca8cdba-b651-44e4-af20-9bdc7d1e0393)\n\n**Built-in Stealth Mode**\n\nHyperAgent comes with patches for stealth browsing so you don’t have to worry about getting blocked. For maximum stealth, use Hyperbrowser - it’s free to start.\n\n**Infinitely Extensible with MCP servers**\n\nWant to give HyperAgent access to custom tools or integrate with other apps? HyperAgent is an MCP client and offers infinite extensibility with any MCP server.\n\n**Scale to 100s of Concurrent Agents**\n\nUsing HyperAgent on HyperBrowser you can scale to 100s of concurrent agent runs in seconds. No need to worry about the underlying infrastructure.\n\n# Try It Today\n\n🚀 GitHub: \n\n![uploaded image](/media/?type=post&id=89908&key=user_uploads/556017/6aa560db-eee6-4bb6-9a9c-38c51fadb03d)\n\n", "url": "https://www.ycombinator.com/launches/NO8-hyperagent-open-source-ai-browser-automation-framework", "votes": 19, "created_at": "2025-04-28T15:08:07.451Z" }, { "id": 89020, "title": "Hyperpilot: AI Browser Agent Playground by Hyperbrowser", "tagline": "Experience the future of the Agentic Web for Free with HyperPilot", "body": "# **TL;DR / Summary:**\n\nAI Browser Agents are powerful but costly/hard to access. HyperPilot lets you try all the leading browser agents (CUA, Claude CU, Browser Use) for free. It's built on Hyperbrowser, our infra that lets you build agents with a free API key + 5 lines of code.\n\n\n\n**Why**\n\nAI browser agents like OpenAI's CUA and Anthropic's Claude Computer Use promise to revolutionize web automation. But getting hands-on experience is tough. Tools are limited, complex, or expensive – OpenAI's Operator preview costs $200/month just to try. How can you explore this future without breaking the bank?\n\n# **What**\n\nWe're launching [HyperPilot](http://pilot.hyperbrowser.ai): A free, easy-to-use playground where you can directly interact with and compare different AI browser agent models. See firsthand what they can really do.\n\nHyperPilot isn't just a demo; it’s a fully functional browser agent playground that runs entirely on [Hyperbrowser](https://hyperbrowser.ai) - our robust and scalable browser infrastructure designed specifically for AI agents.\n\n# **Who is this for? What should you do with it?**\n\n### **Everyone**\n\nTry it out for yourself. See what the future of Browser Agents actually holds. Check out Claude Computer Use, OpenAI’s CUA, and more. If you get inspired by what you see, we’d love to hear from you and help in any way we can! Reach out to us at [founders@hyperbrowser.ai](mailto:founders@hyperbrowser.ai)\n\n_(Hyperbrowser booking Kendrick Lamar concert tickets)_\n\n![uploaded image](/media/?type=post&id=89020&key=user_uploads/233736/c8e39379-b378-45a7-a97b-7caafc1df810)\n\n### **Developers**\n\nUse HyperPilot to rapidly prototype your agents, prompts, and automations. Everything you see in HyperPilot is powered by Hyperbrowser infrastructure along with OpenAI, Anthropic, and Google DeepMind’s models.\n\nWant to build this magic into your own apps? With Hyperbrowser, you can get started using OpenAI’s CUA, Anthropic’s Claude Computer Use, and more with just a free API key and 5 lines of code.\n\nCheck out the docs here:\n\n* [Claude Computer Use on Hyperbrowser](https://docs.hyperbrowser.ai/agents/claude-computer-use)\n* [OpenAI CUA on Hyperbrowser](https://docs.hyperbrowser.ai/agents/openai-cua)\n\nGet your free API key here: \n\n_(Claude computer use on Hyperbrowser in 5 lines of code)_\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXcqYG4wQaP9VTtLxvuXkLewpbDHxUCaWa2JU8rfhb9HYJBzLjuSViGyIoV-0jhpI8-w113eSxlPbYeQpQveCIKKX25CKV1DkgyCJ9DN1PTeoQf9cU1PX-T-QvuimhOskpAY1aIF?key=SWtClCBzkj7TSIatblqhIGY5)\n\n# **Our Asks**\n\n🆓 Try the leading AI browser agents for FREE on HyperPilot: [pilot.hyperbrowser.ai](http://pilot.hyperbrowser.ai)\\\n🛠️ Developers, get your free API key and start building: \\\n🔥 Share your favorite models and use cases with us on [LinkedIn](http://linkedin.com/company/hyperbrowser) and [X](http://x.com/hyperbrowser)", "url": "https://www.ycombinator.com/launches/N9o-hyperpilot-ai-browser-agent-playground-by-hyperbrowser", "votes": 78, "created_at": "2025-03-26T21:21:30.836Z" }, { "id": 88849, "title": "Hyperbrowser MCP Server - Connecting AI to the Web 🌐 🤖", "tagline": "Connect LLMs to the web for research, coding, and automation", "body": "**TL;DR:**\n\nGive your LLMs / IDEs superpowers by connecting them to the web with Hyperbrowser's MCP. Unlock deep research, coding with live documentation, data extraction, and browser automation capabilities in 2 minutes. Install in seconds with `npx -y hyperbrowser-mcp` and use with Claude Desktop, Cursor, Windsurf, or your favorite MCP client.\n\n**ASK:** Building AI agents, developer tools, or research applications? Email us at [shri@hyperbrowser.ai](mailto:shri@hyperbrowser.ai) or [akshay@hyperbrowser.ai](mailto:akshay@hyperbrowser.ai)\n\n\n\n## ❌ The Problem\n\nLLMs are powerful but isolated. They can't:\n\n* Access real-time web information\n* Interact with websites to complete tasks\n* Generate code using up-to-date documentation (even OpenAI API calls are sometimes botched)\n* Extract structured data from multiple sources in real-time\n\n## 🛠️ Our Solution\n\nHyperbrowser MCP Server connects LLMs directly to the web through Anthropic's Model Context Protocol.\n\n`$ npx -y hyperbrowser-mcp`\n\n**Our MCP Server exposes 7 powerful tools:**\n\n\\- **Web data tools:** scrape_webpage, crawl_webpages, extract_structured_data, search_with_bing\n\n\\- **Browser automation:** browser_use_agent, openai_computer_use_agent, claude_computer_use_agent\n\nYour favorite MCP client can use the web data tools to surf the web for real-time information and data + use the browser automation tools to take actions like ordering a pizza or commenting on a GitHub pull request.\n\n## 💡 What You Can Build\n\n* **Deep Research in Cursor:** Claude, Cursor, and Windsurf can use Hyperbrowser's MCP server to do extremely deep research on any topic. No need for $200/mo ChatGPT Pro.\n* **Faster coding with AI:** Generate working code with current API docs, automate code reviews, build integrations\n* **Extract Data:** Convert web content to structured datasets, right in your claude app\n* **Automate Tasks:** Test applications, submit forms, automate UI tests\n\nCheck out this video of my cofounder vibe coding a whole game with Cursor and Hyperbrowser's MCP Server:\n\n\n\n## 🙏 Our Asks\n\n* **Try it out!** Get a free API key at [app.hyperbrowser.ai](http://app.hyperbrowser.ai) and install in your clients (instructions here - [github.com/hyperbrowserai/mcp](http://github.com/hyperbrowserai/mcp))\n* **Share this post** with AI devs and researchers\n* **Connect with us** at [shri@hyperbrowser.ai](mailto:shri@hyperbrowser.ai) and [akshay@hyperbrowser.ai](mailto:akshay@hyperbrowser.ai)\n* **Follow us** at [x.com/hyperbrowser](http://x.com/hyperbrowser) and [linkedin.com/company/hyperbrowser](http://linkedin.com/company/hyperbrowser)\n* **Join our community** on Discord - \n\n![uploaded image](/media/?type=post&id=88849&key=user_uploads/233736/98d7ef01-89f4-475b-af5b-90679a5f3097)\n\n", "url": "https://www.ycombinator.com/launches/N73-hyperbrowser-mcp-server-connecting-ai-to-the-web", "votes": 93, "created_at": "2025-03-21T00:51:31.528Z" }, { "id": 87074, "title": "Hyperbrowser - Web infrastructure for AI agents", "tagline": "AI’s Gateway to the Web", "body": "## TL;DR\n\nHyperbrowser is AI's gateway to the web. We make it dead simple to give your AI agents reliable, scalable scraping and browser automation capabilities without getting blocked or dealing with infra headaches. One API call to HB gives you a browser session with built-in stealth mode, proxy rotation, automatic CAPTCHA solving, session management, session recordings etc. Hyperbrowser is the only browser platform that lets your agents spin up 100s of concurrent browsers with sub-second start times.\n\n\n\n## Why is this important? And why now?\n\nThe web wasn't built for AI—but AI needs the web. In 2025, Agents are finally here. We've met so many companies building web-based agents who keep running into the same problems:\n\n* They keep getting blocked\n * Websites detect and shut down automation, making it hard to scale AI-driven browsing.\n* Web automation at scale is a nightmare to manage\n * Managing browser infrastructure is expensive, slow, and unreliable—especially when running thousands of concurrent sessions\n* High latency\n * High latency creates a terrible user experience and leads to frustration\n\nThe future is AI-driven agents that browse, transact, and take action. Hyperbrowser enables Agents to reliably interact with the web.\n\n## Our Solution\n\n**Core Infrastructure**\n\n* Launch thousands of undetectable browsers in <1s\n* Built-in anti-detection & stealth mode - bypasses anti-bot systems and fingerprinting\n* Automated CAPTCHA solving\n* Ultra-low latency globally distributed infrastructure\n\n**Developer Experience**\n\n* Multiple levels of abstraction:\n\n```\n// High-level API for instant results\nconst data = await client.scrape.startAndWait({\n url: \"https://example.com\",\n solveCaptchas: true\n});\n\n// Or fine-grained control when you need it\nconst session = await client.sessions.create();\nconst browser = await connect({ \n browserWSEndpoint: session.wsEndpoint \n});\n```\n\n* Full compatibility with Puppeteer, Playwright, and Selenium\n* Comprehensive session management and monitoring\n* Live stream APIs for real-time session data\n* Native integrations with LangChain, LlamaIndex, and more\n\n**Infrastructure & Scaling**\n\n* Instant browser session startup (<1s)\n* Scale from 1 to 1000s of concurrent sessions\n* Flexible pricing tiers to match your needs\n* No infrastructure management required\n\n## What People Are Building with Hyperbrowser\n\n* Web research agents automating sales and marketing research\n* AI agents booking flights and analyzing markets in real-time\n* Testing teams running 500+ concurrent browser sessions\n* Companies collecting training data for AI models at scale\n* Automated KYC/KYB processes with built-in compliance\n\n## Get Started\n\n* Try it free at  \n* Join our Discord - \n* Follow us on X - [x.com/hyperbrowser](http://x.com/hyperbrowser)\n* Follow us on LinkedIn - [linkedin.com/company/hyperbrowser](http://linkedin.com/company/hyperbrowser)\n* Email us directly: [akshay@hyperbrowser.ai](mailto:akshay@hyperbrowser.ai) or [shri@hyperbrowser.ai](mailto:shri@hyperbrowser.ai)\n\n![uploaded image](/media/?type=post&id=87074&key=user_uploads/556017/8dc23770-3861-4ce3-8426-ef5be417d5d6)\n\n", "url": "https://www.ycombinator.com/launches/MeQ-hyperbrowser-web-infrastructure-for-ai-agents", "votes": 92, "created_at": "2025-01-23T02:44:54.888Z" } ] }, { "id": 24207, "name": "Keyri", "slug": "keyri", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d204b37489e1bf0407fdab24bd4c6ec609fffd5.png", "website": "https://keyri.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Keyri helps companies implement simple, secure anti-fraud and authentication solutions to delight users and keep bad actors off their platform. Keyri's mobile application and browser fingerprinting suite ties user identities to trusted devices, preventing fraudulent activity such as account opening, account takeovers, bot attacks, and referral/promo abuse. Keyri is able to establish an immutable device fingerprint for every device, alerting companies of any suspicious devices during sign up, log in, or subsequent authentication events.\r\n\r\nKeyri also offers a passwordless authentication suite that leverages Passkeys, WebAuthn, and QR codes to enable biometric authentication on all platforms and devices, providing a seamless user experience, strengthening multi-factor account security, and reducing reliance on other tedious and unsecure authentication methods.", "one_liner": "Secure fraud prevention and authentication platform for developers", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1627569946, "tags": [ "SaaS", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/keyri", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/keyri.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/keyri-auth", "x_url": "https://twitter.com/KeyriAuth", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/keyri", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d204b37489e1bf0407fdab24bd4c6ec609fffd5.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 586106, "full_name": "Zain Azeem", "title": "Founder", "founder_bio": "Founder of Keyri (S21), an identity and security company. Exited to Signifyd, currently leading several anti-fraud analytics and engineering efforts there. Playing with drones, lasers, and local AI in my spare time. Previously worked in investment banking.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/zain-azeem/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/24299256722f10a5cfa0d45f40d01bb4ca229864.jpg" }, { "user_id": 740730, "full_name": "Saif Malik", "title": "Founder", "founder_bio": "Saif has 14 years of experience in technology and finance globally, including over 10 years in strategic advisory focused on cybersecurity and infrastructure software. Prior to GCA, Saif built and ran multiple startups, and currently is an active investor and advisor to a number of companies in the security and fintech space. Saif received his BSc in Electrical Engineering, BA in Economics, and BA in Applied Mathematics from the University of Pennsylvania.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/saif-malik-929b961a", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/99c7e3c71606548ba03fa9033cf32d1a147a3ef8.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 66336, "title": "Keyri: QR login", "tagline": "Launching Keyri self-service - Add QR login to your webpage in as little as a day.", "body": "After over a year developing an enterprise-grade authentication system, we are excited to launch our self-service platform aimed at making developer lives easier. Our solution allows you to add QR authentication to your webpage in a few simple steps. With this, you can add a QR code next to your existing login methods or go full passwordless with biometric authentication for mobile and web.\n\n### **The Problem**\n\nMobile authentication is perfect because biometrics exist on all mobile devices. Simply open an app, pass biometrics, and you’re in, yet the lack of biometric availability on many computers makes web authentication an incredible pain. It’s tedious and unsecure. \n\nWhether login entails remembering a password, entering a code, clicking an email link, or using an authenticator app, each of these solutions creates more friction than biometrics while also leaving users with reduced security. \n\nI always have my phone with me, it’s next to my computer, why can’t I extend the trust that exists on mobile biometrics to web?\n\n### **Our Solution**\n\nExtend the trust that exists with mobile biometrics to web with Keyri QR authentication. Users simply scan a QR code on your login page with their smartphone, are automatically redirected to your mobile app, and pass biometrics within your app to log into your webpage. \n\nIt’s incredibly simple biometric-based authentication paired with our advanced device intelligence and risk analytics to create the most robust phishing-resistant MFA.\n\n\n\n### **Asks**\n\nCheck it out. We would love to get your feedback at [grant@keyri.com](mailto:grant@keyri.com) or [founders@keyri.com](mailto:founders@keyri.com). We have both free and paid plans available so you can get started right away.", "url": "https://www.ycombinator.com/launches/HFw-keyri-qr-login", "votes": 18, "created_at": "2022-09-27T14:28:14.880Z" } ] }, { "id": 24275, "name": "Cloudanix", "slug": "cloudanix", "former_names": [ "Cloudanix Inc" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1209d6739765a764083573c7a354abcbce2fe009.png", "website": "https://www.cloudanix.com", "all_locations": "San Francisco, CA, USA; Sunnyvale, CA, USA", "long_description": "We help DevOps teams to improve the security of their Cloud infrastructure. Our solution value increases for companies using multi-cloud (like GCP, Azure, AWS) or have multi-accounts (like Dev, Test, Prod)", "one_liner": "Cloud and Container Security Platform", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1625633604, "tags": [ "Cloud Workload Protection", "DevSecOps", "Identity", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cloudanix", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/cloudanix.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/cloudanix", "x_url": "https://twitter.com/cloudanix", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/cloudanix", "github_url": "https://github.com/cloudanix", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1209d6739765a764083573c7a354abcbce2fe009.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 78632, "full_name": "Sujay Maheshwari", "title": "Founder", "founder_bio": "Product + Technology; Making Cloud secure, one AWS/ Azure/ GCP account at a time! ", "is_active": true, "linkedin_url": "http://www.linkedin.com/in/sujaymaheshwari/", "x_url": "https://www.twitter.com/taurusismysign", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6a6cf2d3e2dba0c8ecacc30ab82eef7db9a97657.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 24382, "name": "Malloc Inc", "slug": "malloc-inc", "former_names": [ "Malloc, LTD.", "Malloc" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6f9e51a7bd166fd06ac233b1bc31a81d599db773.png", "website": "https://mallocprivacy.com/", "all_locations": "Nicosia, Nicosia, Cyprus", "long_description": "Malloc monitors and prevents anyone from recoding or transmitting data from your mobile device without your knowledge. Malloc uses on-device AI to detect zero-click spyware and abnormal activity and blocks any suspicious communication in real time. We sell this to individuals, enterprises and governments that care about their privacy. ", "one_liner": "AI-driven mobile cybersecurity ", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626963356, "tags": [ "Privacy", "Cybersecurity", "Defense", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Cyprus", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": true, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/malloc-inc", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/malloc-inc.json", "year_founded": 2021, "city": "Nicosia", "country": "CY", "linkedin_url": "https://www.linkedin.com/company/68859929/", "x_url": "https://twitter.com/MallocPrivacy", "fb_url": "https://www.facebook.com/mallocprivacy", "cb_url": "https://www.crunchbase.com/organization/malloc-05ff", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/6f9e51a7bd166fd06ac233b1bc31a81d599db773.png", "app_video_url": null, "dday_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/video_event/54/1630618022265-acxzfezjf07-35c3ea3ebb9324b0ab3d5b405802c007/ac1e6283178fdc5aa9eeb9de9d92db55.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAQC4NIECABPQ2AHNW%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022659Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=85f48bf7ae03051adecb09164bc03b8297fe33d105264d753b36257b2ce25c3e", "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/264567834956d1eaadf02e9ea3e11dd1af3bb4f7.png" ], "primary_partner": null, "founders": [ { "user_id": 596801, "full_name": "Maria Terzi", "title": "Founder", "founder_bio": "Maria Terzi is the co-founder and CEO of Malloc. Maria holds a Ph.D. in Machine Learning and Recommender Systems. During her Ph.D., she won two Google hackathons and has previously worked at Google. Maria holds extensive experience in R&D in the areas of data analysis, machine learning, secure and private AI. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/maria-terzi/", "x_url": "https://twitter.com/mariankh_", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c6a08f6a3943d618936dbd6c2c77dfc7a7727858.jpg" }, { "user_id": 600671, "full_name": "Liza Charalambous", "title": "Founder", "founder_bio": "Liza Charalambous is a Digital Security expert with 8+ years of experience in the ideation and implementation of (cyber) security projects. Liza holds a PhD in machine learning, as well as academic titles in signal processing and AI and digital communications. Over the years, she collaborated with various privately owned and public organizations to provide solutions that improve users’ quality of life. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/lzcharalambous/", "x_url": "https://twitter.com/lzcharalambous", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bdcacd6c9da58df1227d94eb366d5e3b567653c6.jpg" } ], "jobs": [], "news": [ { "title": "Towards a privacy-conscious internet - Hunting Greek Unicorns #38", "url": "https://startuppirate.substack.com/p/hunting-greek-unicorns-38", "date": "Oct 01, 2021" }, { "title": "YC-backed Malloc wants to take the sting out of mobile spyware – TechCrunch", "url": "https://techcrunch.com/2021/09/27/y-combinator-malloc-spyware/", "date": "Sep 27, 2021" } ], "launches": [] }, { "id": 24604, "name": "Telivy", "slug": "telivy", "former_names": [ "Telivy", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c2b737c315b075b967ccb0e8aa0683e1b37cef2.png", "website": "https://www.telivy.com", "all_locations": "San Francisco, CA, USA", "long_description": "Telivy helps small and medium businesses purchase the best cyber insurance coverage. Our proprietary ML-based risk platform assesses insurability gaps, offers remediation plans and brokers insurance quotes from A+ rated carriers. ", "one_liner": "Automate your cyber security risk assessments", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1629349306, "tags": [ "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/telivy", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/telivy.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/telivy/", "x_url": "https://twitter.com/TelivyInsurance", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c2b737c315b075b967ccb0e8aa0683e1b37cef2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 162837, "full_name": "Naren Sathiya", "title": "Founder", "founder_bio": "Naren is interested in the intersection of finance and technology, and views the insurance industry as a data science problem to be optimized on. He joined Hippo Insurance as an early engineer and led its embedded distribution channel with homebuilders, which became over 20% of its revenue within 1.5 years. He hopes to build similar workflows and user experience for the commercial industry, starting with cyber and compliance companies. In his free time, he likes to mountain bike, swim and hike. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/naren-sathiya-01197a19", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/af2fb864fbbb5250ab04f3075019229a9c85eb04.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 24679, "name": "idemeum", "slug": "idemeum", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/114a9a76a8ee453baff49fa40d74bd24651c0907.png", "website": "https://www.idemeum.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "AI agents analyze every application execution on Windows and macOS. You decide what is allowed to run. ", "one_liner": "AI-powered Application Control", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626910054, "tags": [ "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/idemeum", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/idemeum.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/idemeum/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/114a9a76a8ee453baff49fa40d74bd24651c0907.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 657538, "full_name": "Nik Poturnak", "title": "Founder", "founder_bio": "Passionate about building security products. Led product teams at VMware, Facebook, FireEye, and Cisco. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/npoturnak/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b9c3e7cb698fe9407bbbd50e43dc0136bf6b9a49.jpg" }, { "user_id": 695344, "full_name": "Jagjit Sethi", "title": "Founder", "founder_bio": "Jagjit Sethi is the co-founder and CTO of Idemeum, a passwordless Identity Provider for small and medium businesses. Prior to Idemeum, Jagjit was a Director of Engineering at VMware where he was responsible for building Cloud-First distributed scalable system, global engineering teams and driving architectural responsibilities. Before joining VMware, Jagjit worked at Concept Tapistry, Flexera, i2 technologies and a startup company.", "is_active": true, "linkedin_url": "http://www.linkedin.com/in/jagjit-sethi-aa012b4", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fdda1d18d40bda9323984a73b989dc670a27f4e7.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 24725, "name": "ContraForce", "slug": "contraforce", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/432a4f78b4ff1733ad967eccea1a465f5a83c959.png", "website": "https://www.contraforce.com", "all_locations": "McKinney, TX, USA; Remote", "long_description": "ContraForce delivers a first-of-its-kind Security Delivery Platform that automates security engineering, AI-operator workflows, and multi-tenant incident response for Service Providers and Teams. Our platform orchestrates supervised or autonomous AI agents to run triage, investigation, response, and documentation at scale.", "one_liner": "Security Delivery Platform to orchestrate AI agents for Service…", "team_size": 15, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626391321, "tags": [ "SaaS", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/contraforce", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/contraforce.json", "year_founded": 2021, "city": "McKinney", "country": "US", "linkedin_url": "https://www.linkedin.com/company/contraforce", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/contraforce", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/432a4f78b4ff1733ad967eccea1a465f5a83c959.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 416762, "full_name": "Stanislav Golubchik", "title": "Founder/CEO", "founder_bio": "Stan Golubchik is CEO and Co-Founder of ContraForce. He has been in the IT and Cybersecurity space for 15 years. Bringing extensive experience in executive roles at McAfee, and Armor Cloud Security. Stan started his career working in a NOC and found his footing in cybersecurity when joining Intel Security. He possess several certifications and is passionate of building future innovation and leaders within the space.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/stan-golubchik/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/817f0689afd7d5f0ad0e76daa4b3208b4b4985bd.jpg" } ], "jobs": [], "news": [ { "title": "ContraForce Announces $2M Seed Investment from DataTribe | Business Wire", "url": "https://www.businesswire.com/news/home/20211221005065/en/ContraForce-Announces-2M-Seed-Investment-from-DataTribe", "date": "Feb 09, 2022" }, { "title": "Security automation firm ContraForce inks $2m seed | FinTech Global", "url": "https://member.fintech.global/2021/12/23/security-automation-firm-contraforce-inks-2m-seed/", "date": "Dec 23, 2021" }, { "title": "No-Code Security Automation Funding: ContraForce Raises $2 Million - MSSP Alert", "url": "https://www.msspalert.com/investments/no-code-security-automation-company-contraforce-raises-2-million/", "date": "Dec 22, 2021" }, { "title": "Security-as-a-service startup ContraForce launches into general availability with $2M in funding - SiliconANGLE", "url": "https://siliconangle.com/2021/12/21/security-service-startup-contraforce-launches-general-availability-2m-funding/", "date": "Dec 21, 2021" } ], "launches": [] }, { "id": 24823, "name": "Protego", "slug": "protego", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/d3734c55745b1bc2f44cad8282c8cfa0c0e4f9bc.png", "website": "https://www.protegosolutions.io/", "all_locations": "Bogotá, Bogota, Colombia; Remote", "long_description": "Protego helps companies recover lost revenue from chargebacks. The company automates chargeback management and dispute processes. It provides real-time monitoring, reporting, and analytics on chargeback information for providing valuable insights into fraudulent consumer behavior.", "one_liner": "We help companies recover lost revenue from chargebacks", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1628103792, "tags": [ "SaaS", "B2B" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "Colombia", "Latin America", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/protego", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/protego.json", "year_founded": 2021, "city": "Bogotá", "country": "CO", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/d3734c55745b1bc2f44cad8282c8cfa0c0e4f9bc.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 732400, "full_name": "Pablo Rojas", "title": "Founder", "founder_bio": "Pablo Rojas, co-founder and CEO. Prior to founding Protego, Pablo led Rappi Bank's Onboarding and Know Your Customer (KYC) for Latam and helped structure the company's chargeback reconciliation process. He also co-founded a non-profit organization that improves the living conditions of vulnerable social sectors, victims of extreme poverty and armed conflict in Colombia.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/pablo-rojas-contreras-0a3525140/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f5dc1faeb82807158c1c6d6eb01cf08d575ad8ca.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 25061, "name": "Optery", "slug": "optery", "former_names": [ "Optery", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/02ca984c664acd671be4123ea5824a7fbc55c95c.png", "website": "https://www.optery.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Optery is automated opt out software, and we serve individuals, families and businesses. With Optery, you can remove yourself from hundreds of data brokers that are posting and selling your home address, phone number, email and other private information on the internet. \r\n\r\nOptery received the “Editors’ Choice” award by PCMag as the most outstanding product in the personal data removal category in 2022, 2023, 2024, 2026 and 2026, the Cybersecurity Excellence Awards for Attack Surface Management, Digital Footprint Management, and Employee Privacy Protection in 2024 and 2025, Cyber Defense Magazine’s Top InfoSec Innovator and Best Attack Surface Management awards in 2024 and 2025, the 2025 Fortress Cybersecurity Award for Privacy Enhancing Technologies, and Fast Company’s Next Big Things in Tech award for security and privacy in 2023. In 2025, Optery was also listed by Business Insider as one of 30 early-stage startups most likely to become a unicorn.\r\n\r\nOptery prevents phishing and social engineering, identity theft and fraud, online stalking and harassment, ransomware, doxxing, and prevents people's private information from showing up in Google search results. \r\n\r\nAnyone can create a free account to receive a personalized Exposure Report with live screenshots summarizing where your information is being posted and sold online. Optery then provides free tools for self-service removals, or you can upgrade to a paid plan, and Optery will remove the profiles for you.\r\n\r\nOptery for Business serves enterprises removing personal information from the internet for their employees and executives, and offers an API enabling application developers to embed data broker scanning and removal technology into their applications.", "one_liner": "Opt out software that removes your private info from the internet", "team_size": 55, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1634074023, "tags": [ "SaaS", "Consumer", "Security", "Privacy", "Enterprise Software" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/optery", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/optery.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/optery/", "x_url": "https://twitter.com/Optery", "fb_url": "https://www.facebook.com/optery", "cb_url": "https://www.crunchbase.com/organization/optery", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/02ca984c664acd671be4123ea5824a7fbc55c95c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/6f927a2326d44d21ae5eaf48f06378ebcd0de7c7.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 73300, "full_name": "Lawrence Gentilello", "title": "Founder", "founder_bio": "As CEO and Founder, Lawrence grew Optery to $20M+ ARR, 1M+ users, and profitability prior to its acquisition by Surfshark. Lawrence also co-founded the remote collaboration company Screenleap and launched the first online facebook at Stanford in 1999. Lawrence is an alumnus of Stanford (BA), Duke (MBA), and Y Combinator (Optery (W22) and Screenleap (W12)).", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gentilello", "x_url": "https://twitter.com/gentilello", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d03c2c80fdbd7e671f17b1f557a9f3900d66ab5c.jpg" }, { "user_id": 44895, "full_name": "Chen Atlas", "title": "Founder", "founder_bio": "Chen is CTO and Founder at Optery. Prior to founding Optery, Chen was tech lead and architect for 50+ engineers at Runa HR. Prior to Runa HR he was Co-Founder and CTO of As You Stay, and Cleanly, the on-demand laundry service. Chen was recruited out of high school by the Israel Defense Forces (Mamram) to build logistics platforms and is an expert in building large scale complex systems with high availability. Chen is an alumnus of Bar-Ilan University (BA) and Y Combinator (Cleanly, W15).", "is_active": true, "linkedin_url": "http://www.linkedin.com/in/atlaschen", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e9eb8ccd2121e0b1121cbbbfa690198b0abc57e7.jpg" } ], "jobs": [], "news": [ { "title": "Best Data Removal Services of 2026: Reduce Your Online Presence | CNET", "url": "https://www.cnet.com/tech/services-and-software/best-data-removal-services/", "date": "Jul 02, 2026" }, { "title": "Optery Review: An Effective, but Expensive, Data Removal Service | CNET", "url": "https://www.cnet.com/tech/services-and-software/optery-review/", "date": "Jul 02, 2026" }, { "title": "How your personal data is being sold legally online - and used by hackers to steal millions, report warns | Daily Mail Online", "url": "https://www.dailymail.com/news/article-15878519/Personal-data-sold-online-hackers-steal-millions.html", "date": "Jun 05, 2026" }, { "title": "Optery's Rapid Growth Highlights Soaring Demand for Data Privacy | BriefGlance.com", "url": "https://briefglance.com/articles/opterys-rapid-growth-highlights-soaring-demand-for-data-privacy", "date": "Apr 01, 2026" }, { "title": "Meet 25 of San Francisco's High Growth Companies—And They're Not All in AI | Inc.com", "url": "https://www.inc.com/mariapaula-gonzalez/meet-25-of-san-francisco-fast-growing-companies-not-all-ai-startups/91322555", "date": "Mar 31, 2026" } ], "launches": [] }, { "id": 25275, "name": "Strac", "slug": "strac", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5810f2cdca1ab3fedc5a811643be13d5387e300c.png", "website": "https://www.strac.io/", "all_locations": "Seattle, WA, USA", "long_description": "Strac is an agentless Data Discovery (aka DSPM - Data Security Posture Management), Data Classification & DLP (Data Leak Prevention) that automatically discovers, classifies and remediates sensitive data (alert, label, redact, mask, block, delete). \r\n\r\nStrac protects SaaS, Cloud, Gen AI, Browsers, On-Prem and Endpoints like O365, Slack, GDrive, AWS, Salesforce, ChatGPT, Jira, Mac, Zendesk, Azure, On-Prem (On-Prem, MS SQL SAP) and 40+ integrations. \r\n\r\nStrac protects enterprise companies like UiPath, Databricks, thredUP, B Capital, Crypto (dot) com!", "one_liner": "Data Discovery, DLP, DSPM for SaaS, Cloud, Gen AI & Endpoints", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1641604614, "tags": [ "Generative AI", "SaaS", "Security", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/strac", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/strac.json", "year_founded": 2021, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/securewithstrac/", "x_url": "https://twitter.com/securewithstrac", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5810f2cdca1ab3fedc5a811643be13d5387e300c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 835087, "full_name": "Aatish M", "title": "Founder", "founder_bio": "Aatish is the Founder & CEO of Strac (YC W22), an AI-powered data security company helping enterprises secure sensitive data across AI, MCP, SaaS, cloud, endpoints, and browsers.\n\nBefore founding Strac, he spent 11 years at Amazon as a Principal Engineer, building and securing critical payments infrastructure, including systems protecting credit card data, bank accounts, and payment transactions at scale.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/aatishmandelecha/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e6ff8151c72e1f1782cfc46dc4e62850e1e12c70.jpg" } ], "jobs": [ { "id": 51085, "title": "Sales Development Representative (SDR)", "url": "https://www.ycombinator.com/companies/strac/jobs/y0Mopqu-sales-development-representative-sdr", "location": "US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$60K - $65K", "equity_range": "0.05% - 0.15%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 55289, "title": "Senior Software Engineer", "url": "https://www.ycombinator.com/companies/strac/jobs/aqRX4ow-senior-software-engineer", "location": "Redmond, WA, US / Seattle, WA, US / Bellevue, WA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$110K - $160K", "equity_range": "0.01% - 0.20%", "experience": "3+ years", "visa": "Will sponsor", "skills": [ "Amazon Web Services (AWS)", "Java", "JavaScript", "Node.js", "Python", "Elasticsearch", "Linux", "Machine Learning", "Serverless" ] }, { "id": 70821, "title": "Head of Marketing", "url": "https://www.ycombinator.com/companies/strac/jobs/8DFTfAp-head-of-marketing", "location": "US / Remote (US)", "type": "Full-time", "role": "Marketing", "role_type": null, "salary_range": "$100K - $150K", "equity_range": "0.05% - 0.20%", "experience": "6+ years", "visa": "Will sponsor", "skills": [] }, { "id": 83243, "title": "Account Executive", "url": "https://www.ycombinator.com/companies/strac/jobs/e5KNH2P-account-executive", "location": "Seattle, WA, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$75K - $150K", "equity_range": "", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 87272, "title": "Software Engineer (India)", "url": "https://www.ycombinator.com/companies/strac/jobs/owZm2hV-software-engineer-india", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN / Pune, MH, IN / Pune, Maharashtra, IN / Mumbai, MH, IN / Mumbai, Maharashtra, IN", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "₹2.5M - ₹5M INR", "equity_range": "0.01% - 0.10%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 88031, "title": "Senior Full Stack Software Engineer", "url": "https://www.ycombinator.com/companies/strac/jobs/LC8K6PL-senior-full-stack-software-engineer", "location": "Austin, TX, US / Seattle, WA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$140K - $210K", "equity_range": "0.01% - 0.20%", "experience": "6+ years", "visa": "Will sponsor", "skills": [ "Amazon Web Services (AWS)", "Java", "JavaScript", "Python", "Serverless" ] } ], "news": [ { "title": "Seattle-area cybersecurity startup led by former Amazon principal engineer lands $3.5M – GeekWire", "url": "https://www.geekwire.com/2022/seattle-area-cybersecurity-startup-led-by-former-principal-engineer-lands-3-5m/", "date": "Jul 21, 2022" }, { "title": "Strac plugs into Slack, OneDrive and more to automatically redact sensitive info – TechCrunch", "url": "https://techcrunch.com/2022/07/19/strac-plugs-into-slack-onedrive-and-more-to-automatically-redact-sensitive-info/", "date": "Jul 19, 2022" } ], "launches": [ { "id": 65668, "title": "🔒 Strac Zendesk Redactor", "tagline": "Protect Your Zendesk Account & Comply with Privacy Laws!", "body": "Hi YC!\n\nI'm [**Aatish**](https://www.linkedin.com/in/aatishmandelecha/) and today we're excited to launch **Strac’s Zendesk Redactor!**\n\n## **Problem 😠**\n\nCustomers post sensitive personal information (PII or PHI) on zendesk tickets for a given business function. Some of the burning reasons on why your Zendesk account needs to be protected:\n\n* **Data Leaks:** All organizations are subject to security attacks. Zendesk is also not immune. In 2016 Zendesk was subject to a [data breach exposing 10,000 Zendesk accounts](https://support.zendesk.com/hc/en-us/articles/4408824583578-Updated-FAQ-regarding-2016-Security-Incident-) where sensitive PII (Personally Identifiable Information) was accessed.\n* **Insider Attacks:** Between 2018 and 2020, there was a [47% increase in insider threat incidents](https://www.tessian.com/blog/insider-threat-statistics/). This includes malicious data exfiltration and accidental data loss.‍\n* **Compliance:** Every day government legislation is passing Consumer Privacy laws geared to protect consumer data from malicious entities. California and Illinois have been the latest to introduce these laws, including a Biometric Information Privacy Act. For many organizations, data can be spread across a wide range of systems, which can be challenging to keep up with Privacy law enactments. It is a nightmare for companies to do manual cleanup of those sensitive messages sitting within your employee's zendesk account as deep inspection is time consuming and error-prone. At the same time, you need to stay compliant and prevent exfiltration of sensitive data.\n\n## **Solution** 🚀\n\nStrac Zendesk App is a Data Loss Prevention (DLP) software. It masks (aka redacts) sensitive comments and attachments while still giving the opportunity to authorized users to view those zendesk tickets in Strac UI Vault. A business can configure a list of sensitive data elements (SSN, DoB, DL, Passport, CC#, Debit Card, API Keys, etc.) to redact. Compliance, Risk and Security officers will get audit reports of who accessed what messages.\n\nBelow is a sample list of sensitive data elements that will be detected & redacted:\n\n* PII: Name, Address, Email, Phone, DoB, Age, Gender, Ethnicity, etc.\n* Identification: Drivers License, Passport, SSN (Social Security Number), etc.\n* Payments: Credit Card, Debit Card, Bank Account, Routing Numbers, etc.\n* Credentials: API Keys, Passwords, Passphrases etc.\n* Crypto Secrets: Bitcoin, Ethereum, Litecoin Addresses, etc.\n* PHI: PII data, Medical Record Number (MRN), Medical Notes, etc.\n* Physical Network: IP Addresses, MAC Address, etc.\n* Custom: Create your own rules or use regex\n\nPlease checkout our demo: \n\n### **YC Offer 🎉**\n\n1. FREE Redaction for your entire Zendesk account\n2. Book a Demo on our website: ", "url": "https://www.ycombinator.com/launches/H5A-strac-zendesk-redactor", "votes": 15, "created_at": "2022-08-29T00:00:01.894Z" } ] }, { "id": 25433, "name": "JumpWire", "slug": "jumpwire", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/077148a8281f282d5a5d6825d93aedf0b71c08b4.png", "website": "https://jumpwire.io", "all_locations": "New York City, NY, USA; New York, NY, USA; Remote", "long_description": "JumpWire is a data protection platform that adds advanced data security controls between APIs, applications and databases. JumpWire automatically identifies sensitive properties inside large data sets and gives developers full control over which people and applications can access or update records containing sensitive info.\r\n\r\nExamples uses include restricting who can read customer PII to members of the customer service team, giving on-call engineers elevated access to production, or splitting user records between regions for GDPR purposes.\r\n\r\nJumpWire’s approach to securing data in-place minimizes the risk of data leaks exposing sensitive information or mishandling by other applications and vendors. The exact security scheme applied to data is defined by policies that align with an organization’s existing InfoSec program.\r\n\r\nJumpWire helps companies who maintain information security with compliance programs such as SOC or HIPAA. They are processing sensitive data, often from their own customers, and exceed security best practices as a competitive advantage. JumpWire provides defense at depth to data and sits alongside access controls and Layer 4 encryption to provide a comprehensive data security solution.\r\n\r\nJumpWire is unique from solutions such as data vaults by installing inside our customers’ own infrastructure and clouds. It is interoperable with existing applications and databases, which eliminates the need for large data migrations or code refactoring. Lower-level approaches to data security, such as encryption at rest, are too blunt and lack the ability to differentiate between properties in the data itself. Its scope is limited to physical storage, and security is lost as soon as an application or query loads the data.", "one_liner": "Dynamic access controls for all data and databases", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1644446688, "tags": [ "Security", "Data Labeling", "Databases" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/jumpwire", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/jumpwire.json", "year_founded": 2021, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/jumpwire", "x_url": "https://twitter.com/jumpwire_ai", "fb_url": null, "cb_url": null, "github_url": "https://github.com/extragoodlabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/077148a8281f282d5a5d6825d93aedf0b71c08b4.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 823026, "full_name": "Ryan Cooke", "title": "Founder", "founder_bio": "Ryan has spent his career working in startups, with a passion for creating innovative technology products. JumpWire participated in the YC W22 batched, and was acquired by WorkOS in 2024. Ryan has previously co-founded and led engineering teams at Docurated, N26 and Orum (acquired by Stripe). He's obsessed with running his own AI, and particularly enjoys building teams aside software.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ryancooke/", "x_url": "https://x.com/mapandfold", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/36cbdb63975aa38768f2c1241ebb5034d7c15861.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 25527, "name": "Munily", "slug": "munily", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/13df6243cbbce163d95235b9604ed80a95d8e734.png", "website": "https://munily.com/#/", "all_locations": "Panama City, Panama, Panama; Remote", "long_description": "There are three key roles among a community:\r\n\r\nThe security Guard\r\nThe resident \r\nThe administrator \r\n\r\n\r\nWhen a visitor tries to access a designated community, the security guard must require an ID previously to allow entry. \r\n\r\nHe proceeds to communicate with a specific resident through a intercom which is almost always broken or under repair, delaying the visitor’s entry to the compound \r\n\r\n\r\nWE come in, by interconnecting the security guard with the resident and the administrators through an app and a tablet we provide to make all the process of access pretty smooth and easy.\r\n\r\n\r\nWhen a visitor comes in, the security guard must only:\r\n\r\nTake a picture of its ID, using the tablet, \r\nSelect the apartment, so the resident receives a pop up notification through which they can deny or approve the access. \r\n\r\nLast but not least, An even easier way has been developed by Munily which utilizes QR codes generated through Whatsapp. Which visitors just show and security guards scan to allow entry. \r\n\r\n", "one_liner": "Access control management app for Latam´s gated communities", "team_size": 30, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1639767336, "tags": [ "Proptech" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Panama", "Latin America", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/munily", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/munily.json", "year_founded": 2019, "city": "Panama City", "country": "PA", "linkedin_url": "https://www.linkedin.com/company/munilyapp", "x_url": "https://twitter.com/munily_app", "fb_url": "https://www.facebook.com/munilyappp", "cb_url": "https://www.crunchbase.com/organization/munily", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/13df6243cbbce163d95235b9604ed80a95d8e734.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 424409, "full_name": "Marwa Hage", "title": "Founder", "founder_bio": "Co-founder & CCO of Munily App | PropTech Entrepreneur | Women Empowerment | Community Building | Writer | TEDx Organizer | Speaker", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/marwa-hage-771a1a154/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ca19202fe25856c91a37403400cba883ff901692.jpg" }, { "user_id": 548571, "full_name": "Khaled Alhaj", "title": "Founder", "founder_bio": "CEO of Munily App - Panama City", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/khaled-alhaj-156a05116/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/37dfc141141b6a189d06e194733d59740c702be0.jpg" }, { "user_id": 424435, "full_name": "Mitchell Contreras", "title": "Founder", "founder_bio": "I enjoy solving problems. I like listening to people's experiences and being able to make the most of their experiences", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/mitchell-contreras/", "x_url": "https://twitter.com/_mitarcon", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/597b25cfe99ee7eed562e64c014dbbf44d05505d.jpg" }, { "user_id": 423754, "full_name": "carlos de la guardia", "title": "Founder", "founder_bio": "Carlos is a second-time entrepreneur currently COO at Munily where he and his team are making Latam residential communities more secure and connected.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/carlosgj/", "x_url": "https://twitter.com/carlosdelagj", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bdff47d258db517bf8eda24edc26a51e2123d305.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 25552, "name": "Firezone", "slug": "firezone", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b332f151ea2bb27aee388d55b28c0e973525f259.png", "website": "https://www.firezone.dev", "all_locations": "San Francisco, CA, USA", "long_description": "Firezone connects your workforce to the computing resources they need, wherever they are, securely. Unlike traditional VPNs, Firezone uses a least-privileged approach to access control known as Zero Trust Access.\r\n\r\nConnect your identity provider and define granular policies in minutes, then rejoice in the IT support requests you won't receive due to our lightweight, WireGuard-powered clients which work great on all platforms.", "one_liner": "Easiest way to set up Zero Trust Access for your team", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1646247402, "tags": [ "DevSecOps", "Next-gen Network Security", "B2B", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/firezone", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/firezone.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://linkedin.com/company/firezonehq", "x_url": "https://twitter.com/firezonehq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/firezone", "github_url": "https://github.com/firezone", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b332f151ea2bb27aee388d55b28c0e973525f259.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 429817, "full_name": "Jamil Bou Kheir", "title": "Founder", "founder_bio": "\nPrevious:\n8 years at Cisco as a security engineer in various capacities.\n4 years as a fullstack contractor building web apps for startups.\n2 years building and traveling in my tiny hacker house (pics: https://imgur.com/a/ujsmGH7).\n\n\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/jamilbk", "x_url": "https://twitter.com/jamilbk", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f09e58ac5e096d9211eb3b5a0dd086f8699520e9.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 25583, "name": "Bunkyr", "slug": "bunkyr", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/bab71568a30f64680488b01543947e165355c6d6.png", "website": "https://bunkyr.com", "all_locations": "Denver, CO, USA", "long_description": "Bunkyr enables companies to protect their users’ data with a simple, hardware-secured API. When a user forgets their password, applications using Bunkyr can provide them a familiar, robust recovery method to restore access to encrypted data.\r\n\r\nZero-Knowledge architectures and end-to-end encryption are the only true safeguards against data breaches, but come with large user-experience burdens and engineering overhead. Bunkyr eliminates these obstacles in a way that is friendly to both developers and users, cost-effective, and extremely fast.\r\n\r\nUsers won’t even know Bunkyr exists, while their data stays protected against both breaches and lost passwords.", "one_liner": "Zero-Knowledge security without seed phrases or backup codes", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1646850303, "tags": [ "Developer Tools", "SaaS", "Crypto / Web3", "B2B", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/bunkyr", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/bunkyr.json", "year_founded": 2021, "city": "Denver", "country": "US", "linkedin_url": "https://linkedin.com/company/bunkyr", "x_url": "https://twitter.com/Bunkyr", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/bunkyr", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/bab71568a30f64680488b01543947e165355c6d6.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [], "jobs": [], "news": [ { "title": "Bunkyr raises over $1M to bring frictionless security to developers and end users • Bunkyr", "url": "https://bunkyr.com/blog/posts/2022/06/16-pre-seed-funding", "date": "Jun 16, 2022" } ], "launches": [] }, { "id": 25589, "name": "Palitronica Inc", "slug": "palitronica-inc", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f4754ff74fb207d2ef16e60bc4582800b2583251.png", "website": "https://palitronica.com", "all_locations": "Kitchener, ON, Canada; Remote", "long_description": "Palitronica builds and deploys cutting-edge solutions to defend critical physical infrastructure and its supply chain.\r\n\r\nBy using side-channel information from endpoints, Palitronica provides a safe attack detection capability retrofittable to critical systems.", "one_liner": "Detect cyber attacks on critical physical infrastructure", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1639062247, "tags": [ "Hard Tech", "Hardware", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/palitronica-inc", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/palitronica-inc.json", "year_founded": 2019, "city": "Kitchener", "country": "CA", "linkedin_url": "https://www.linkedin.com/company/76565236", "x_url": "https://twitter.com/palitronica", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/palitronica", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f4754ff74fb207d2ef16e60bc4582800b2583251.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 857302, "full_name": "Sebastian Fischmeister", "title": "Founder", "founder_bio": "Sebastian Fischmeister is the CEO and co-founder of Palitronica Inc, Professor at the University of Waterloo, and has over 20 years of R&D experience in safety and security of safety-critical embedded systems. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sebastian-fischmeister-3a07a86/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/969e2d8d9dd6a38e96f447f47135c6b1df9e3c35.jpg" }, { "user_id": 864134, "full_name": "Carlos Moreno", "title": "Founder", "founder_bio": "I am an electronics engineer with a passion for both analog and digital electronics. Originally, my passion for the analog side manifested as an audiophile and enthusiast about all electronics for high-end audio, whereas my passion for the digital side manifested as an embedded systems and later a computer security enthusiast. Fate had it that modern cybersecurity would leverage the analog-domain side of digital electronics — found my real passion in the world of embedded systems security!", "is_active": true, "linkedin_url": "https://ca.linkedin.com/in/carlos-moreno-76a0626", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/79d7f7a29f1098e6a94a72c92066853e531b97af.jpg" } ], "jobs": [], "news": [ { "title": "Palitronica Selected to Advance Aerospace Cyber Mission Assurance", "url": "https://www.palitronica.com/news/palitronica-selected-to-advance-aerospace-cyber-mission-assurance", "date": "Mar 13, 2022" }, { "title": "Newsroom | Palitronica Accepted into Y Combinator", "url": "https://www.palitronica.com/news/palitronica-accepted-into-the-prestigious-y-combinator-accelerator", "date": "Dec 09, 2021" } ], "launches": [] }, { "id": 25696, "name": "Agency", "slug": "agency", "former_names": [ "Achilleion" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0b9732a89bf577bd80a0c7d0b377bd35fcce86ce.png", "website": "https://GetAgency.com", "all_locations": "New York City, NY, USA", "long_description": "Agency replaces traditional security and compliance headcount with AI without replacing your existing tools.\r\n\r\nOur platform is operated by forward-deployed engineers who run your entire security and compliance program including full virtual CISO coverage on your behalf. All powered by our proprietary AI agents.\r\n\r\nAgency is a vertically integrated AI platform and services company that enables organizations to achieve and maintain SOC 2, ISO 27001, CMMC 2.0, HIPAA, GDPR, FedRAMP, HITRUST, ISO 42001, and more without building internal teams. We integrate with leading GRC platforms like Vanta and Drata and security tools like CrowdStrike.\r\n\r\nAt its core is our proprietary cybersecurity and GRC orchestration layer powering a suite of AI systems that execute end-to-end security and compliance operations: control implementation, evidence collection, monitoring, vendor risk, penetration testing, and audit coordination — across complex environments like BYODs, contractor fleets, and multi-party systems. Things that GRC automation platforms can't do.\r\n\r\nWe deliver this through two distinctly separate products:\r\n\r\nAgency Comply — forward-deployed engineers who operate the platform, implement controls, run compliance programs, and manage security end-to-end\r\n\r\nAuditsuisse Assurance — our US and Swiss licensed CPA firm, powered by Auditsuisse AI, delivering independent SOC and global audits with speed and rigor. (Auditsuisse does not audit Agency Comply customers).\r\n\r\nAgency serves startups through enterprises building in high-stakes environments — AI, defense, aerospace, fintech, and healthcare — replacing fragmented tools and large internal teams with a single AI-driven system of execution.", "one_liner": "Agency replaces traditional security and compliance headcount with AI.", "team_size": 50, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1641532353, "tags": [ "SaaS", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/agency", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/agency.json", "year_founded": 2020, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/getagency22", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0b9732a89bf577bd80a0c7d0b377bd35fcce86ce.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 617735, "full_name": "Amir Tarighat", "title": "Founder", "founder_bio": "Amir Tarighat is the cofounder and CEO of Agency. He's a developer, cybersecurity expert, and digital privacy advocate. Amir graduated from Harvard University, and studied Advanced Computer Security at Stanford. He lives in NYC.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/atarighat/", "x_url": "https://twitter.com/ATarighat", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1d7a628aa15e2bfcaa1933cacc991e7b62589641.jpg" }, { "user_id": 860213, "full_name": "Tyler Carbone", "title": "Founder", "founder_bio": "Co-Founder at Agency, where we provide personal cybersecurity + coverage. Previous founder Terbium Labs (sold to Deloitte), Evenspring (sold to Timmons Group) and SRRN Games.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tylercarbone/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f2da9b5c5fc4f09cb374472f05b9828a31d4b7e0.jpg" } ], "jobs": [ { "id": 83758, "title": "Sales Development Representative / Business Development Rep", "url": "https://www.ycombinator.com/companies/agency/jobs/247LpHO-sales-development-representative-business-development-rep", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$65K - $75K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [] }, { "id": 25763, "name": "Cinder", "slug": "cinder-2", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/11e79fdb615e4008b53b6d456fb9c93446ae9d40.png", "website": "https://cinder.ai", "all_locations": "New York City, NY, USA", "long_description": "From content moderation to AI safety, Cinder empowers businesses to orchestrate and automate digital safety at scale. Cinder was founded to help organizations foster safe online spaces for everyone. Our platform empowers companies from start-ups to enterprises with end-to-end capabilities to mitigate harm, investigate abuse, and produce trustworthy and reliable AI outcomes. Building your world-class company means keeping your users and community safe—Cinder unlocks faster growth by making safety easy. We work with customers in every industry from frontier AI labs to e-commerce and social media. \r\n\r\nWe're hiring across a variety of teams and looking for candidates based in NYC or open to relocating to NYC, and able to work in-person.", "one_liner": "Infrastructure to protect companies from AI abuse", "team_size": 30, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1647554051, "tags": [ "SaaS", "B2B", "Compliance", "Trust & Safety", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cinder-2", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/cinder-2.json", "year_founded": 2022, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/cinder-intelligence", "x_url": "https://x.com/cinderplatform", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/11e79fdb615e4008b53b6d456fb9c93446ae9d40.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 841637, "full_name": "Glen Wise", "title": "Founder", "founder_bio": "ex-USG ex-Meta\n\nAfter graduating from Carnegie Mellon, Glen joined Facebook as a security engineer to lead the build out of their community threat intelligence platform, working directly with Phil Brennan for over 3 years. Glen started Cinder in 2021 to help other companies solve similar trust and safety problems.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/glenwise/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/be59873055180ea52150a3920e31d899baa6d113.jpg" }, { "user_id": 962055, "full_name": "Phil Brennan", "title": "Founder", "founder_bio": "Phil joined Facebook in 2017 to build out their community threat intelligence team, after running counterterrorism units for the US government. Phil worked with Glen Wise for several years at Facebook before joining him to co-found Cinder. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/philip-brennan-33598610a/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/65ee4ef82f6bdbada3d3c0c1a2b352a237cf00f9.jpg" } ], "jobs": [ { "id": 63136, "title": "Senior Software Engineer - Full Stack", "url": "https://www.ycombinator.com/companies/cinder-2/jobs/lvPOl4P-senior-software-engineer-full-stack", "location": "New York", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$190K - $250K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "Django", "GraphQL", "PostgreSQL", "Python", "React", "TypeScript" ] }, { "id": 97133, "title": "Enterprise Account Executive", "url": "https://www.ycombinator.com/companies/cinder-2/jobs/nVoqYnT-enterprise-account-executive", "location": "New York, NY, US / San Francisco, CA, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$150K - $175K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Cinder Series B Announcement | Cinder", "url": "https://cinder.ai/series-b", "date": "May 12, 2026" }, { "title": "A former Meta employee built a $14M-strong trust and safety startup. Meet Cinder - Technical.ly", "url": "https://technical.ly/startups/cinder-launch-series-a-glen-wise/", "date": "Dec 12, 2022" }, { "title": "Cinder's content moderation software is custom-built for trust and safety teams • TechCrunch", "url": "https://techcrunch.com/2022/12/08/cinder-builds-a-trust-and-safety-platform/", "date": "Dec 08, 2022" } ], "launches": [] }, { "id": 26296, "name": "Reality Defender", "slug": "reality-defender", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5de4d57756c747e087b70e720cbfdb09672b0cc7.png", "website": "http://www.realitydefender.com", "all_locations": "New York City, NY, USA", "long_description": "Reality Defender is the market leader in deepfake detection, protecting enterprises and governments from realtime deepfake and agentic fraud. Sign up for free access at https://www.realitydefender.com/api\r\n\r\nWebsite: www.realitydefender.com\r\nContact: ask@realitydefender.com\r\nYC AMA: https://news.ycombinator.com/item?id=30766050\r\n\r\nAwards:\r\n2025 - Gartner: Recognized as Market Leader in Deepfake Detection\r\n2025 - JPMorgan: Inducted into Hall of Innovation\r\n2025 - World Economic Forum: Named Technology Pioneer\r\n2025 - USA DIU + Japan MOD: 1st Place \"Global Innovation Challenge\"\r\n2024 - RSA Conference: 1st Place “Most Innovative Startup”\r\n2024 - SINET16 Innovator Award\r\n2023 - SXSW 1st Place \"Artificial Intelligence, Voice, & Robotics Technologies\"", "one_liner": "Enterprise Deepfake Detection", "team_size": 54, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1647888631, "tags": [ "SaaS", "Deepfake Detection", "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/reality-defender", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/reality-defender.json", "year_founded": 2021, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/reality-defender/", "x_url": "https://twitter.com/detectdeepfakes", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/reality-defender", "github_url": "https://github.com/Reality-Defender", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5de4d57756c747e087b70e720cbfdb09672b0cc7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/5964c6802789808a4a4b473d7214a50d97b4e447.png" ], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 868173, "full_name": "Ben Colman", "title": "Founder/CEO", "founder_bio": "Reality Defender is the market leader in deepfake detection, protecting enterprises and governments from realtime deepfake and agentic fraud.\n\nSign up for free access at realitydefender.com/api\n\nAwards:\n2026/2025 - Gartner: Market Leader in Deepfake Detection\n2025 - JPMorgan: Annual Innovation Award (Inducted into Hall of Innovation)\n2025 - World Economic Forum: Technology Pioneer\n2025 - USA DIU + Japan MOD: 1st Place Global Innovation Challenge\n2024 - RSA Conference: 1st Place", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/benpcolman/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/924b95d2c1dc709772405dca88c251725ee79247.jpg" } ], "jobs": [], "news": [ { "title": "KPMG announces partnership with Reality Defender for deepfake detection", "url": "https://kpmg.com/kpmg-us/content/dam/kpmg/pdf/2023/deepfakes-real-threat.pdf", "date": "Nov 21, 2023" }, { "title": "AI fake content detection tools | Deloitte Insights", "url": "https://www2.deloitte.com/uk/en/insights/focus/tech-trends/2024/reality-defender-helping-companies-with-ai-content-detection.html", "date": "Nov 10, 2023" }, { "title": "President Biden’s AI executive order has ‘dangerous limitations,’ says deepfake detection company CEO", "url": "https://www.foxbusiness.com/media/president-bidens-ai-executive-order-dangerous-limitations-deepfake-detection-ceo", "date": "Nov 08, 2023" }, { "title": "Google Image Search Will Now Show a Photo’s History. Can It Spot Fakes? | WIRED", "url": "https://www.wired.com/story/google-about-this-image-misinformation/", "date": "Oct 25, 2023" }, { "title": "Reality Defender raises $15M to detect text, video and image deepfakes | TechCrunch", "url": "https://techcrunch.com/2023/10/17/reality-defender-raises-15m-to-detect-text-video-and-image-deepfakes/", "date": "Oct 17, 2023" } ], "launches": [ { "id": 92611, "title": "🚀 Reality Defender: Deepfake Detection with Two Lines of Code", "tagline": "We just made deepfake detection incredibly simple — with two lines of code", "body": "It’s been a few years since our[ 2022 YC HackerNews launch](https://news.ycombinator.com/item?id=30766050). We’ve since deployed realtime deepfake detection for tier-one banks, media and governments.\n\nAnd one request kept coming: a **public API** to build deepfake detection into any stack.\n\n# 🙌 **We heard you!**\n\nWe’re psyched to announce our that enterprise-grade deepfake detection **API + SDKs** are now exclusively available to **every YC developer** ahead of our public launch. And we’re **including 50 free scans per month**!\n\n# **🎁 YC Early Access: [https://www.realitydefender.com/api](https://www.realitydefender.com/api)**\n\n![uploaded image](/media/?type=post&id=92611&key=user_uploads/868173/759df5fe-4e52-4f41-b197-7e87a97ca248)\n\n**If your product touches voice or image, our API + SDKs gives it instant protection against:**\n\n* 🎙️ AI-generated voice fraud\n* 👤 Fake identities in IDV/KYC \n* 🗣️ Synthetic identities and media across consumer platforms\n* 🚨 AI-manipulated images fueling disinformation\n\nWe **update and improve our models constantly** to stay ahead of emerging threats and built these API and SDKs with simplicity and transparency in mind.\n\n# **🔥 YC Launch Offer**\n\n* 50 free scans/month for YC Launch devs\n* First 5 devs who integrate get get $250 + RD swag\n* Email us at [hello@realitydefender.com](mailto:hello@realitydefender.com) for high volume access, or to connect with our infra/security leads\n\n# **🔥🔥 Free Access for All Devs:[ ](http://app.realitydefender.ai)[Link To Sign Up](https://www.realitydefender.com/api)**\n\n**API**\n\n* [GitHub](https://github.com/Reality-Defender/sample_scripts) /[ Quick Start Guide](https://docs.realitydefender.com/api-reference/quickstart)\n\n**SDKs**\n\n* Python:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-python) /[ PyPI](https://pypi.org/project/realitydefender/)\n* Rust:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-rust) /[ Crates](https://crates.io/crates/realitydefender)\n* Java:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-java) /[ Maven](https://central.sonatype.com/artifact/ai.realitydefender/realitydefender-sdk)\n* Typescript:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-typescript) /[ NPM](https://www.npmjs.com/package/@realitydefender/realitydefender)\n* Go:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-go)", "url": "https://www.ycombinator.com/launches/O5j-reality-defender-deepfake-detection-with-two-lines-of-code", "votes": 8, "created_at": "2025-07-31T17:38:03.899Z" } ] }, { "id": 26776, "name": "Overwatch", "slug": "overwatch", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1def1e618878c538c08d4635fb23a133ed14d476.png", "website": "http://www.overwatchdata.ai", "all_locations": "New York City, NY, USA", "long_description": "Overwatch Data offers real-time AI agents to scale fraud, cyber, and security teams. Our agents automate the threat intelligence and brand protection workflow, while also conducting risk reviews at scale to detect fraud and financial crime.", "one_liner": "Enterprise software for enterprise risk and cyber fraud intelligence", "team_size": 14, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1657829137, "tags": [ "Cybersecurity", "Fraud Prevention", "Fraud Detection", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/overwatch", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2022/overwatch.json", "year_founded": 2022, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/overwatchdata/", "x_url": "https://twitter.com/Overwatch_data", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1def1e618878c538c08d4635fb23a133ed14d476.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 977105, "full_name": "Arjun Bisen", "title": "Founder", "founder_bio": "I started my career as an Australian diplomat, during which time I analyzed geopolitical and cyber risk across APAC and writing Australia's Cyber Engagement Strategy. I then studied the intersection of technology and risk at Harvard on a full Fulbright scholarship. I've since led risk teams at Stripe and Google Search before founding Overwatch to help those teams get ahead of emerging cyber, fraud, and financial crime risks. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/arjun-bisen/", "x_url": "https://twitter.com/ArjunBisen1", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/35718f1a274cd5ca0063277cf94d8ea427b33a52.jpg" }, { "user_id": 1081618, "full_name": "Zara Perumal", "title": "Founder", "founder_bio": "Co-founder / CTO at Overwatch Data\n\nZara studied Artificial Intelligence and Cybersecurity at MIT LIDS/CSAIL focusing on active learning for malware detection and risk-limiting post-election audits. After graduating, Zara worked on Google Assistant then at Google’s Threat Analysis Group, where she built machine learning and software systems to use threat intelligence and malware analysis to better protect against targeted threats and disinformation by state sponsored actors.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/zperumal/", "x_url": "https://twitter.com/zaraperumal", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4cf5bf21b04591b4d94995d4372e5b115c12e836.jpg" } ], "jobs": [], "news": [ { "title": "What launching a startup taught me about foreign policy | The Hill", "url": "https://thehill.com/opinion/international/3757491-what-launching-a-startup-taught-me-about-foreign-policy/", "date": "Dec 01, 2022" } ], "launches": [ { "id": 64636, "title": "🌍 ⚠️ Overwatch - Automating global risk detection and analysis", "tagline": "Monitor data streams, including news and satellite imagery, for narratives and events that will impact operations, supply chain, and reputation", "body": "Hey YC! Tad, Zara and I are excited to launch [Overwatch 🦉](http://www.overwatchdata.io)​ - to help automate global risk detection and analysis. Our tool allows enterprises to monitor data streams, including news and satellite imagery, for narratives and events that will impact their operations, supply chain, and reputation. Our tool can be used for live monitoring OR historic due-diligence on a location.\n\n**😠The Problem**\n\n* Businesses have many points of failure in their global operations and struggle to monitor all the locations and narratives that matter to them \n* Current event detection tools are often noisy and don't provide any context on why that event might be significant to a specific business.\n\n \n\n**🔨Our Solution**\n\nWe cut through the noise.\n\n* We help companies filter more accurately for events and narratives that matter to them.\n* We provide visualizations of how those events or narratives have changed over time and layer these events on top of other datasets, e.g. satellite imagery, shipping routes, trade data, commodity production sites, flood and fire maps, and other risk indices. \n* This helps draw connections and provide a holistic picture of how that event could impact their business.\n\n![](https://lh3.googleusercontent.com/OdI55U0rZf6ZSicyHS8BtsJ-xIY54kVTVw4wAojwTV6qvKYY-ZIjOc3Ae8hyKLVyYCNhE7YhFupIv-x9poZABJ-d7F8Mq3h1cc_E4C-l0M5k4c0OZRZOloKzWBee6FSH0qjsF7NXv7qJZphCiWONUs8)\n\n![](https://lh5.googleusercontent.com/dWmnLh1Pj0BJC39LrVN9R-j2u0hdrEbmj_qk_i5WcD0p9W0GGvU8a2sEWnwPjRTr_JaxqvavyJnCQtpkRgomQ018TbDsqPnT1Tlfe2J5ZgUDvgER0iIyrkai3_4FCHXU0IDwXOSWpOu7JQj-g05g2NU)\n\n**The Ask❓**\n\n* Do you (or anyone you know) struggle to detect, analyze, or predict events and narratives that could disrupt your business operations, brand, or supply chain? Then please reach out to ([founders@overwatchdata.io](mailto:founders@overwatchdata.io)) or [book a call](https://calendly.com/arjun-overwatch/30min) and we’d love to help.\n* Are you a data provider with interesting risk-related data? We’d love to discuss how we might incorporate it into our product.", "url": "https://www.ycombinator.com/launches/GoW-overwatch-automating-global-risk-detection-and-analysis", "votes": 18, "created_at": "2022-07-14T20:09:34.423Z" } ] }, { "id": 27162, "name": "Oneleet", "slug": "oneleet", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/35b93ab2671a1397037aa92e0703d5f6c2ec0fba.png", "website": "https://www.oneleet.com/?utm_source=yc&utm_medium=bookface", "all_locations": "Amsterdam, NH, Netherlands", "long_description": "Oneleet helps companies become secure and compliant through an all-in-one solution that combines automated tools and human expertise.\r\n\r\nOneleet has built the second generation of security compliance automation software, providing tools that go beyond what is classically provided for just compliance alone. Tools like a code security scanner, attack-surface management, access reviews and trust portal are all built in.\r\n\r\nAs the most popular, highest rated and most frequently used platform in the YC community, Oneleet has quickly established itself as the preferred and superior alternative to other incumbents.\r\n\r\nThe founder behind Oneleet has spent the past 10+ years helping companies become more secure by performing penetration tests.", "one_liner": "YC's most popular security compliance platform (SOC 2, ISO 27001,…", "team_size": 75, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1657281241, "tags": [ "SaaS", "B2B", "Compliance", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Netherlands", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/oneleet", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2022/oneleet.json", "year_founded": 2022, "city": "Amsterdam", "country": "NL", "linkedin_url": "https://linkedin.com/company/oneleet", "x_url": "https://x.com/oneleet", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/35b93ab2671a1397037aa92e0703d5f6c2ec0fba.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/2eb8754aa0adaf58ef29f06c353b4975a0c1291e.png", "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/9279569ea68c6a5ecb53edad2ba2b3ca96f8c467.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 233375, "full_name": "Bryan Onel", "title": "Founder", "founder_bio": "Penetration Tester with 10+ years of experience helping companies become more secure by simulating advanced attacks. Has experience leading security teams and architecting offensive and defensive security solutions.\n\nBefore pursuing a career in hacking, Bryan studied AI and Medicine.", "is_active": true, "linkedin_url": "https://nl.linkedin.com/in/bryan-onel/", "x_url": "https://twitter.com/bryanonel86", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9c0799c948a5d9d9a59974cd6427476817e4a497.jpg" }, { "user_id": 968809, "full_name": "Ora Onel", "title": "Founder", "founder_bio": "I have a background in medical genetics. I developed a passion for cybersecurity and decided to start a security company together with my husband.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ora-touitou/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f2cc3ca2245b2980e81032f7787eb8e81ce60c8b.jpg" } ], "jobs": [ { "id": 91603, "title": "Senior Product Designer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/1vpHh5M-senior-product-designer", "location": "Remote (US)", "type": "Full-time", "role": "Product", "role_type": null, "salary_range": "$120K - $190K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 91970, "title": "Community Event & Engagement Manager - San Francisco, CA", "url": "https://www.ycombinator.com/companies/oneleet/jobs/CMtrf5F-community-event-engagement-manager-san-francisco-ca", "location": "San Francisco, CA, US / Remote (San Francisco, CA, US)", "type": "Full-time", "role": "Marketing", "role_type": null, "salary_range": "$100K - $150K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97504, "title": "Product Manager", "url": "https://www.ycombinator.com/companies/oneleet/jobs/YXCqogN-product-manager", "location": "Remote (US)", "type": "Full-time", "role": "Product", "role_type": null, "salary_range": "$130K - $180K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97508, "title": "Security Program Manager", "url": "https://www.ycombinator.com/companies/oneleet/jobs/umdbAFP-security-program-manager", "location": "Remote (US)", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$75K - $140K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97509, "title": "Senior Product Designer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/eJbx6wR-senior-product-designer", "location": "Remote (US)", "type": "Full-time", "role": "Design", "role_type": "Web design", "salary_range": "$130K - $165K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97510, "title": "Fullstack Engineer, AI Implementation", "url": "https://www.ycombinator.com/companies/oneleet/jobs/LIybTCA-fullstack-engineer-ai-implementation", "location": "Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$110K - $180K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97511, "title": "Application Security Engineer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/qKwsUvP-application-security-engineer", "location": "US / GB / NL / Remote (US; GB; NL)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$160K - $220K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97512, "title": "Fullstack Engineer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/oR8tXgm-fullstack-engineer", "location": "Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $180K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Oneleet raises $33M to shake up the world of security compliance | TechCrunch", "url": "https://techcrunch.com/2025/10/02/oneleet-raises-33m-to-shake-up-the-world-of-security-compliance/", "date": "Oct 02, 2025" } ], "launches": [ { "id": 84326, "title": "Oneleet - Compliance without Security Theater", "tagline": "The all-in-one Security and Compliance platform for SOC 2, ISO, HIPAA, and more.", "body": "![uploaded image](/media/?type=post&id=84326&key=user_uploads/233375/6e14f2e5-0ed9-4b12-98f8-e194071f08d4)\n\n# **What is Oneleet in a nutshell?**\n\n[Oneleet](https://www.oneleet.com/) helps companies build genuine security and achieve compliance without the usual security theater BS.\n\nWe provide a comprehensive all-in-one solution for SOC 2, ISO 27001, HIPAA, GDPR, & PCI compliance, including automation, penetration testing, audit support, and continuous monitoring.\n\nOur hands-on approach and in-house security expertise have quickly made us the #1 choice for compliance in the YC community.\n\n[Book a call with us if you’re in the market for compliance](https://calendly.com/d/cwr7-ztb-xxq/oneleet-introduction?preview_source=et_card)\n\nㅤ\n\n# **Why We Built Oneleet**\n\nHey! I’m Bryan Onel, the CEO of Oneleet. I co-founded Oneleet with my wife, Ora Onel, and my best friend, Erik Vogelzang, with one mission: to help startups build genuine security without the nonsense.\n\nAfter spending a decade as a penetration tester and security program manager, I grew frustrated with platforms that claimed to help with compliance but were really just about ticking boxes. They weren't helping businesses _become_ secure—they were just pretending.\n\nThat’s why we built Oneleet: to be the solution that truly focuses on security, not just compliance theater.\n\nㅤ\n\n# **The Problem**\n\nLet's be honest… most compliance platforms are all about security theater:\n\n* Ticking boxes instead of building actual security, making you waste time on useless things that are irrelevant to security\n* Dumping checklists on you and wishing you good luck\n* Making you juggle countless tools and vendors\n* Leaving you to deal with external auditors who don't understand real security\n* Hitting you with unpredictable pricing that keeps changing\n\nㅤ\n\n# **Our Solution**\n\n![uploaded image](/media/?type=post&id=84326&key=user_uploads/233375/e8d1a05a-7731-463b-97f6-6dad7407b58e)\n\nOneleet is here to change the game:\n\n* We build real-world security controls that actually protect your business\n* We take ownership of the entire process, from start to finish\n* We provide everything you need in one place, no vendor juggling required. Even code scanning and attack surface management are built in\n* We deal with external auditors, so you don't have to, speaking their language when needed\n* We act as an extension of your team, providing ongoing expert security help\n\nㅤ\n\n# **How It Works**\n\n1. **Scoping** – We assess your infrastructure, security concerns, and compliance needs\n2. **Custom Program** – We craft security that fits your size and needs\n3. **Expert Setup** – Our team of security and compliance experts guides you through implementation minus the jargon\n4. **Penetration Testing** – OSCE-certified experts find your weak spots\n5. **Compliance Automation** – We streamline SOC 2, ISO 27001, HIPAA, and more\n6. **Auditor Wrangling** – We battle incompetent external auditors so you don't have to\n7. **24/7 Protection** – Continuous monitoring keeps you secure, always\n\nㅤ\n\n# **What We Offer**\n\n![uploaded image](/media/?type=post&id=84326&key=user_uploads/233375/ddd8e80c-171f-45c2-a7bb-ce6baba122f5)\n\n* Compliance automation that actually works (SOC 2, ISO 27001, HIPAA, GDPR, & PCI)\n* OSCE-certified penetration testing\n* Third-party auditing with external auditors who get security\n* vCISO services\n* Employee Portal\n* Code security scanning\n* Attack surface monitoring\n* Mobile Device Management (MDM)\n\nㅤ\n\n## **Ready to Ditch Security Theater?**\n\nIf you're tired of pretending to be secure and want the real deal:\n\n* Book a call: https://calendly.com/d/cwr7-ztb-xxq/oneleet-introduction\n* Email us: [founders@oneleet.com](mailto:founders@oneleet.com)\n\nStuck with another platform? We can often help you get out of a contract and migrate everything to Oneleet. [Book a call with us to explore your options.](https://calendly.com/d/cwr7-ztb-xxq/oneleet-introduction)", "url": "https://www.ycombinator.com/launches/Lw6-oneleet-compliance-without-security-theater", "votes": 2097, "created_at": "2024-09-26T21:17:12.076Z" } ] }, { "id": 27664, "name": "Infisical", "slug": "infisical", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e613a0916d0e99cf2fa52a3c8be726a00bd6c51a.png", "website": "https://infisical.com", "all_locations": "San Francisco, CA, USA", "long_description": "Infisical is the all-in-one security infrastructure platform for secrets, certificates, and privileged access management.\r\n\r\nInfisical stores your secrets and injects them back into your development workflow, CI/CD pipelines, and cloud infrastructure. It comes with secrets versioning, point-in-time recovery, audit logging, automatic secret rotation capabilities, and more.", "one_liner": "Security infrastructure for developers and agents", "team_size": 70, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1674066953, "tags": [ "Developer Tools", "SaaS", "B2B", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/infisical", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/infisical.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/infisical/", "x_url": "https://twitter.com/infisical", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/infisical", "github_url": "https://github.com/Infisical/infisical", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/e613a0916d0e99cf2fa52a3c8be726a00bd6c51a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 942802, "full_name": "Vlad Matsiiako", "title": "Founder", "founder_bio": "Co-founder/CEO of Infisical", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vmatsiiako/", "x_url": "https://twitter.com/matsiiako", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/66f8eb40aaf6ba990dcf3fb7787222e157a67ede.jpg" }, { "user_id": 1017557, "full_name": "Tony Dang", "title": "Founder", "founder_bio": "Co-founder of Infisical", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tuan-d-a104a6125/", "x_url": "https://twitter.com/dangtony98", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2419b4588a6d671c73445ca358b013681c458989.jpg" }, { "user_id": 1191187, "full_name": "Maidul Islam", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/maidul98/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8aa9292f4de23b8453f0af5a125d55f417ec23e0.jpg" } ], "jobs": [ { "id": 77875, "title": "Full Stack Engineer", "url": "https://www.ycombinator.com/companies/infisical/jobs/Bf7eGmW-full-stack-engineer", "location": "San Francisco, CA, US / Remote (US; CA; PA; AR; BR; BO; UY; CL; EC; CO; HN; VE; PY; MX; NI; PE; CR; SV; GT; DO; CU; PR; HT; GF; AG; LC; GY; SR; MQ; GP; BL)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$100K - $180K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizenship/visa not required", "skills": [ "Node.js", "TypeScript" ] }, { "id": 85851, "title": "Senior Full Stack Engineer ", "url": "https://www.ycombinator.com/companies/infisical/jobs/2pwGcK9-senior-full-stack-engineer", "location": "San Francisco, CA, US / Remote (US; CA)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$180K - $250K", "equity_range": "", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 88824, "title": "Design Engineer, Brand", "url": "https://www.ycombinator.com/companies/infisical/jobs/SHYFnFw-design-engineer-brand", "location": "San Francisco, CA, US / Remote (US; CA)", "type": "Full-time", "role": "Design", "role_type": "Brand/graphic design", "salary_range": "$100K - $180K", "equity_range": "", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [ "Marketing design" ] }, { "id": 88826, "title": "Design Engineer", "url": "https://www.ycombinator.com/companies/infisical/jobs/wjckxpL-design-engineer", "location": "San Francisco, CA, US / Remote (US; CA; BR)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$100K - $180K", "equity_range": "", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "JavaScript", "React", "TypeScript", "Figma" ] }, { "id": 103074, "title": "Enterprise Account Executive ", "url": "https://www.ycombinator.com/companies/infisical/jobs/bqS2vGP-enterprise-account-executive", "location": "New York, NY, US / Seattle, WA, US / Chicago, IL, US / Boston, MA, US / San Francisco, CA, US / Remote (New York, NY, US; Seattle, WA, US; Chicago, IL, US; Boston, MA, US; San Francisco, CA, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 103075, "title": "Solutions Engineer", "url": "https://www.ycombinator.com/companies/infisical/jobs/D4OujHu-solutions-engineer", "location": "New York, NY, US / Austin, TX, US / Atlanta, GA, US / Raleigh, NC, US / Washington, DC, US / Boston, MA, US / Remote (New York, NY, US; Austin, TX, US; Atlanta, GA, US; Raleigh, NC, US; Washington, DC, US; Boston, MA, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Infisical: The Open Source Security Stack", "url": "https://www.youtube.com/watch?v=qDumDlXcMkg", "date": "Jun 06, 2025" }, { "title": "Infisical raises $16 million Series A led by Elad Gil to safeguard secrets | Fortune", "url": "https://fortune.com/2025/06/06/infisical-raises-16-million-series-a-led-by-elad-gil-to-safeguard-secrets/", "date": "Jun 06, 2025" }, { "title": "Google's Gradient backs YC alum Infisical to solve secret sprawl | TechCrunch", "url": "https://techcrunch.com/2023/07/03/googles-gradient-backs-yc-alum-infisical-to-solve-secret-sprawl/", "date": "Jul 03, 2023" } ], "launches": [ { "id": 69599, "title": "💚 Infisical - The open source secrets manager for developers", "tagline": "Open source, end-to-end encrypted tool that lets you securely sync secrets and configs across your team, devices, and infrastructure", "body": "Hey there, this is team Infisical 🏂\n\n[Infisical](https://infisical.com/) is an open-source, end-to-end encrypted platform for developers to centralize their application secrets and configs, and sync them across their whole development life cycle.\n\nWe launched 3 months ago, and already have 4.2K+ stars on GitHub, 50 contributors, and 220+ community members 🚀\n\n![uploaded image](/media/?type=post&id=69599&key=user_uploads/942802/00941739-4c42-44c8-92e8-e8fc55f7cb1b)\n\n\n**Imagine this**: You add a new environment variable to your team’s codebase, push it up to GitHub, and head out for dinner. Shortly after, your teammate pulls the latest changes and everything crashes because they're missing that variable.\n\nYou come back to angry messages from your teammate and quickly send them the variable over text, risking a security vulnerability. Everything seems to be working until the next day when you deploy to production, and once again, everything crashes because you forgot to add the environment variable to the production environment.\n\nSounds relatable?\n\n![uploaded image](/media/?type=post&id=69599&key=user_uploads/942802/d8e6a881-8412-4baf-8f54-b8defb0ecd46)\n\n\n## **Problem**\n\nSecrets play a critical role in every stage of the software development lifecycle, from local development to staging, testing, and production. Even so, teams routinely run into challenges dealing with secret management:\n\n* **Missing secrets across infrastructure**: Having secrets sprawled across infrastructure with no central visibility and control often leads to missing secrets. In turn, applications crash in production and developers lose precious time debugging what’s missing.\n* **Leaking secrets to source control**: Even the biggest companies accidentally expose hardcoded secrets and .env files. When it happens, the consequences are grave.\n* **Lacking self-hosted alternatives**: Many great solutions are not self-hostable or end-to-end encrypted, a challenge for companies requiring it. In a world where security and privacy are increasingly paramount, having these options are essential.\n\n## **Solution**\n\nInfisical provides an open-source, end-to-end encrypted platform for developers to manage their application secrets and sync them across their team and software development lifecycle.\n\nWith Infisical, you can:\n\n* **Securely store and deliver** application secrets to your infrastructure with integrations available for Docker, Kubernetes, AWS, Vercel, GitHub Actions, etc.\n* **Inject secrets** into applications instead of using .env files that often get leaked.\n* **Self-host** Infisical on your own infrastructure.\n* **Enhance observability** of secrets and teammates with secret versioning, rollbacks, and audit logs for every action taken.\n\n![uploaded image](/media/?type=post&id=69599&key=user_uploads/942802/afe74cca-1292-4f25-b0d5-03ae9fc21327)\n\n\n## **Asks**\n\n* Check out Infisical at \n* Contact [tony@infisical.com](mailto:tony@infisical.com) if your company needs help with secret management\n* Intros to companies that in your experience may benefit from Infisical", "url": "https://www.ycombinator.com/launches/I6Z-infisical-the-open-source-secrets-manager-for-developers", "votes": 58, "created_at": "2023-02-23T15:39:57.107Z" } ] }, { "id": 27672, "name": "Blyss", "slug": "blyss", "former_names": [ "Spiral" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a070a3276443496b8e98455f7edba47028991034.png", "website": "https://blyss.dev/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Blyss is an AI model provider built on strong security guarantees. We run AI workloads in GPU-based secure enclaves, which keep data encrypted even while it's being processed. Our customers get a privacy model similar to on-premises deployment, without ever having to think about AI infrastructure or GPU supply. \r\n\r\nThe Blyss team has strong experience in cryptography and AI from Stanford, Apple, Nvidia, and more. We think data privacy is fundamental to safe, trustworthy AI, so it's our job to make end-to-end encrypted AI a no-compromise option - just like Signal and WhatsApp did for messaging.", "one_liner": "End-to-end encrypted AI.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1677026433, "tags": [ "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/blyss", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/blyss.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/blyssprivacy/", "x_url": "https://twitter.com/blyssdev", "fb_url": null, "cb_url": null, "github_url": "https://github.com/blyssprivacy", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a070a3276443496b8e98455f7edba47028991034.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 175680, "full_name": "Samir Menon", "title": "Founder", "founder_bio": "Worked at Yubico. Wrote ia.cr/2022/368. Stanford CS '19 BS + MS.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/samir-menon-27954214b/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bf0f53add650620dbd2b4e70d5207b1bfa4dd840.jpg" }, { "user_id": 75138, "full_name": "Neil Movva", "title": "Founder", "founder_bio": "I've spent my whole career making computers go fast, especially for deep learning. I love large scale compute and care deeply about democratizing this power.\n\nPreviously, I worked on the Apple Neural Engine, and NVIDIA's cuDNN. Stanford '19, BS and MS in EE.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/nmovva/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f5b0073f3a3a51b304eca2dcfb6a0acff802dc25.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 69550, "title": "Blyss - the SDK for privacy.", "tagline": "We make it easy to use and deploy homomorphic encryption.", "body": "## **TLDR:** Homomorphic encryption offers much stronger privacy guarantees than anyone thought possible. Blyss is the future of privacy, available today as a [developer-focused API](https://blyss.dev/).\n\nWe are Samir and Neil, the founders of Blyss.\n\n![uploaded image](/media/?type=post&id=69550&key=user_uploads/75138/64e460e5-9627-4f23-b3ec-57be1d24ac9e)\n\n## 😧 Problem: outside of FAANG, privacy is stuck in the ‘90s🕺\n\nPrivacy is a competitive advantage. There’s a billboard on the 101 explaining how WhatsApp can’t read your messages, millions of consumers use VPNs to secure their everyday browsing, and Apple doesn’t finish a keynote without touting new, frontier-pushing privacy practices. \n\nBut unless you’re at big tech, the most powerful new privacy tools are almost completely inaccessible. Chrome and Edge use homomorphic encryption to scan unsafe URLs and check passwords, but a startup wanting to offer similar features would need a team of PhDs to build them in-house.\n\n## 🛠️ Our solution: cutting-edge privacy, as a service\n\nThe [Blyss SDK](https://blyss.dev/) offers developers a key-value store with unusually strong privacy guarantees. Create S3-like buckets, fill them with data, and then make cryptographically secure retrievals. No entity, not even the Blyss service itself, can learn which items are retrieved from a Blyss bucket.\n\nPrivate retrieval is a simple but powerful new primitive. Using it,\n\n* Password managers can check if you’ve been exposed in a data breach, without learning anything about your passwords\n* Browsers can resolve domain names privately, without revealing every website you visit to DNS servers\n* Code scanners can safely check repos for vulnerabilities, without ever seeing customer codebases or the scan results\n\nPeople are building lots of new web apps with Blyss - try some of the best ones at the [Blyss playground](https://playground.blyss.dev)!\n\n# 🙇 The ask\n\n## 🧑‍💻 Developers:\n\nTry [our SDK](https://blyss.dev/) - it’s a self-serve, cloud storage service (feels just like S3), that transparently handles encryption and privacy for you. And if it isn’t quite clear how to fit privacy into your app, we’ll help you!\n\n## 🕵️ Privacy-conscious users:\n\nTell us about apps/services that feel icky because they collect too much data. It may not be obvious how to fix them, but your gut feelings on privacy are super valuable to us.\n\n## 🕴️ Bonus:\n\nIf you know companies that are trying to make privacy their competitive advantage (password managers, VPNs, etc), introduce us ([founders@blyss.dev](mailto:founders@blyss.dev))!\n\n## 👯 About us\n\nWe met eight years ago on Day 1 of freshman year at Stanford; we’ve been best friends since. Neil was previously at Apple working on ML; Samir worked at Yubico on applied security, and before that did research on homomorphic encryption with Dan Boneh. We [published](https://eprint.iacr.org/2022/368) the fastest-ever scheme for private retrieval at a top cryptography conference (Oakland). Now, we’re working to make advanced privacy technology available to everyone.", "url": "https://www.ycombinator.com/launches/I5m-blyss-the-sdk-for-privacy", "votes": 31, "created_at": "2023-02-22T17:37:27.725Z" } ] }, { "id": 27677, "name": "Matano", "slug": "matano", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a222c90e6dc5a485e0f58e7075243197316b5126.png", "website": "https://www.matano.dev", "all_locations": "Seattle, WA, USA; San Francisco, CA, USA", "long_description": "Matano is a modern SIEM, built for cloud-first security teams. \r\n\r\nIt replaces traditional SIEM databases like Splunk or Elastic with a cybersecurity platform built on top of a cost-effective Security Data Lake.", "one_liner": "Cloud Native SIEM (alternative to Splunk/Elastic)", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1673220532, "tags": [ "DevSecOps", "Analytics", "Open Source", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/matano", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/matano.json", "year_founded": 2022, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/matanolabs/", "x_url": "https://twitter.com/matanolabs", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/matano", "github_url": "https://github.com/matanolabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a222c90e6dc5a485e0f58e7075243197316b5126.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 785948, "full_name": "Samrose Ahmed", "title": "Founder", "founder_bio": "Hi I'm Samrose, a software engineer by background. I grew up in NYC, went to CMU, and worked at AWS for a few years before starting Matano. I'm especially interested in big data, cloud, and highly available systems. Outside of work, I'm an avid reader.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/samrosea", "x_url": "https://twitter.com/AhmedSamrose", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/52bfc4aa9aa1ac47491681b0e4a44e634a13e971.jpg" }, { "user_id": 787913, "full_name": "Shaeq Ahmed", "title": "Founder", "founder_bio": "Hey! Shaeq is a software engineer who originally hails from New York and loves all things open source, security and big data. He quit his job \ncrunching data for autonomous robots at Amazon to build Matano - an open-source SIEM alternative for security teams on AWS.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/shaeq-ahmed", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a79a8d4cc1f220f2fc21e18256f03991d9392f7e.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 68262, "title": "Matano - Open source SIEM alternative for AWS", "tagline": "Matano is a high scale, low cost alternative to traditional SIEM (e.g. Splunk, Elastic) built around a vendor agnostic Security Data Lake in your AWS account.", "body": "**👋** Hi YC! We’re Samrose & Shaeq and we are excited to launch [Matano](https://github.com/matanolabs/matano).\n\n### TL;DR\n\n**Matano is a high-scale, low-cost, zero-ops alternative to traditional SIEM (e.g. Splunk) that deploys a security data lake directly in your AWS account.** It lets you ingest petabytes of security and log data from various sources, store and query them in an open [Apache Iceberg](https://iceberg.apache.org/) data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS.\n\n![uploaded image](/media/?type=post&id=68262&key=user_uploads/785948/5ec8b84a-df7a-44d1-914b-2c30af3dc2fa)\n\n### **Problem**\n\n* Traditional tools used to analyze security data (SIEMs) don’t scale, and are too expensive and difficult to manage for security teams on the cloud.\n* Security data is now a Big Data problem: collecting data from your network, SaaS, and cloud environments can exceed 100TBs of data. Security teams are forced to either not collect some data, leave data unprocessed, or build an in-house data lake to cost-effectively analyze large datasets.\n* At scale, without a strategy to normalize data into a structured format, it is difficult to correlate across data sources & build effective alerts that don’t create many false positives. Traditional SIEM query-based rules fail to accurately identify threats.\n\n### **Our Solution**\n\nWe’re leveraging our years of experience at AWS in Big Data and cloud technologies to build a modern alternative to SIEM designed from the ground up for efficiency, scalability, cost effectivity, and vendor neutrality.\n\n![](https://www.matano.dev/assets/images/diagram-09d3bbd00cb55ab585125b7a7ec452c6.webp)\n\n* **Security Data Lake** Matano normalizes unstructured security logs into a structured realtime data lake in your AWS account. All data is stored in optimized Parquet files in S3 object storage for cost-effective retention & analysis at petabyte scale.\n* **No vendor lock-in** Matano lets you truly own your own security data. Cybersecurity vendors lock your data in proprietary formats which make it very difficult to use outside of their product. With Matano, all your data is in open Apache Iceberg tables that can can be directly queried from different tools (AWS Athena, Snowflake, etc.) without having to copy any data.\n* **Detection-as-code** Matano gives you the flexibility of Python to implement realtime alerting on your log data and introduce a development lifecycle to detection by managing rules in Git (test, code review, audit).\n* **Serverless** ​​Matano is a fully serverless platform built entirely on technologies like Lambda, S3, and SQS and is designed for zero-ops and unlimited elastic horizontal scaling. Matano uses Rust for blazing fast performance [🦀](https://emojiterra.com/crab/).\n* **Open source** Matano is licensed as Apache 2.0 and always will be. Matano uses an open table format (Apache Iceberg) and common schemas ([Elastic Common Schema](https://github.com/elastic/ecs)), to give you full ownership of your security data.\n\n### **Ask**\n\n* If you’re a security team interested in using Matano, feel free to reach out over email at [founders@matano.dev](mailto:founders@matano.dev).\n* Try out our project and star [⭐](https://emojipedia.org/star/) us on GitHub: .\n* Join our [Discord community](https://discord.gg/YSYfHMbfZQ)!", "url": "https://www.ycombinator.com/launches/Hl0-matano-open-source-siem-alternative-for-aws", "votes": 48, "created_at": "2023-01-09T00:57:23.279Z" } ] }, { "id": 27809, "name": "EdgeBit", "slug": "edgebit", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/129c0d512b87fa767fbbc001172d26269d9a0ab0.png", "website": "https://edgebit.io", "all_locations": "San Francisco, CA, USA", "long_description": "EdgeBit was acquired by FOSSA in July 2025: https://fossa.com/blog/fossa-acquires-edgebit/\r\n\r\nEdgeBit enables engineering teams to ship security updates 10x faster with confidence by automating dependency update analysis. Our platform turns weeks of manual review into minutes, helping teams find and fix security vulnerabilities while maintaining a secure, up-to-date software supply chain without compromising productivity.", "one_liner": "Autofix your software dependencies", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1672965227, "tags": [ "DevSecOps", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/edgebit", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/edgebit.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/edgebit/", "x_url": "https://twitter.com/EdgebitIO", "fb_url": null, "cb_url": null, "github_url": "https://github.com/edgebitio/", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/129c0d512b87fa767fbbc001172d26269d9a0ab0.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 230598, "full_name": "Rob Szumski", "title": "Founder", "founder_bio": "Rob Szumski is CEO and co-founder of EdgeBit, the security platform that secures your software supply chain by focusing on code that is actually running. EdgeBit simplifies vulnerability management as it cuts through noise that distracts engineers merging code.\n\nRob was an early employee of CoreOS (YC S13) which popularized the immutable operating system and propelled Kubernetes/container tech into the mainstream. CoreOS was acquired by Red Hat in 2018, where Rob was a Director of Product.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/robszumski/", "x_url": "https://twitter.com/robszumski", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/60e818e2ea2e9958d82e367fd34da1797653d7ce.jpg" }, { "user_id": 5721, "full_name": "Eugene Yakubovich", "title": "Founder", "founder_bio": "Eugene is a long time hacker who likes to work at the application / operating systems boundary. In the past, he designed the foundational layers for high-frequency trading, contributed to the container runtimes, and implemented graph algorithms for continent size road networks.\n\nLately he has been on a mission to secure workloads and in 2022 he teamed up with Rob and Russell to tackle the problem, starting with fixing the vulnerability fire hose.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/eugene-yakubovich-4640604/", "x_url": "https://twitter.com/eyakubovich", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c569124aefb1e5e87e2e6cae1108ec324218e46d.jpg" } ], "jobs": [], "news": [ { "title": "FOSSA Acquires EdgeBit: From Scanning to Updating", "url": "https://fossa.com/blog/fossa-acquires-edgebit/", "date": "Sep 28, 2025" } ], "launches": [ { "id": 69144, "title": "EdgeBit - Secure your software supply chain", "tagline": "Supply chain analysis that eliminates noise in vulnerability response", "body": "tl;dr: [EdgeBit](https://edgebit.io) automatically inventories software dependencies, ensures they are trusted, and monitors vulnerabilities – securing your software supply chain. For security teams, we help you meet new compliance requirements about the libraries and packages in your products. For engineers, we make vulnerability investigation/patching streamlined, so you can get back to writing code.\n\nHi everyone, we are Rob, Russell and Eugene, the team behind [EdgeBit](https://edgebit.io).\n\nWe’re on a mission to make software secure by default. EdgeBit deeply understands how your app is built, what makes it up and how it’s running. That knowledge builds up trust to make developers lives easier, and your entire server fleet more secure.\n\n![uploaded image](/media/?type=post&id=69144&key=user_uploads/230598/b3341e0d-c53a-49b4-a31a-c5d9a5fa6c8c)\n\nLeft - [Eugene](https://www.linkedin.com/in/eugene-yakubovich-4640604/) - Chief Architect and low level hacker. He worked on pathfinding algorithms at Lyft, container networking at CoreOS and performance optimization in his high frequency trading days.\n\nCenter - [Rob](https://www.linkedin.com/in/robszumski/) - CEO and product leader. He was a Director of Product at Red Hat working on the OpenShift/Kubernetes platform after their acquisition of CoreOS (YC S13).\n\nRight - [Russell](https://www.linkedin.com/in/russellhaering/) - CTO and master of backend systems. He ran security engineering at Okta after their acquisition of ScaleFT, the zero trust access management startup he cofounded.\n\n## The Problem: securing software still feels like throwing problems over a wall\n\nSecurity teams have important work to do – meeting a maze of compliance rules against a constantly moving target of dependencies, frameworks and deployment platforms. Automation is key, but security teams aren’t experts in each app, so “open a ticket for any vulnerability found” is a typical workflow. This is a firehose for app teams, and tickets don’t contain the context needed for a speedy investigation.\n\n![uploaded image](/media/?type=post&id=69144&key=user_uploads/230598/201aef87-ad12-4842-9b9d-f423f8ccd315)\n\nLooking beyond compliance, real attacks are happening via software dependencies. For a single library, it’s tricky to securely download, integrate, sign and verify it…and very hard for 100s of dependencies across multiple apps. An enterprise can use [40,000 open-source software packages](https://www.theregister.com/2023/02/05/supply_chain_security_efforts/) each bringing another 77 dependencies.\n\nAn end-to-end system across the build→scan→run→monitor is required to stop these attacks. Dependencies are fragmented across OS packages, standalone binaries and containers, but a single view across all is required to understand the full attack surface.\n\n## EdgeBit: Map your supply chain from build to production in real time\n\n![uploaded image](/media/?type=post&id=69144&key=user_uploads/230598/9872f16b-3980-4c64-bf6f-fe47a5f82262)\n\nEdgeBit builds up context and trust by observing your software from build until deployment to your server fleet. How does it work? Install EdgeBit into your build pipeline and your server fleet/Kubernetes cluster via a tiny agent to immediately enable teams to bring vulnerabilities under control:\n\n* Security: track workload signatures, provenance and prevent malicious modification\n* Compliance: build a real time inventory tracked back to the software’s bill of materials (SBOM)\n* Engineering: prioritize vulnerability investigation based on deep context\n* Enterprises: track patching across teams. The next log4j will come, and it’s a huge endeavor without real time inventory across all tech stacks and packaging formats.\n\n## Try out EdgeBit\n\nSecurity teams can [install EdgeBit](https://edgebit.io) to track their supply chain and even help compliance managers do their job without getting engineering involved. Remove frustration from your vulnerability response program by connecting your teams together and take control back from noisy scanners.\n\nSecuring supply chains is just a step in our journey. Using trust profiles between systems is key to a zero trust security posture. We’d love to chat with you about acute compliance needs or long term security goals of your organization.", "url": "https://www.ycombinator.com/launches/HzE-edgebit-secure-your-software-supply-chain", "votes": 23, "created_at": "2023-02-08T20:44:58.421Z" } ] }, { "id": 27850, "name": "Repacket", "slug": "repacket", "former_names": [ "0pass Inc.", "0pass" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/cd9ecbe70bee41aabfbd1a47f721272aeeb86502.png", "website": "https://repacket.com", "all_locations": "Vancouver, BC, Canada", "long_description": "90% of security breaches are caused by a simple employee mistake. \r\n\r\nYour employee clicks a bad link, and gives up their password.\r\nThey download ransomware from an email and run it.\r\nThey leak your intellectual property and sensitive customer data to ChatGPT.\r\n\r\nRepacket allows your employees to enjoy the internet without risk - instantly blocking threats like phishing and sensitive data leaks. This gives your employees the ability to make that mistake without impacting your company.\r\n\r\nRepacket is built for smaller companies, who may not have dedicated IT or security people to run the show. We install in 60 seconds and give your employee instant protection where they need it most.\r\n\r\nFounded by cybersecurity leaders from SpaceX, AWS, and Google - we're building the easy button for cybersecurity.", "one_liner": "Employee security done for you.", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1673479325, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/repacket", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/repacket.json", "year_founded": 2021, "city": "Vancouver", "country": "CA", "linkedin_url": "https://www.linkedin.com/company/repacket", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/0pass", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/cd9ecbe70bee41aabfbd1a47f721272aeeb86502.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 1127176, "full_name": "Noah Stanford", "title": "Founder", "founder_bio": "CEO @ repacket.com (previously 0pass.com) | Most recently, I created and led the security team for AWS Cognito. Previously, I created and led the Identity and Authentication team at SpaceX.", "is_active": true, "linkedin_url": "https://linkedin.com/in/pwned", "x_url": "https://twitter.com/0x4e53", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a3d30f47d23827c8c7c5f17f0bbc95ee69d5d050.jpg" } ], "jobs": [], "news": [ { "title": "Y Combinator-backed 0pass seeks to replace passwords in the enterprise | TechCrunch", "url": "https://techcrunch.com/2023/06/27/y-combinator-backed-0pass-seeks-to-replace-passwords-in-the-enterprise/", "date": "Jun 27, 2023" } ], "launches": [] }, { "id": 27926, "name": "Variance", "slug": "variance", "former_names": [ "Decoy", "Intrinsic" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e32d61652a6684aecf45080965c0897ba451022f.png", "website": "https://www.variance.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Variance builds AI agents for fraud, identity, and investigations for Fortune 500s, Marketplaces, and regulated financial services.", "one_liner": "AI Agents for Fraud Review and Investigations", "team_size": 12, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1677704898, "tags": [ "Compliance", "Cybersecurity", "Enterprise Software", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/variance", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/variance.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/variancesafety", "x_url": "https://twitter.com/trustvariance", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/e32d61652a6684aecf45080965c0897ba451022f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jared Friedman", "url": "https://www.ycombinator.com/people/jared-friedman" }, "founders": [ { "user_id": 544605, "full_name": "Karine Mellata", "title": "Founder", "founder_bio": "Co-Founder at Variance (fka Intrinsic).\n\nMaking the internet safer, one line of code at a time.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/karinemellata/", "x_url": "https://twitter.com/karinemellata", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7b6c8e84fc0d16df4298ba7d7a737691dfe019dd.jpg" }, { "user_id": 1184751, "full_name": "Michael Lin", "title": "Founder", "founder_bio": "Co-founder of Variance. Working to scale AI agents for investigations and fraud reviews.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/michael-lin-2933a013b/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/278a5ed2c4d86e38f7cbacec45f22e1c6712159c.jpg" } ], "jobs": [ { "id": 67445, "title": "Forward Deployed AI Engineer", "url": "https://www.ycombinator.com/companies/variance/jobs/0BmwPv6-forward-deployed-ai-engineer", "location": "San Francisco", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$115K - $200K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 74151, "title": "Business Development Representative", "url": "https://www.ycombinator.com/companies/variance/jobs/bxFqv04-business-development-representative", "location": "San Francisco", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$65K - $120K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 93289, "title": "Enterprise Account Executive", "url": "https://www.ycombinator.com/companies/variance/jobs/F9eOW1L-enterprise-account-executive", "location": "San Francisco", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 93290, "title": "Senior Software Engineer", "url": "https://www.ycombinator.com/companies/variance/jobs/HZwc3gx-senior-software-engineer", "location": "San Francisco", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 93294, "title": "Research Engineer, Judgment Systems", "url": "https://www.ycombinator.com/companies/variance/jobs/o2Qfu8N-research-engineer-judgment-systems", "location": "San Francisco", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 93296, "title": "Research Engineer, Evals", "url": "https://www.ycombinator.com/companies/variance/jobs/Eok2YSs-research-engineer-evals", "location": "San Francisco", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 93297, "title": "Enterprise Account Executive", "url": "https://www.ycombinator.com/companies/variance/jobs/unx03tA-enterprise-account-executive", "location": "New York", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 93298, "title": "Product Marketing Lead", "url": "https://www.ycombinator.com/companies/variance/jobs/HJStuvw-product-marketing-lead", "location": "San Francisco", "type": "Full-time", "role": "Marketing", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Variance raises $21.5M for AI risk investigations", "url": "https://www.axios.com/pro/fintech-deals/2026/03/31/variance-21-5m-series-a-ai-compliance-agents", "date": "Mar 31, 2026" }, { "title": "Intrinsic Raises $3.1M in Seed Funding", "url": "https://www.finsmes.com/2024/01/intrinsic-raises-3-1m-in-seed-funding.html", "date": "Jan 02, 2024" }, { "title": "Y Combinator-backed Intrinsic is building infrastructure for trust and safety teams | TechCrunch", "url": "https://techcrunch.com/2023/12/21/y-combinator-backed-intrinsic-is-building-infrastructure-for-trust-and-safety-teams/", "date": "Dec 21, 2023" } ], "launches": [ { "id": 69844, "title": "🌔 Intrinsic - Safety tooling for Trust & Safety teams", "tagline": "Maintain high quality content communities, monitor brand safety and keep your users safe", "body": "**tl;dr:** We make it easy to take care of safety so that you can focus on the product. Intrinsic integrates **policy management, data engineering, moderator workflow management, and content understanding** under one platform. [Ping us for a demo!](https://www.withintrinsic.com/contact)\n\n\\\nHey everyone! We’re Karine and Michael, the team behind Intrinsic.\n\nWe’re working to help connect safety teams with the best tools available to prevent abusive behaviour and tell better stories. We both come from Apple and Discord, where we worked on the Trust & Safety machine learning and data engineering infrastructure that was pivotal in protecting both platforms from large-scale abuse. We believe that a safer internet for everyone starts with more accessible safety tools.\n\n### **Who this is for**\n\n* Engineers implementing safety features into products\n* Product managers and directors of Trust & Safety teams\n\n### **Problem**\n\nTrust & Safety engineers are tasked with maintaining platform integrity and user safety in an era of evolving **fake accounts, illegal content, hate speech, misinformation, and child safety concerns.** Nobody wants this stuff on their platforms, but getting up and running with industry best practices is challenging.\n\nCurrently, there are two huge barriers to shipping safety-by-default products:\n\n* T&S teams are siloed from crucial data they need to evaluate safety risks and measure impact. Product and customer service teams own this data.\n* Data integration with either in-house or third-party detection services is costly.\n\nAs a result, safety engineers and data scientists are caught in an endless cycle of blindsided firefighting and doing tedious integrations.\n\n## **Solution**\n\nIntrinsic is a platform for Trust & Safety with a focus on scalability and composability of processes to help a company move faster in responding to evolving threats:\n\n* We handle setting up detection, enforcement, policy management, and integrating an observability platform designed for Trust and Safety.\n* We focus on helping you get up and running end-to-end in minutes for a new safety product integration.\n* We automatically make all Trust & Safety actions, whether banning users or flagging content for review, to be logged and measurable.\n* We can help diagnose failures by tracing safety stories that span disparate products, for example tracing a particular enforcement back to a specific clause of terms and conditions that was breached.\n\nTrust & Safety and Fraud are two problem domains that require rapidly evolving AI systems that start with machine learning and rules (proactive detection) and end with human decisioning (content moderation). We believe that by streamlining this process and closing the feedback loop — **the applications go far beyond Trust & Safety and into any domain that benefits from a rapidly evolving response**.\n\n## **Asks**\n\nIf you know anyone who’s ever had issues with the following,\n\n* Spam, fake accounts, bots\n* Low-quality content\n* High-harm content (bullying, child safety issues, violent speech)\n\nPing [Karine](https://www.linkedin.com/in/karinemellata/), [Michael](https://www.linkedin.com/in/michael-lin-2933a013b/) or [founders@withintrinsic.com](mailto:founders@withintrinsic.com), we would love to schedule a demo!", "url": "https://www.ycombinator.com/launches/IAW-intrinsic-safety-tooling-for-trust-safety-teams", "votes": 64, "created_at": "2023-03-01T20:45:32.177Z" } ] }, { "id": 27935, "name": "compliant-llm", "slug": "compliant-llm", "former_names": [ "ZKomm", "Devpod", "FiddleCube", "compliant-llm", "compliant-llm (fka FiddleCube)" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e836589affa3183241d8a3c3f2914bb8dc44d2a8.png", "website": "https://www.compliantllm.com/", "all_locations": "San Francisco, CA, USA", "long_description": "CompliantLLM detects every data leak into third-party GenAI tools used in your company by monitoring employee interactions.\r\n\r\nSecurity and tech leaders get visibiliity and control over the data flowing into various Gen AI apps used in their organizations.", "one_liner": "Detect every data leak into third-party GenAI tools", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1690346092, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/compliant-llm", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/compliant-llm.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/fiddlecube/", "x_url": "https://twitter.com/FiddleCubeAI", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/e836589affa3183241d8a3c3f2914bb8dc44d2a8.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/a697d7992ef3aad4d19bc4f93cc16167fa703c0d.png" ], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 1124543, "full_name": "Neha Nupoor", "title": "Founder", "founder_bio": "Building CompliantLLM - Preventing data exfiltration into Gen AI apps.\n\nBuilt AI Customer Support at Uber.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/nehanupoor/", "x_url": "https://twitter.com/nupoor_neha", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/55cd5adbdf80afa9e7d4349dff30b637b5939d4d.jpg" }, { "user_id": 1103301, "full_name": "Kaushik Srinivasan", "title": "Founder", "founder_bio": "Working on preventing data leaks into Gen AI apps.\n\nWas previously building payment systems at Google Pay and AI customer support at Uber.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/kaushik92/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/da6e5ea0e13e2b882e4979f9ebce8415c3a9dff7.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 92988, "title": "CompliantLLM - Detect Data Leaking into 3rd Party GenAI tools", "tagline": "Detect data breaches in approved & unapproved AI workflows", "body": "Hi YC,\n\nWe’re [Kaushik](https://www.linkedin.com/in/kaushik92/) and [Neha](https://www.linkedin.com/in/nehanupoor/), cofounders of [CompliantLLM](https://www.compliantllm.com?utm_source=bookface&utm_medium=social&utm_campaign=compliant-llm).\n\nCompliantLLM detects every data leak into third-party GenAI tools used in your company.\n\nIf you’re worried about data exfiltration risks at your organization, reach out to us at [founders@fiddlecube.ai](mailto:founders@fiddlecube.ai). We would love to learn more!\n\nhttps://www.youtube.com/watch?v=XbheLR6CIMc\n\n## TL;DR\n\n* GenAI products introduce new surfaces for data leaks – a growing concern with increasing AI usage in companies.\n* CompliantLLM analyzes AI logs and finds GenAI-specific attacks and anomalies to detect data breaches.\n* It surfaces every PII-leak or unauthorized/malicious data access, across approved and unapproved AI workflows.\n\n## Problem\n\n* GenAI introduces new ways for leaking sensitive data or breaching data access controls. The problem is getting worse as AI agents connect to more workflows with increasing autonomy.\n* Currently, **leaders lack visibility and control into which GenAI apps are in use and the potential data-exfiltration risks that they create.**\n\n![uploaded image](/media/?type=post&id=92988&key=user_uploads/1103301/bf03c8da-80fd-4ea5-9dc6-8b280f72e7da)\n\n**Source:** https://www.ibm.com/reports/data-breach\n\n---\n\n---\n\n## Solution\n\nCompliantLLM monitors employee interactions with third-party GenAI tools and detects every data exfiltration incident.\n\nWe monitor users’ past actions, their role, and data access permissions across teams, identifying unauthorized data access and prompt injection attacks.\n\nWe segment the violations into meaningful and malicious types, and give the teams an option to take an unobtrusive approach towards AI governance in the company.\n\n## Ask\n\nIf this is on your mind, we would love to talk more. Reach out to us at [**founders@fiddlecube.ai**](mailto:founders@fiddlecube.ai)\n\n## Team\n\n![uploaded image](/media/?type=post&id=92988&key=user_uploads/1103301/ca7550ae-8834-4cb8-ac11-0f93305f9b04)\n\nKaushik was previously an engineer leading payments solutions at Google Pay, where he faced the problem of building compliant payment gateway solutions. He worked at Uber before this on their customer support AI efforts, where he met Neha.\n\nNeha previously led the automation of customer support at Uber using AI Agents. She brings her experience of building real-time AI workflows that worked at Uber’s scale and complexity to build CompliantLLM.", "url": "https://www.ycombinator.com/launches/OBo-compliantllm-detect-data-leaking-into-3rd-party-genai-tools", "votes": 8, "created_at": "2025-08-14T15:04:31.154Z" }, { "id": 82440, "title": "FiddleCube - Data platform for fine-tuning LLMs", "tagline": "Synthetic data platform to streamline dataset generation for custom LLM training", "body": "### TL;DR: Upload your files & generate a high-quality dataset in minutes. [Give it a go](https://dashboard.fiddlecube.ai/sign-up)!\n\nLlama3.1 405B has just dropped, and it's already outperforming GPT-4o. As we assist our customers in fine-tuning domain-specific LLMs, we see firsthand that it's no small feat. It requires an extensive, diverse, and superior-quality dataset, and multiple iterations of training to get it right.\n\n## ❌ Creating high-quality datasets from raw data is messy!\n\n**Identifying the right data** in the knowledge base is a manual, challenging process.\n\n**Data cleaning and filtering** takes significant effort and man-hours, and is error-prone.\n\n**Costs of training & evals skyrocket** **with bad datasets** requiring multiple iterations of training.\n\n## ✅ We're making it easy and efficient for businesses.\n\nFiddleCube’s data platform converts your data corpus into a high-quality fine-tuning dataset. Generate 1000s of rows of multi-turn chat, function-calling, and QnAs. Additionally, augment your datasets synthetically from unstructured data to improve your model's performance.\n\n**Our users have used us to:**\n\n* **Save >2 months in their data cleaning, preparation, generation, and quality check cycle.**\n* Generate a **high-quality training dataset** that accurately resembles their production data without PII.\n* Generate a **golden dataset** for testing & benchmarking their AI-powered apps.\n* Generate **gender diversity, safety & guard railing** dataset.\n* **Customize the tone** of their responses instead of a standard GPT-like tone.\n\n## 🚀 FiddleCube’s - Data platform empowers you with:\n\n* **Data generation - A simple & clean UI** to generate datasets from PDF, TXT, and data sources to train your model.\n* **Dataset Management** - Editing, versioning, RBAC, and synthetic data augmentation to create self-correcting datasets.\n* **Diagnosing** **and improving underperforming queries** with regression testing & detailed data diagnostic tools.\n* Use **production logs and feedback** to auto-generate datasets.\n\n![uploaded image](/media/?type=post&id=82440&key=user_uploads/1103301/d3b373f7-800d-4539-8790-364859f60904)\n\n### 🙋‍♂️ Let's Take Your Data to Production and Get You Started\n\n[Sign up here](https://dashboard.fiddlecube.ai/sign-up) to generate your first dataset. Or [book a call with us](https://fiddlecube.ai/contact-us) for help in getting started.\n\n![uploaded image](/media/?type=post&id=82440&key=user_uploads/1103301/1b2e9f87-678a-4b9b-9f13-f1c4e4e3af3b)\n\n", "url": "https://www.ycombinator.com/launches/LRg-fiddlecube-data-platform-for-fine-tuning-llms", "votes": 37, "created_at": "2024-07-25T16:24:53.504Z" }, { "id": 73434, "title": "🎲 FiddleCube - Automated dataset generation for fine-tuning LLMs", "tagline": "Create high-quality datasets for fine-tuning and reinforcement learning.", "body": "Tl;Dr; Fine-tuning LLMs requires high-quality datasets. FiddleCube automagically generates fine-tuning datasets from your data.\n\n**User Data Source > Fine-tuning Datasets (FiddleCube) > Fine-tuning**\n\nHead over to [fiddlecube.ai](http://fiddlecube.ai) to get started!\n\nHi everyone, we are Neha and Kaushik. We’re building FiddleCube to make high-quality datasets accessible to everyone.\n\n![uploaded image](/media/?type=post&id=73434&key=user_uploads/1103301/b1e5c3f8-b7af-42f7-b251-bbb11ad5d38f)\n\n🦸 Kaushik spent most of the last decade building tech at companies like Google, Uber, and LinkedIn.\n\n🧙🏻 Neha has spent a similar amount of time as a dev at multiple startups, most recently at Uber\n\n👫🏻🫶🏻 We met at Uber, eventually got married, and decided to build a startup together, following our passion for AI.\n\n# 😤 The Problem\n\nIn the real world, LLMs need to be aligned to follow human instructions. It needs to respond in a manner that is:\n\n* Positive, Truthful & Honest\n* And in accordance with human beliefs and sensibilities\n\n![uploaded image](/media/?type=post&id=73434&key=user_uploads/1103301/d7f8e8a0-2522-4ecf-a80e-d591c6cacd9a)\n\nRemarkable outcomes have been achieved towards this end by fine-tuning and reinforcement learning with high-quality datasets. However, creating these datasets takes significant time, manual effort, and money.\n\n# 💡The Solution\n\nFiddleCube leverages a suite of AI models to create high-quality datasets for fine-tuning and reinforcement learning.\n\n* Generate annotated datasets from raw data.\n* Augment the datasets - create large datasets to significantly improve model performance.\n* Evaluate and improve the data quality of your training dataset.\n\nWe create a rich, diverse, high-quality dataset to produce better models with a lower corpus of data.\n\n# ⚙️ Use Cases\n\n### 👩🏻‍🎤Personalization\n\nGive the model a personality, voice, and tone. For example, you can create a safe Dora the explorer / Peppa Pig model that speaks to children.\n\n### 👩🏻‍💻 API calling and coding\n\nFor specific use cases like making API calls or generating code, fine-tuning has provably demonstrated better results. You can fine-tune the LLM on a corpus of code or API data to significantly improve their ability at these tasks.\n\n### 🚄 Increase Throughput, Reduce Latency and Cost\n\nFine-tuned LLMs are much smaller than the foundational models. You can use them to increase throughput and reduce latency and cost.\n\n### 🗺️ Low Resource Domains\n\nLLMs perform poorly in certain domains like vernacular languages. These domains lack a sufficient corpus of high-quality data. Fine-tuning using generated datasets has shown remarkable improvements over the state of the art in these cases.\n\n# 🙏🏻 Ask\n\nAre you fine-tuning any LLM, or looking to fine-tune LLaMa V2, MPT, or Falcon? We would love to know your use case. Drop a comment on what you are doing, or reach out to us privately!\n\n# 👋🏻 Need help with fine-tuning?\n\nBook a slot on our calendar 🗓️ or drop us a line using:\n\n\\- Email 📧 : [kaushik@fiddlecube.ai](mailto:kaushik@fiddlecube.ai)\n\n\\- [Typeform](https://m6qcwjky3c1.typeform.com/to/CyfMeAbT) 📝\n\nand we will get back to you!", "url": "https://www.ycombinator.com/launches/J6Q-fiddlecube-automated-dataset-generation-for-fine-tuning-llms", "votes": 87, "created_at": "2023-07-26T05:46:22.692Z" } ] }, { "id": 28216, "name": "Escape", "slug": "escape", "former_names": [ "Escape", "Escape - GraphQL Security", "Escape", "Escape - GraphQL Security", "Escape - Modern Application Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0210bbcb75b7ba7c4519705bd24c324666b9538b.png", "website": "https://escape.tech", "all_locations": "Paris, Île-de-France, France", "long_description": "Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows.", "one_liner": "Offensive security for the teams that are 100x outnumbered", "team_size": 29, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1674779031, "tags": [ "Developer Tools", "Security", "API", "GraphQL" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/escape", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/escape.json", "year_founded": 2020, "city": "Paris", "country": "FR", "linkedin_url": "https://www.linkedin.com/company/escapetech", "x_url": "https://twitter.com/escapetechhq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/escape-b74e", "github_url": "https://github.com/Escape-Technologies/", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0210bbcb75b7ba7c4519705bd24c324666b9538b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/800e3fb4725e8871c3b399e845bf3cbf34384993.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1709764, "full_name": "Tristan Kalos", "title": "Founder", "founder_bio": "Building Escape (YC W23) to help AppSec and Engineering teams secure their Single Page Apps, APIs, and Microservices. Previously ML engineer at source{d} and researcher at UC Berkeley. Passionate about solving complex business problems with creative technology or user experiences. ", "is_active": true, "linkedin_url": "https://linkedin.com/in/tkalos", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/974be13b71b658127ab50adf890409c4b115df2e.jpg" }, { "user_id": 1167886, "full_name": "Antoine Carossio", "title": "Founder", "founder_bio": "🇫🇷 • Engineer • UC Berkeley • Apple", "is_active": true, "linkedin_url": "https://linkedin.com/in/acarossio", "x_url": "https://twitter.com/icarossio", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a423c0fb183e5b9696de588124a6cbdefe8c2193.jpg" } ], "jobs": [ { "id": 84153, "title": "Head of Sales ", "url": "https://www.ycombinator.com/companies/escape/jobs/yfEXoM2-head-of-sales", "location": "New York, NY, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$200K - $400K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Escape raises $18M Series A to replace legacy scanners with AI agent-driven discovery, pentesting, and remediation", "url": "https://escape.tech/blog/escape-raises-18m-series-a/", "date": "Mar 09, 2026" }, { "title": "New Security Research: We discovered over 2k high-impact vulnerabilities and PII in apps built with vibe coding platforms", "url": "https://escape.tech/blog/methodology-how-we-discovered-vulnerabilities-apps-built-with-vibe-coding/", "date": "Oct 29, 2025" }, { "title": "Meet Escape Copilot: Automate App and Scan Management via MCP", "url": "https://escape.tech/blog/meet-escape-copilot-automate-app-and-scan-management-via-mcp/", "date": "Jun 05, 2025" }, { "title": "Escape DAST Now in Beta: Front-End & SPA Testing Made Easy", "url": "https://escape.tech/blog/front-end-dast-beta/", "date": "Dec 10, 2024" }, { "title": "Fortune 1000 at risk: How we discovered 100k vulnerabilities", "url": "https://escape.tech/blog/fortune-1000-at-risk-30k-exposed-apis-100k-vulnerabilities/", "date": "Nov 20, 2024" } ], "launches": [ { "id": 69497, "title": "🛡 Escape - Secure your GraphQL APIs", "tagline": "We help companies create Fast, Secure, and Reliable GraphQL APIs", "body": "### **tl;dr:** **Securing GraphQL is hard.** Escape makes it easy for developers to build secure and reliable GraphQL APIs. **You can test it for free and get your results in seconds** using this link: \n\nHello everyone, we are Antoine and Tristan, the founding team behind Escape.\n\n![uploaded image](/media/?type=post&id=69497&key=user_uploads/1231138/4111cf07-557b-4da5-ad36-d2336aa3913a)\n\n🧠 **Tristan** (left) previously worked as a **GraphQL Developer** and experienced himself the need for better tooling in this ecosystem. 💪 **Antoine** (right) previously worked as a security engineer for the French Government and **Apple** 🍎 which led him to the journey of helping developers secure their code.\n\n### 🛡 Why are we building Escape?\n\nGraphQL has seen exponential growth in the past years and is now used by 20% of all developers. Companies like **Paypal**, **Walmart**, **Twitter**, and **Airbnb** are now all relying on GraphQL APIs for **their** **core businesses**.\n\nYet, we observed that most - as in like **95%** - of GraphQL APIs that exist today are insanely vulnerable to cyberattacks.\n\nThe reason is simple: GraphQL has an entirely different structure than traditional APIs like REST.\n\nExisting security tools do not support it, leaving GraphQL developers and organizations completely blind to the security of what they release and **putting their business at risk**.\n\n### 🎯 Our solution\n\nWe aimed to build the GraphQL Security Testing tool that devs would love. As developers ourselves, we think such a tool would\n\n* _be_ **fast to run in CI/CD**\n* _be super_ **easy to set up** and maintain\n* _give_ **relevant results**\n\nExisting tools fail at achieving the latter because they rely on brute-forcing API requests. Thus, most requests are blocked at the validation layer, failing to test the actual code.\n\nAt Escape, **we developed a new approach called _feedback-driven API exploration_**. We crafted a graph traversal algorithm that learns from the API's responses how to generate requests that actually make sense from a business standpoint.\n\n![uploaded image](/media/?type=post&id=69497&key=user_uploads/1231138/4d4ffbf4-e5af-46b9-927d-904530700300)\n\n_Requests generated by bruteforce (left) vs. **Escape’s feedback-driven exploration** (right)_\n\nUsing this technique, we are able to pass the validation layer and test the code of the application at a deeper level than previous solutions. So far, we have achieved **more than 80% coverage** in most applications without fine-tuning.\n\n### 🚀 let us assess the security of your GraphQL API for free in seconds\n\nIn only 6 months, we partnered with **Snyk** and **Postman**, got into the GraphQL foundation, and worked with companies like **Neo4j** and **ArangoDB**.\n\n👉 If you are using GraphQL yourself, you are welcome to try our platform and **get your application's security report for free**, as **we unlocked all the features for the YC community**: !", "url": "https://www.ycombinator.com/launches/I4v-escape-secure-your-graphql-apis", "votes": 1096, "created_at": "2023-02-21T19:45:54.930Z" } ] }, { "id": 28778, "name": "Xeol", "slug": "xeol", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3d8557d5066f2f1e94f1be8ddc427697b79cc8d1.png", "website": "https://www.xeol.io/", "all_locations": "New York City, NY, USA", "long_description": "Pronounced Zee-O-L. \r\n\r\nEnd-of-life (EOL) and outdated software are a black box of vulnerabilities with very limited remediation paths. These 2 factors combine to make managing them a necessary proactive practice. Xeol enables enterprises and Fortune 500s to create a proactive EOL management program that directly contributes to better vulnerability management and lower cyber insurance. ", "one_liner": "Close your outdated dependency attack vector", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1689618282, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2023", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/xeol", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/xeol.json", "year_founded": 2023, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/xeol", "x_url": "https://twitter.com/xeol_io", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/xeol", "github_url": "https://github.com/xeol-io", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3d8557d5066f2f1e94f1be8ddc427697b79cc8d1.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/8c4047771eda54f492d2bcd886af0cc692bc72b3.png" ], "primary_partner": null, "founders": [ { "user_id": 1279127, "full_name": "ShiHan Wan", "title": "Founder", "founder_bio": "CEO @ Xeol. Backend Engineer.\n\nPreviously helped build 2 startups from early to 🦄, now doing that for Xeol.\n\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/shihanwan", "x_url": "https://twitter.com/shihanwan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6ccd5955aeabc741fbfaefb062eb80e08362368c.jpg" } ], "jobs": [], "news": [ { "title": "🎉 Announcing our $3.2M Seed Round!", "url": "https://www.xeol.io/post/announcing-our-3-2m-seed-round", "date": "Dec 12, 2023" } ], "launches": [ { "id": 80578, "title": "bumpgen - keep your code up-to-date with AI", "tagline": "Open source tool to generate code fixes for breaking changes", "body": "![uploaded image](/media/?type=post&id=80578&key=user_uploads/89898/e210f386-2345-4c2e-ba0a-6133d756141a)\n\n[**bumpgen**](https://github.com/xeol-io/bumpgen) generates fixes for breaking changes in version upgrades with AI\n\n* 🧑🏼‍💻 `bumpgen ` to get fixes to your version bump breaking changes\n* 🔑 Bring your own **OpenAI API key**\n* 🌐 Supports **Typescript** codebases\n\n### Why build bumpgen?\n\nKeeping your dependencies updated is a good security and engineering practice (just not too up-to-date, thanks xz 🙏🏼). But they can be a pain to actual perform because:\n\n* **Major version bumps** have breaking changes and no one wants to fix them.\n* **25% minor version bumps** have breaking changes as well (semver isn’t perfect)\n* There can be a lot of version bumps from small packages to large frameworks\n\n### How Does bumpgen work?\n\n![uploaded image](/media/?type=post&id=80578&key=user_uploads/1279127/f06347b9-da03-4f95-aa1b-8f850576b262)\n\n**bumpgen** is pretty straight forward:\n\n* **BUMP** your dependency version then **GEN**erate the fixes for the breaking changes\n* Quick to get started with `npm install -g bumpgen`\n* Works on top of your Dependabot or Renovate to take care of those gnarly breaking changes\n\nIf you are curious how bumpgen identifies, fixes, then propagates the breaking change fix, we added bumpgen’s architecture and design decisions [**here**](https://github.com/xeol-io/bumpgen) 👈\n\n### How to start?\n\n* 🧑🏼‍💻 [**Try it out**](https://github.com/xeol-io/bumpgen), it’s 100% open source\n* ⭐ [**Support**](https://github.com/xeol-io/bumpgen) the project with a star\n* 📩 [**Get updated**](https://www.xeol.io/beta) on the GitHub app release", "url": "https://www.ycombinator.com/launches/Kxe-bumpgen-keep-your-code-up-to-date-with-ai", "votes": 43, "created_at": "2024-05-02T15:07:15.215Z" }, { "id": 73333, "title": "🌌 Xeol - Modern platform for software supply chain security", "tagline": "Cut through the noise, identify and remediate risks, then enforce security policies", "body": "![uploaded image](/media/?type=post&id=73333&key=user_uploads/1279127/210f8a5b-d0c2-4f78-a504-dea9eb6669ca)\n\n### TLDR\n\n> Fortune 500 companies use Xeol to connect all their software dependencies into a contextual graph to ask questions like “am I affected by vulnerability X?” and enforce policies like “ensure all my docker images were signed by me?”\n\n![uploaded image](/media/?type=post&id=73333&key=user_uploads/1279127/040b5865-0ba9-42f6-a893-bbf3f0eb3222)\n\nWe first met 6 years ago as early engineers at **Ada** leading backend, cloud infrastructure, and security. Right before founding Xeol:\n\n* **Benji** was a Sr DevOps Engineer at **Datadog** leading its service catalog project with a near decade career in DevOps\n* **ShiHan** was the Director of Engineering helping build 2 startups from early stage to 🦄\n\nWe have been in the startup world for many years and are now on our own journey to help AppSec engineers quickly identify, remediate, and enforce security risks.\n\n### Problem. A New Attack Vector\n\nAsk anyone on the street to plug in a random USB drive and they will scoff. They know it’s unsafe! But developers do this every day when they use open-source packages as part of their software supply chain. The typical npm package has **86 dependencies** and with supply chain attacks up **600%** over the past year alone, this attack vector is widening.\n\nWhat’s not working?\n\n* **Too much noise:** tools that show all possible CVEs without contextual runtime information make prioritization near impossible leading to alert fatigue\n* **Attacks are more common:** generative AI enables malicious actors to easily launch attacks\n* **Huge attack surface:** many actors involved including OSS maintainers and their code, CI/CD systems, container orchestrators, and in-house developers\n\n### Solution. Complete Ontological Visibility\n\n![uploaded image](/media/?type=post&id=73333&key=user_uploads/1279127/a7017029-25ff-45a2-b114-6386d949057d)\n\nXeol is an **agentless** solution that scans your software artifacts at **build** and **runtime** then creates a **contextual graph** of your software supply chain. This contextual graph allows AppSec engineers to:\n\n**answer** questions like\n\n* Where am I using package X?\n* Which software are end-of-life?\n* Which packages are missing SLSA attestations?\n* Which software artifacts are produced from repo X?\n\n**enforce** policies like\n\n* Ensure all Docker images were built by my org from our CI pipeline\n* Prevent software X, which is end-of-life, from being packaged in our Docker images\n* Ensure sure all packages meet a minimum [OSSF](https://openssf.org/) score\n* Prevent any dependencies using a GPL license\n\n### Our Ask\n\n**See** Xeol’s graph capabilities in action [here](https://dashboard.xeol.io/demo)\n\n**Try** our open-source CLI [tool](https://github.com/xeol-io/xeol) to scan for end-of-life software\n\n**Follow** us on [LinkedIn](https://www.linkedin.com/company/xeol), [GitHub](https://github.com/xeol-io), or [Twitter](https://twitter.com/xeol_io) to get the latest updates", "url": "https://www.ycombinator.com/launches/J4n-xeol-modern-platform-for-software-supply-chain-security", "votes": 45, "created_at": "2023-07-24T02:01:24.497Z" } ] }, { "id": 28862, "name": "Corgea", "slug": "corgea", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4f659e1a5051b790e28f097f1c858880dc797b7f.png", "website": "https://www.corgea.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Corgea is an autonomous application security platform that finds and validates vulnerabilities, then generates safe code fixes developers can apply in their existing workflow. In production customers like Zapier and Yageo, see ~20% more true positives and ~90% fewer false positives (vs their prior tooling), reducing triage and speeding remediation without adding headcount.\r\n", "one_liner": "Corgea finds, and fixes insecure code and packages autonomously. ", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1686005960, "tags": [ "Developer Tools", "SaaS", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/corgea", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/corgea.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/corgea/", "x_url": "https://twitter.com/CorgeaInc", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/corgea", "github_url": "https://github.com/Corgea", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4f659e1a5051b790e28f097f1c858880dc797b7f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 65616, "full_name": "Ahmad Sadeddin", "title": "Founder", "founder_bio": "Ahmad is the founder and CEO of Corgea, which is his 3rd startup. His last one was acquired by Coupa. He spent the last 3 years of his tenure there leading the payments product where he worked on making sure their products were secure.", "is_active": true, "linkedin_url": "https://linkedin.com/in/asadeddin", "x_url": "https://twitter.com/asadeddin", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2faba562e39bcac6bfbe892753fd27713da6b74d.jpg" } ], "jobs": [ { "id": 69626, "title": "Senior software engineer - California", "url": "https://www.ycombinator.com/companies/corgea/jobs/BkQzEJ1-senior-software-engineer-california", "location": "San Francisco, CA, US / San Mateo, CA, US / Remote (CA, US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $200K", "equity_range": "0.50% - 2.00%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 69628, "title": "Senior software engineer - Jordan", "url": "https://www.ycombinator.com/companies/corgea/jobs/28hnjyF-senior-software-engineer-jordan", "location": "JO / Remote (JO)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$20K - $65K", "equity_range": "0.10% - 2.00%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 81750, "title": "Software engineer - Jordan", "url": "https://www.ycombinator.com/companies/corgea/jobs/4ikDBbl-software-engineer-jordan", "location": "JO / Remote (JO)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$17K - $40K", "equity_range": "0.10% - 2.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 81751, "title": "Software engineer - California", "url": "https://www.ycombinator.com/companies/corgea/jobs/Fj7nVVP-software-engineer-california", "location": "San Francisco, CA, US / San Mateo, CA, US / Remote (CA, US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$100K - $180K", "equity_range": "0.25% - 2.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 83239, "title": "Security Researcher", "url": "https://www.ycombinator.com/companies/corgea/jobs/flq0ShW-security-researcher", "location": "San Francisco, CA, US / San Mateo, CA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $220K", "equity_range": "0.25% - 0.75%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "JavaScript", "Python", "Information Security", "Software Security" ] }, { "id": 91598, "title": "Founding DevOps Engineer - California", "url": "https://www.ycombinator.com/companies/corgea/jobs/5adGCih-founding-devops-engineer-california", "location": "San Francisco, CA, US / Remote (US; CA, US)", "type": "Full-time", "role": "Engineering", "role_type": "Devops", "salary_range": "$100K - $210K", "equity_range": "0.05% - 0.50%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 91601, "title": "Founding DevOps Engineer - Jordan", "url": "https://www.ycombinator.com/companies/corgea/jobs/AxEYjCf-founding-devops-engineer-jordan", "location": "JO / Remote (JO)", "type": "Full-time", "role": "Engineering", "role_type": "Devops", "salary_range": "$25K - $42K", "equity_range": "0.05% - 0.20%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": " Introducing PolicyIQ: Contextual Security Analysis for Smarter, More Accurate Results - Corgea - Home", "url": "https://corgea.com/blog/introducing-policyiq-contextual-security-analysis-for-smarter-more-accurate-results", "date": "Jan 15, 2025" }, { "title": "Corgea’s raises $2.6 Million Seed Round", "url": "https://en.incarabia.com/shorooq-partners-leads-corgea%E2%80%99s-us26-million-seed-round-694875.html", "date": "Nov 06, 2024" }, { "title": "Corgea Recognized as an IDC Innovator for DevSecOps Automated Remediation", "url": "https://corgea.com/blog/corgea-recognized-as-an-idc-innovator-for-devsecops-automated-remediation", "date": "Sep 18, 2024" } ], "launches": [ { "id": 103899, "title": "Corgea: Agentic Pentesting", "tagline": "An autonomous penetration testing engine that runs in hours and not weeks", "body": "[**Corgea AI Pentesting**](https://corgea.com/products/ai-pentest): an autonomous penetration testing engine that uses AI agents to plan, execute, validate, and report security tests. It doesn’t run a checklist. It reasons about your application.\n\n\n\n## The numbers\n\nIn a recent pentest:\n\n* **Corgea found 25 findings.** The human pentester found 6.\n* **Delivery time: 4-8 hours.** The human pentest took 2 weeks.\n\n![Corgea AI Pentesting findings overview](https://corgea.com/cms/blog/introducing-ai-pentesting/image-3.png)\n\n## How it works\n\nMost autonomous pentesting tools are black-box scanners with better marketing. They probe endpoints against a generic vulnerability checklist and produce a PDF full of theoretical findings that security teams have to triage manually.\n\nCorgea takes a fundamentally different approach. The engine operates like a real pentesting team.\n\n**Multi-agent architecture.** Not a single scanner. Corgea spawns a coordinator agent that assigns specialized sub-agents (an authentication discovery agent, an API exploration agent, a SQL injection expert agent) based on what it discovers. These agents collaborate, share findings, and build on each other’s discoveries. For complex targets, Corgea can spawn hundreds of agents.\n\n![Corgea AI Pentesting multi-agent execution view](https://corgea.com/cms/blog/introducing-ai-pentesting/image-1.png)\n\n**Code-aware, not black-box.** The engine ingests code context, dependency data, infrastructure configuration, and business logic. It uses your existing [AI SAST](https://corgea.com/products/ai-sast) findings for white-box pentesting, exploiting vulnerabilities at runtime that static analysis already identified. This combination of static insight and dynamic testing dramatically amplifies what the engine can find.\n\n**Dynamic adaptation.** Corgea’s agentic architecture is not fixed. The system continuously adapts its strategy based on what it learns about the target, dynamically scaling the number of agents, their responsibilities, and their specialization. It doesn’t follow a one-size-fits-all workflow.\n\n**Exploitability validation built in.** Corgea doesn’t report theoretical vulnerabilities. Agents validate exploitability during the test itself, confirming a finding can be triggered, capturing evidence, and explaining business impact. This eliminates the triage burden that makes traditional pentest reports a firehose of unverified findings.\n\n![Corgea AI Pentesting exploit reproduction script](https://corgea.com/cms/blog/introducing-ai-pentesting/image-2.png)\n\n## The pipeline\n\n1. **Environment setup.** Corgea provisions a Linux-based sandbox with a full suite of security tools for crawling, discovery, reconnaissance, and exploit validation.\n2. **Scope and context ingestion.** Target scope, endpoints, API documentation, auth flows, user roles, business logic context, and optional code/repo context. Both authenticated and unauthenticated.\n3. **Attack surface discovery.** Maps reachable routes, APIs, parameters, forms, auth boundaries, authorization-sensitive workflows, and exposed services.\n4. **Autonomous test planning.** AI agents reason about application structure and generate test plans for broken access control, IDOR, authentication bypass, injection, SSRF, insecure file handling, sensitive data exposure, and business logic abuse.\n5. **Safe execution and validation.** Hundreds of sub-agents execute probes, observe responses, adapt based on application behavior, and validate exploitability.\n6. **Evidence generation.** For confirmed issues: affected endpoint, payload or request sequence, response evidence, exploitability reasoning, severity, business impact, and remediation recommendation.\n7. **Developer-native remediation.** Findings go directly into developer workflows (PR comments, Jira tickets, Slack notifications, CI/CD pipelines) with reproduction steps, code context, and suggested fixes.\n8. **Reporting.** Findings converted into reports for management, auditors, and customers.\n\n## Supervised autonomy\n\nAutonomous doesn’t mean uncontrolled. Humans remain in control of:\n\n* Defining and approving test scope\n* Setting rules of engagement\n* Approving aggressive or potentially disruptive testing\n* Reviewing sensitive findings\n* Accepting final pentest reports\n* Making risk decisions for production environments\n\nCorgea automates the repetitive and technically complex parts. Humans own the risk decisions.\n\n## Continuous, not point-in-time\n\nTraditional pentesting delivers a PDF report weeks after testing begins. By the time you read it, your application has changed.\n\nCorgea supports both one-time and continuous autonomous pentesting. Retesting is automatic after remediation. Findings close the loop between discovery, fix, and verification in hours, not waiting for the next quarterly cycle.\n\n## Ready to Ditch Security Theater?\n\nIf you're tired of checkbox pentests:\n\nBook a call: \n\nEmail us: sales@corgea.com", "url": "https://www.ycombinator.com/launches/R1n-corgea-agentic-pentesting", "votes": 18, "created_at": "2026-06-24T15:40:00.793Z" }, { "id": 77558, "title": "🐕 Corgea - Easily and quickly fix vulnerable code using AI", "tagline": "We make it easy for companies fix vulnerable code by automating away 80% of the engineering work needed. ", "body": "**TL;DR**: Corgea helps companies fix vulnerable source code. It is an AI-powered security platform that writes security patches for engineer approval, saving 80% of the engineering effort needing and $$$. Having Corgea is like having a security engineer on staff constantly focused on making your code more secure. \n\nHi YC! This is Ahmad, and along with Adam, Pratik and Tamara we’re building [Corgea](https://corgea.com/).\n\n![uploaded image](/media/?type=post&id=77558&key=user_uploads/65616/fd08a653-a912-4b81-8d59-cfb4c56e0d95)\n\n### 🕳️ Unresolved holes in software\n\nCompanies scan their code for security vulnerabilities, and are often met with a big pile of findings. On average, companies take 3 months to fix a vulnerability, and 60% of breach victims were aware of the unpatched vulnerability that was exploited.\n\nWhy? This is because engineers prioritize revenue-generating work, often leaving security fixes lower in priority. It is also really expensive for companies to fix vulnerabilities, costing them between $400 - $4,000 per fix. Unacceptable in today’s environment of more frequent security breaches and increasingly sophisticated attacks.\n\nSecurity teams kept complaining to us that all of their hundreds (yes hundreds) of security tools alert them about issues without giving them a way to actually resolve the issues automatically. This leaves security teams hanging high and dry.\n\n### 🐕 What does Corgea do?\n\nWe’re approaching one of the hardest problems in security with an entirely new approach. Unlike other tools that have been vehemently obsessed with just reporting on vulnerabilities, Corgea fixes them.\n\nCorgea connects to your existing SAST (Static application security testing) tools, like Snyk and Semgrep, and automatically writes code fixes for the reported vulnerabilities. Security teams can issue a pull request for the fix with a single click without disrupting any workflows. Engineers get the code fix for review, and well written descriptions helping them understand the changes.\n\nFor example, Corgea can rewrite code and issue PRs to fix SQL injection, path traversal, SSRF, or hundreds of other vulnerabilities. Here’s a brief demo to show Corgea’s capabilities.\n\n[Fixing Issues using Corgea - Watch Video](https://www.loom.com/share/318f06b97dac48628971bb52db372fb8)\n\n![](https://cdn.loom.com/sessions/thumbnails/318f06b97dac48628971bb52db372fb8-1702061376925-with-play.gif)\n\n### ✅ Empowering Security and Freeing up Engineering\n\nSecurity is often perceived as a blocker to engineering, and vice versa. With Corgea, we’re empowering security teams to be able to take action while also accelerating engineering velocity. This fundamentally changes the dynamic between teams.\n\n* **💪 Stronger code:** companies can now secure their products and reduce their fix times to hours without taxing engineering. Many prospects we spoke to have tens of thousands of vulnerabilities that now has a fighting chance in reducing them.\n* **🚀 Increase engineering velocity:** since Corgea is issuing the code fix, we see up to an 80% savings in time engineers spend fixing security issues. Security can now be an enabler to engineering rather than a blocker.\n* **💰 Slash Costs:** Research shows that a single vulnerability takes about $400 - $4,000 to fix. Corgea reduces these costs by up to 80%. Many enterprises can expect to save at least $10m in direct development costs. This doesn’t account for breach cost savings.\n\nOften, security software lacks a clear return on investment or value proposition. They are frequently bought due to fear, uncertainty, and doubt. At Corgea, our belief is that security software needs to lead first with real value and a clear ROI.\n\n### 🌟 How is Corgea different than existing solutions?\n\nThe current market is flooded with tools that overwhelm security teams with alerts and are not effective at fixing what they’re reporting.\n\n* General code-gen tools do not specialize in security and we’ve seen them inadvertently introduce security issues unbeknownst to the engineer. Additionally, they often do not integrate into a wider ecosystem of tools, preferring to focus solely on their own findings.\n* Most SAST & SCA vulnerability scanners do not remediate issues. Many tout this but it’s mostly limited to upgrading packages from one version to another to reduce a CVSS. This often introduces downstream challenges. If they do offer CWE remediation capabilities their success rates are very low because they’re often based on traditional AI methodologies. Finally, they do not integrate into a wider ecosystem of tools because they want to only serve their own findings.\n\nEnterprises often use multiple scanners like Snyk, Semgrep, Checkmarx, and may have multiple repository tools like Github, Gitlab and Bitbucket for their code. They need a solution that consolidates across their existing tools.\n\n### 👩🏽‍💻 Who is building Corgea?\n\nEach member of the Corgea team has experienced the challenges of addressing vulnerabilities in both security and engineering. We first hand witnessed the frustration of teams in wanting to deliver on high quality feature-rich secure software. Our goal is to shatter the silos between the teams and empower both of them rather than empower one at the expense of the other.\n\nIn our prior roles, we designed, secured and built mission-critical software products at companies like of Coupa, Autodesk, and PlanGrid.\n\n### 🎉 Want to try it?\n\nWe’re really excited to help companies in automating the security of their source code. [Use Corgea today](https://www.corgea.app/registration/) for free and without a credit card. Setup takes less than a few minutes. Feel free to [reach out to us](https://calendly.com/asadeddin/30min?month=2024-01) to chat and get a more in-depth demo.", "url": "https://www.ycombinator.com/launches/KAw-corgea-easily-and-quickly-fix-vulnerable-code-using-ai", "votes": 24, "created_at": "2024-01-16T16:32:31.262Z" }, { "id": 73406, "title": "🐕 Corgea - Enterprise data security and privacy", "tagline": "Empowering enterprises to secure sensitive data", "body": "Hi everyone!\n\nWe’re building [Corgea](https://corgea.com?utm_source=yc&utm_medium=cpc&utm_campaign=yc_launch&utm_id=yc_launch) - a data security and privacy platform that automates sensitive data protection and compliance in the products companies make.\n\n### [**🚩**](https://emojipedia.org/triangular-flag/) **The Problem**\n\nCompanies process sensitive data, but don't know what it is, and who they share it with. They can’t protect and make private what they don’t know they have and what it is. Additionally data protection requires a lot of different stakeholders to come together, and they lack the proper tools to collaborate around it.\n\n### [**⚡**](https://emojipedia.org/high-voltage/) **How does it work?**\n\nCorgea monitors data traffic, classifies sensitive data (e.g., PII, PHI, payment data), and maps where it came from and who it's being shared with. It then tells you which data protection and privacy policies you need to comply with.\n\nCorgea is unique because you can set it up using 300+ out-of-the-box connectors in hours with no IT integration work.\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/f206fe9c-e12f-4749-9946-5567453cecb7)\n\n### [**🧰**](https://emojipedia.org/toolbox/) **What can you do with Corgea?**\n\nHaving this information at your fingertips gives you super powers to be able to:\n\n* Unlock revenue by making data protection your competitive advantage\n* Reduce your attack surface vector of your infrastructure\n* Accelerate breach response\n* Know which 3rd parties receive sensitive data\n* Understand your data compliance requirements\n* Receive alerts for out-of-policy data events\n* Perform data minimization\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/dad1dd93-4e77-4560-95b3-cda61b090fc6)\n\n### [**📖**](https://emojipedia.org/open-book/) **The Story**\n\nOne day, Ahmad received a massive excel sheet to fill out for a data privacy initiative. By the end of it, he had curated hundreds of data fields manually, and identified where they came from and where they were sent to. Feeling how inefficient this was for the company, he decided to automate it by building Corgea.\n\nAhmad previously led the payments product at Coupa and founded 2 other companies before Corgea. His last company was acquired by Coupa.\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/437a87ab-4bc7-47d8-b8a8-9c81c8f0d034)\n\n### **🚀 Team**\n\nAhmad is joined by an amazing team all with experience in working and building software in regulated data environments such as HIPAA, FedRamp, PCI, ITAR, and data privacy.\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/c345a149-ae43-472e-a09c-ff7895239bf9)\n\n### [**❤️**](https://emojipedia.org/red-heart/)**Interested?**\n\nIf you are a company processing sensitive data, and want to unlock revenue while being compliant then [**schedule a call with us**](https://l.linklyhq.com/l/1rIbH)!\n\nCompanies that sign up before Aug 30th are eligible for **50% off**!", "url": "https://www.ycombinator.com/launches/J5y-corgea-enterprise-data-security-and-privacy", "votes": 43, "created_at": "2023-07-25T14:47:43.101Z" } ] }, { "id": 28885, "name": "Hiro", "slug": "hiro", "former_names": [ "Santiago Labs, Inc.", "Telophase" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/d1d128fbe59c627f74405a0637c6a9692cc736f0.png", "website": "https://hirosecure.com", "all_locations": "New York City, NY, USA", "long_description": "", "one_liner": "Agents that handle security work", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1684532337, "tags": [ "Developer Tools", "B2B", "Infrastructure" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/hiro", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/hiro.json", "year_founded": 2023, "city": "New York City", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/d1d128fbe59c627f74405a0637c6a9692cc736f0.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 877309, "full_name": "Ethan Blackburn", "title": "Founder", "founder_bio": "Excited about developer tools/infrastructure and AI. Always down for a hike :)", "is_active": true, "linkedin_url": "https://linkedin.com/in/ethanblackburn", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d8883a267597442937c262b19c84eac21b547f26.jpg" }, { "user_id": 945403, "full_name": "Daniel Schofield", "title": "Founder", "founder_bio": " ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/daniel-sss/", "x_url": "https://twitter.com/thedschofie", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/22c8818c4887068601bc4d22ac33f5ab5d462f09.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 28927, "name": "Metalware", "slug": "metalware", "former_names": [ "Metalware", "metalware", "Metalware", "Isocode" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/17a2d106f9cdebdba12fd6e7d00d9e948e77f5be.png", "website": "https://www.metalware.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Metalware develops advanced firmware security solutions for critical infrastructure, protecting industries like aerospace, defense, automotive, telecom, and healthcare from cyber threats.\r\n\r\nOur product is an automated, intelligent binary fuzzer that enables organizations to efficiently discover and remediate security weaknesses in hardware products before deployment.", "one_liner": "Firmware cybersecurity", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1689732876, "tags": [ "DevSecOps", "Hardware", "GovTech", "Cybersecurity", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/metalware", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/metalware.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/metalwareinc", "x_url": "https://twitter.com/metalwareinc", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/metalware", "github_url": "https://github.com/metalware-inc", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/17a2d106f9cdebdba12fd6e7d00d9e948e77f5be.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 1029004, "full_name": "Ryan Chow", "title": "Founder", "founder_bio": "Co-founder & CEO of Metalware. Previously SpaceX, JHU APL.", "is_active": true, "linkedin_url": "https://linkedin.com/in/chowryan", "x_url": "https://twitter.com/ryanchowww", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0c52029f0b5f3263354745532d7f9c141026b194.jpg" }, { "user_id": 1371245, "full_name": "Andrew Nedea", "title": "Founder", "founder_bio": "Co-founder & CTO of Metalware. Previously SpaceX, Amazon Robotics, Autodesk.", "is_active": true, "linkedin_url": "https://linkedin.com/in/andrew-nedea-404b38131", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f714cc378a1178107248eb18b5ebfeb0c065f391.jpg" } ], "jobs": [ { "id": 88398, "title": "Founding Engineer", "url": "https://www.ycombinator.com/companies/metalware/jobs/uNMiZtp-founding-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Embedded systems", "salary_range": "$120K - $180K", "equity_range": "0.10% - 0.60%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "C", "C++", "Rust", "Hack", "Software Architecture", "Software Security", "Embedded Linux", "Device Drivers", "Microcontrollers" ] } ], "news": [], "launches": [] }, { "id": 28958, "name": "Rimward", "slug": "rimward", "former_names": [ "Quack AI", "Sourcepulse" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/bd215af97ab581709a04ff6284c6091f29c2058e.png", "website": "https://rimward.ai/", "all_locations": "Paris, Île-de-France, France", "long_description": "Rimward helps solar asset managers detect intrusions using the cameras already installed across their sites. It flags camera failures and coverage gaps, and gathers video evidence from multiple cameras to help their team or monitoring provider filter out false alarms and decide when to act.", "one_liner": "Solar farm security software for existing cameras", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1691807496, "tags": [ "Machine Learning", "Computer Vision", "B2B", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/rimward", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/rimward.json", "year_founded": 2023, "city": "Paris", "country": "FR", "linkedin_url": "https://www.linkedin.com/company/rimward", "x_url": "https://twitter.com/rimward_ai", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/rimward", "github_url": "https://github.com/rimward", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/bd215af97ab581709a04ff6284c6091f29c2058e.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1390247, "full_name": "F-G Fernandez", "title": "Founder", "founder_bio": "Founder and CEO of Rimward. FG co-founded Pyronear, an open-source nonprofit, helping turn a Raspberry Pi, his laptop GPU and entry-level camera into a wildfire detection network across Europe and South America. Running AI locally on affordable hardware, it serves French fire services and detected a wildfire 32 km away.\n\nA computer vision researcher by background, he led research at Mindee (YC W21), published conference papers without a PhD and was formerly a top PyTorch contributor.", "is_active": true, "linkedin_url": "https://linkedin.com/in/frgfm", "x_url": "https://twitter.com/FrG_FM", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/eed0d8708a06aa60a305c5d378c1355472e2e065.jpg" } ], "jobs": [ { "id": 92922, "title": "Security / IoT Deployment Engineer", "url": "https://www.ycombinator.com/companies/rimward/jobs/j4L5SKW-security-iot-deployment-engineer", "location": "Paris, IDF, FR / Paris, Île-de-France, FR", "type": "Full-time", "role": "Engineering", "role_type": "Embedded systems", "salary_range": "€50K - €70K EUR", "equity_range": "0.50% - 2.00%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Linux", "Docker", "Information Security", "Internet of Things (IoT)" ] }, { "id": 92923, "title": "Platform Engineer", "url": "https://www.ycombinator.com/companies/rimward/jobs/Ocflvow-platform-engineer", "location": "Paris, IDF, FR / Paris, Île-de-France, FR", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "€50K - €70K EUR", "equity_range": "0.50% - 2.00%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Node.js", "TypeScript", "Docker" ] } ], "news": [ { "title": "Here are this year’s top 40 startups at Station F | TechCrunch", "url": "https://techcrunch.com/2023/11/15/here-are-this-years-top-40-startups-at-station-f/", "date": "Nov 15, 2023" } ], "launches": [ { "id": 74260, "title": "🦆 Quack AI - AI companion for developer onboarding", "tagline": "Bridging open-source efficiency to drive enterprise excellence.", "body": "Hello there! I'm FG (short for François-Guillaume 🇫🇷), the founder of [Quack AI](https://www.ycombinator.com/companies/quack-ai).\n\n**tl;dr:** _We help large software companies run like the most efficient open-source projects. In the future, top-tier developers in those organizations will be able to contribute to pivotal projects, regardless of what teams they're from._\n\n### **💬** The Problem\n\nSuccessful OSS projects are well-organized communities where information is shared and valued. Recognizing this gold standard, corporate giants like Microsoft and IBM are shifting towards 'innersource' - a strategy that fosters ownership, augments communication, and bolsters productivity. However, like many cluttered OSS projects, the vast array of solicitations and varying expertise easily gets overwhelming.\n\n### 💻 Our Solution\n\nOur Dual-Fold Approach:\n\n![uploaded image](/media/?type=post&id=74260&key=user_uploads/1390247/195e8fa1-3b7d-4327-9507-c05a168f1531)\n\n* **Clarity for maintainers** (Web interface): we empower maintainers with a framework to streamline contribution processes. Through our intuitive interface, maintainers can design, curate, and sequence the optimal steps for smooth project contributions.\n\n![uploaded image](/media/?type=post&id=74260&key=user_uploads/1390247/94e7fe10-fc64-4df9-893a-8f20fd16e2ea)\n\n* **Guidance for developers** (VSCode extension): with our IDE extension, developers aren't just compliant; they're efficient. It aids in identifying the right issues, ensures alignment with contribution flows, and keeps a pulse on project priorities.\n\nWhile maintaining popular OSS projects and being an active contributor to PyTorch, I’ve often faced the frustration of seeing Pull Requests from newcomers and thinking “If only that person had the reflex to do XYZ.” Those unwritten norms, which often evade CI restrictions, only sink in after repeated code reviews and numerous trials and errors. This uneasy feeling that “it would be so easy if they were to do ABC” highlights the absence of a solid framework for collaborative development.\n\n### 🦆 The Team\n\n![uploaded image](/media/?type=post&id=74260&key=user_uploads/1390247/153b4727-f3fd-4ba1-9020-45fbc7e19d2b)\n\nI tend to describe myself as a _\"Deep learning engineer by day, open source contributor by night 🦇\"_ which is fairly accurate! On top of being among the top contributors of PyTorch, I’ve led the development of the open-source OCR library of devtool company Mindee (YC W21). I experienced first-hand how some open-source communities are structured to achieve high engagement & productivity, which now appeals to software behemoths.\n\n### 🙏 How you can help\n\n* **🤝 Refer**: know someone in a major corporation looming over innersource or part of a substantial OSS project? Please connect us.\n* **⭐ Engage**: star us on [GitHub](https://github.com/quack-ai/companion) & hop into our [Discord](https://discord.gg/E9rY3bVCWd) for the latest updates!\n* **👍👎 Experiment & feedback**: mold your unique coding insights and take our [VSCode extension](https://marketplace.visualstudio.com/items?itemName=quackai.quack-companion) for a whirl.\n* **📣 Share**: share this post with your network, you can find us on [Twitter](https://twitter.com/quack_ai) or [LinkedIn](https://www.linkedin.com/company/quackai)\n\nUp to revolutionize developer collaboration? Let’s get quacking then!", "url": "https://www.ycombinator.com/launches/JJk-quack-ai-ai-companion-for-developer-onboarding", "votes": 157, "created_at": "2023-08-21T14:34:11.158Z" } ] }, { "id": 29005, "name": "Proof of Human", "slug": "proof-of-human", "former_names": [ "Roundtable", "Proof of Human, PBC" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2b427f260d9fc4b16ea2dd80662ee50a49dc6fee.png", "website": "https://poh.org", "all_locations": "San Francisco, CA, USA", "long_description": "Proof of Human is an API that invisibly detects bots and verifies human identity.\r\n\r\nFounded by Princeton cognitive scientists, Proof of Human leverages world-class research with industry-beating benchmarks so platforms can verify their human users friction-free.", "one_liner": "continuous human verification without CAPTCHAs or user friction", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1685540601, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/proof-of-human", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/proof-of-human.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/proofofhumanpbc", "x_url": "https://twitter.com/proofofhuman", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/2b427f260d9fc4b16ea2dd80662ee50a49dc6fee.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/169574e7aef0db9f748022d24bc10a1d49217e7c.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1368345, "full_name": "Mayank Agrawal", "title": "Founder", "founder_bio": "CEO of Proof of Human, building the invisible Turing Test for the Internet. \n\nBefore Proof of Human, Mayank completed a PhD at Princeton University working at the intersection of cognitive science and artificial intelligence, publishing in high-impact venues including Science, PNAS, and Psychological Review.\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/mayank-agrawal-08849aa6", "x_url": "https://twitter.com/mayankagrawal", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/24d646069178afa83f6c27d40c9cb418b7af6e74.jpg" }, { "user_id": 1202145, "full_name": "Matt Hardy", "title": "Founder", "founder_bio": "Matt is a co-founder of Proof of Human, a company building the invisible Turing Test for the internet. Before Proof of Human, Matt was a PhD student at Princeton University, where he used machine learning and behavioral and experiments to study how people make decisions. Before his PhD, Matt majored in both statistics and economics at the University of Toronto, and worked in data science and econometrics. ", "is_active": true, "linkedin_url": "https://linkedin.com/in/mdahardy", "x_url": "https://twitter.com/mdahardy", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/86c2f5e7c9fed3a1ec7693920ca05ca8d71dd70d.jpg" } ], "jobs": [ { "id": 76838, "title": "Founding Member of Technical Staff", "url": "https://www.ycombinator.com/companies/proof-of-human/jobs/ZTZHEbb-founding-member-of-technical-staff", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $150K", "equity_range": "1.00% - 3.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "Google Cloud", "JavaScript", "Node.js", "Python" ] }, { "id": 108716, "title": "Founding GTM", "url": "https://www.ycombinator.com/companies/proof-of-human/jobs/WOKXDgC-founding-gtm", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$90K - $120K", "equity_range": "1.00% - 3.00%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [ { "id": 117699, "title": "Proof of Human, PBC: The invisible Turing Test for the Internet", "tagline": "The Proof of Human API continuously distinguishes humans from bots and AI agents.", "body": "**The internet is losing the ability to know who is human.**\n\nAI agents can now browse websites, fill out forms, complete tasks, and produce responses that are increasingly difficult to distinguish from those of real people. The systems the internet has historically relied on to separate humans from machines were not built for this world.\n\n## PROOF OF HUMAN\n\nThe Proof of Human API continuously distinguishes humans from bots and AI agents.\\\n\\\nModern AI can produce very human-like outputs. But producing an answer and producing it like a human are different things. Humans hesitate. We make mistakes. We correct ourselves. Our attention changes over time. The way we type, move, and interact leaves rich signatures that remain difficult for AI systems to reproduce. We call the broader research program _the Invisible Turing Test for the Internet_.\n\nProof of Human runs in the background while someone uses a website—no CAPTCHA, no puzzle, no interruption. We combine behavioral, device, and network signals and return a real-time assessment that companies can use to decide whether to trust an account, accept a response, or pay for work.\n\n\n\n## BENCHMARKS\n\nWe tested scripted bots and AI agents against Proof of Human and other leading detection systems.  \n\n![uploaded image](/media/?type=post&id=117699&key=user_uploads/1202145/ae031489-b618-4c0f-a1e7-a68dfa8cca03)\n\n_On a five-question survey, Proof of Human identified 99% of automated sessions, followed by reCAPTCHA v3 at 69.4%, hCaptcha at 44.3%, Cloudflare Turnstile at 42.1%, and Cloudflare Bot Management at 9.1%._\n\nTraditional automation signals remain effective against scripted browsers, but they are less reliable when AI agents operate through genuine browser environments. Even interactive challenges may offer limited protection when vision-capable agents can interpret and complete them. As browser-level indicators become easier to avoid, the way a user behaves throughout a session becomes increasingly important for distinguishing human activity from automation.\n\n## OUR CUSTOMERS\n\n**Today, Proof of Human acts as the trust layer behind online human research.** Stanford Psychology uses it to verify that participants in online studies are real. GrowProgress uses it as part of its quality-control stack for polling and public-opinion research. Market insights firms including Obsurvant use it to identify AI agents and other fraudulent respondents before they enter client datasets.\\\n\\\nThe common problem is the same: a response itself is no longer enough. An AI agent can give a coherent answer, pass an attention check, and look perfectly legitimate in the final dataset. Proof of Human looks at the process that produced it—how someone types, clicks, scrolls, moves through a page, and interacts with their device—continuously and without interrupting the user.\\\n\\\nProduction traffic also teaches us what to look for next. Customer deployments have uncovered new patterns of automation, from unnatural typing to partial AI copy-pasting, that are difficult or impossible to identify from the final answer alone. Those behaviors become new detectors, which are then tested across human, bot, and agent traffic before being deployed back into the network. The result is a system that improves as the adversary changes.\n\n![uploaded image](/media/?type=post&id=117699&key=user_uploads/1202145/0f53b0f4-ec5e-4837-acec-549a275ac727)\n\n_Proof of Human at Stanford Psychology. We first encountered this problem as researchers ourselves; today, research groups use Proof of Human to verify that the people behind online studies are actually people._\n\n## THE FUTURE\n\nWe started with online research because the problem was acute and measurable: organizations were paying for human judgment without reliably knowing whether a human had produced it.\n\nBut the same problem is rapidly appearing across applications, marketplaces, transactions, social platforms, and digital work. The internet needs a way to know when a human is actually on the other side—continuously, invisibly, and without another CAPTCHA.\n\nWelcome to the Proof of Human era.\n\nMatt & Mayank", "url": "https://www.ycombinator.com/launches/UcN-proof-of-human-pbc-the-invisible-turing-test-for-the-internet", "votes": 13, "created_at": "2026-10-14T14:43:03.903Z" } ] }, { "id": 29246, "name": "Tracecat", "slug": "tracecat", "former_names": [ "neometrics.ai", "Neometrics" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/13bc35dc5fca68051b65f9b77d4198acae677418.png", "website": "https://tracecat.com", "all_locations": "New York City, NY, USA", "long_description": "Tracecat helps AI-native security teams build agents and automate work. All-in-one platform with agents, skills, prompt-to-workflows, and case management. Scale cyber defense with agents you own.\r\n\r\nOpen source and community-driven at it's core: https://github.com/TracecatHQ/tracecat", "one_liner": "Open-source agentic security automation platform", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1704382841, "tags": [ "Open Source", "Cybersecurity", "Enterprise", "Automation", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tracecat", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/tracecat.json", "year_founded": 2024, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tracecathq", "x_url": "https://x.com/tracecathq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/tracecat", "github_url": "https://github.com/TracecatHQ/tracecat", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/13bc35dc5fca68051b65f9b77d4198acae677418.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Garry Tan", "url": "https://www.ycombinator.com/people/garry-tan" }, "founders": [ { "user_id": 1589002, "full_name": "Chris Lo", "title": "Founder/CEO", "founder_bio": "CEO and cofounder @ Tracecat", "is_active": true, "linkedin_url": "https://linkedin.com/in/chrislohy", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9364ac3f992aed21a5c91ff788661feee6b346ec.jpg" }, { "user_id": 1593591, "full_name": "Daryl Lim", "title": "Founder/CTO", "founder_bio": "Daryl Lim is the Co-Founder and Chief Technology Officer of Tracecat.\n\nPreviously, he worked on various observability, data and AI infrastructure teams at AMD, Meta, and a London-based quant trading firm. He earned a Bachelors and Masters degree in Computer Engineering from Imperial College London.", "is_active": true, "linkedin_url": "https://linkedin.com/in/daryllimyt", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fefca3125ffea270c6461ff05704f3a62c0243bb.jpg" } ], "jobs": [ { "id": 97385, "title": "Software Engineer (Full-stack)", "url": "https://www.ycombinator.com/companies/tracecat/jobs/iatK7cl-software-engineer-full-stack", "location": "New York, NY, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$200K - $250K", "equity_range": "0.10% - 0.50%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [ "Python", "React", "TypeScript", "Next.js" ] }, { "id": 117455, "title": "Mid-Market Account Executive", "url": "https://www.ycombinator.com/companies/tracecat/jobs/pzdYsO1-mid-market-account-executive", "location": "New York, NY, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$150K - $350K", "equity_range": "0.10% - 0.20%", "experience": "2+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [] }, { "id": 29324, "name": "PromptArmor", "slug": "promptarmor", "former_names": [ "Board Security Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f85e50382b3869e84b292235c05317d5db4ab8cd.png", "website": "https://promptarmor.com/", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "LLM Security and Compliance", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1702083397, "tags": [ "Generative AI", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/promptarmor", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/promptarmor.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/promptarmor", "x_url": "https://twitter.com/PromptArmor", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f85e50382b3869e84b292235c05317d5db4ab8cd.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Garry Tan", "url": "https://www.ycombinator.com/people/garry-tan" }, "founders": [ { "user_id": 592271, "full_name": "Shankar Krishnan", "title": "Founder/CEO", "founder_bio": "Al Security & Compliance. Previously at Snappr, Observe, Tesla, Accenture. Berkeley Data Science & Econ‎", "is_active": true, "linkedin_url": "https://linkedin.com/in/shankar-krishnan", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/98d7fa926e66d41bef63f3becd665196d0cd771b.jpg" }, { "user_id": 325305, "full_name": "Vikram Jayanthi", "title": "Founder/CTO", "founder_bio": "Co-founder of PromptArmor.\n\nPreviously infrastructure & security at Google, Roblox, and Symantec.\n\nBerkeley CS & Public Policy.", "is_active": true, "linkedin_url": "https://linkedin.com/in/vikramjayanthi", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9866a979e839d1d267f85264c95b2d45f385a9fc.jpg" } ], "jobs": [ { "id": 92807, "title": "Growth", "url": "https://www.ycombinator.com/companies/promptarmor/jobs/YgI1Tbu-growth", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$80K - $120K", "equity_range": "0.50% - 0.75%", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "IBM's AI agent Bob easily duped to run malware: Researchers • The Register", "url": "https://www.theregister.com/2026/01/07/ibm_bob_vulnerability/", "date": "Jan 07, 2026" }, { "title": "‘Claude For Excel’ Gets Tricked Into Leaking Secrets — The Information", "url": "https://www.theinformation.com/articles/rubrik-tests-undo-button-malfunctioning-ai-agents?rc=bqclp0", "date": "Nov 25, 2025" }, { "title": "Slack patches Slack AI issue that could have allowed insider phishing | SC Media", "url": "https://www.scworld.com/news/slack-patches-slack-ai-issue-that-could-have-allowed-insider-phishing", "date": "Aug 22, 2024" }, { "title": "Slack AI can leak private data via prompt injection • The Register", "url": "https://www.theregister.com/2024/08/21/slack_ai_prompt_injection/", "date": "Aug 22, 2024" } ], "launches": [] }, { "id": 29358, "name": "Aedilic", "slug": "aedilic", "former_names": [ "speak&find" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e453f612e8022f9284505dc7f70270165e918ea9.png", "website": "https://www.nonescape.com", "all_locations": "San Francisco, CA, USA", "long_description": "Open-source software for detecting AI-generated images (diffusion, GAN, deepfakes).", "one_liner": "Open-Source AI-generated image/deepfake detection", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1710792793, "tags": [ "Computer Vision", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": true, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/aedilic", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/aedilic.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/aedilic", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/organizations/aediliclabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/e453f612e8022f9284505dc7f70270165e918ea9.png", "app_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/bf-public_profile/29415/app_video.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAQC4NIECANGNRRAJW%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022717Z&X-Amz-Expires=60&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEHEaCXVzLXdlc3QtMiJHMEUCIQC3G81IFSUZtThVVLqv%2FNP8JAonBeKueJ3nqFDE3FxXUwIgKp6ifAPW9xtNk4cHGnVzE9T5oK7HksFpS9B%2BDm%2FLIOQq5QMIOhAAGgwwMDYyMDE4MTEwNzIiDMiErSqdA9fZ5I2ahyrCAyhI4VxFZU5tGwj2zBKwzP3YopALEsVr%2F%2BZE%2BqKG5ExbN%2FLTC2qWrBSqlDY2M5sbNAwfqQqFkcx31kz1vOn4FSuJMRYW%2BkzTF0sHdYK6D3qvReS29sXOai4xEgytMpWv0HHodzBVtqmM6lhZul7EdriU1r3NMgn6kwrys472GaamCoy9cButcMuxdA6JAW7AePBgk0hcnFGzaY5aao9TXEqqqLDlP1z95aeQK0rFfjBuVVTlW6dspQwwAJwsuJjoI9t1YkL4Lit4gUGj1QI7PUIH70gMRgnlfqNLB7jJcwv%2BI4Rfgnv%2FfKmc5%2BoYexcBkjZu9myZq6QOA6uBoHrB0oTKfDnTUxCfp3Zyd%2BYXd%2BRBrzgSL0LnII%2Fr1P71gX8BqFIaJIcILi5J6qUg2doC6qXH8L6zz0Tim2049E5pbQ072LSzepYlZMqQ983uJSL3eUXk86ehR9Lyldz67yIvyCRilZUgb11jcjrMydu%2Fj2RI4J5upBB3IYDl1jhGlV%2FvgsHTaVujKGAhe3lEnUZs9YdCRwpmLb5XcbpM70m15Z8MQhDcr6si85gNENVvPMk4eUw4FkmyLz2%2FrGX%2BhkiQHEAiUzDJ%2FdrWBjqlAa1FguiGB0WcOcaP9Dwwt66PPG2naOQP7x5F5wwTg7gWx2PYYqZ05ZF%2F2dhdA4HJKOntgl0neDqra19sFySGeXNdHt7tNNndMpVniacUOziehXVxpr49zgL%2FhWtvSxfqv2mUAjPVCs%2FBJs6SqN3WzVfiA2RUodOJqzLA7KluY8D8t3zxMbqsQdARPCP3FgqSkJ8A8HTGWYo9w0rLlT%2Fugv6qZCfQcg%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=b9a1da820cb3672732320b401d83c6d2950eb2af941d017c8f6343e8954e8fa0", "dday_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/video_event/64/1712339977791-yvv6ckljiz-e79c1e25bfd273350bca5c313d3b3a5e/c17e3d5ac1bc62323b6fddbb3036b5f8.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAQC4NIECABPQ2AHNW%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022717Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=e90b9c5cbeba72b544427457de5f6e9b091e08fde83a6d78252d77a72b03fe94", "company_photos": [], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 942043, "full_name": "Nicholas Waltz", "title": "Founder", "founder_bio": "Founder and CEO of Aedilic (W24)", "is_active": false, "linkedin_url": "https://linkedin.com/in/nicholas-waltz-b95067211", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/707d560a939f3d3ecdcbbaea21074abee0f0935f.jpg" }, { "user_id": 1282773, "full_name": "Lukas Schneider", "title": "Founder", "founder_bio": "Founder and CTO of Aedilic (W24). Before Aedilic, Lukas conducted machine learning research at the Robotic Systems Lab, a leading research institution on robot autonomy. His research has been published to ICRA, the #1 robotics conference on Google Scholar. Before that, he developed drone control algorithms at the German Aerospace Center (DLR). Lukas holds a Master of Science in Robotics, Automation and Control from ETH Zurich.", "is_active": false, "linkedin_url": "https://linkedin.com/in/lukas-schneider-a27498177", "x_url": "https://twitter.com/e3ntity", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/76329d48f50c40cdeb70c6cf9c99f13dcec0e522.jpg" } ], "jobs": [], "news": [ { "title": "Show HN: gpudeploy.com – \"Airbnb\" for GPUs | Hacker News", "url": "https://news.ycombinator.com/item?id=40260259", "date": "May 05, 2024" } ], "launches": [ { "id": 80936, "title": "GPUDeploy.com – Airbnb for GPUs", "tagline": "GPUDeploy is a software solution and marketplace for renting low-cost on-demand GPUs now", "body": "tl;dr [gpudeploy.com](http://gpudeploy.com) is Airbnb for GPUs. It is a marketplace and easy-to-integrate software for renting out the over $1bn in cheap, high-quality compute that is sitting around unused (see e.g. [gpulist.ai](http://gpulist.ai)). We are two engineers from Cambridge and ETH Zürich with experience in Robotics and Deep Learning.\n\n —\n\nHi, we’re Nico and Lukas, the cofounders of Aedilic (doing business as GPUDeploy).\n\n![uploaded image](/media/?type=post&id=80936&key=user_uploads/942043/2bc19071-a70a-48a6-9ad0-8996c9326e36)\n\nWe met in high school when we were both 14 and bonded over our interest in coding. Our first project was a [cookie-clicker game](https://soda-factory.github.io/) that we wrote during a sleepover two weeks after meeting for the first time.\n\nNico has since received a Masters in Econometrics from the University of Cambridge with a research focus on the mathematical theory of Machine Learning algorithms ([Random Forests](https://arxiv.org/abs/2403.06015), [DBSCAN](https://arxiv.org/abs/2403.14798)). Lukas holds a Masters from ETH Zürich, where he trained robot dogs at the Robotics Systems Lab, using the latest Machine Learning models. During his Masters, he wrote the official ETH Zürich [RSL open-source Reinforcement Learning “algorithms” library](https://github.com/leggedrobotics/rsl_rl/tree/algorithms). His [Master's thesis](https://arxiv.org/abs/2309.14246) was published in the highest-ranked Robotics conference (ICRA) this year.\n\n**There is a lot of cheap, high-quality, unused compute sitting around**\n\n[gpulist.ai](https://gpulist.ai) alone lists over $1bn in unrealized contract value. These are the latest Nvidia models in cutting-edge data centers, with Infiniband interconnect and perfect internet. They are cheap because nobody books them. Meanwhile, research labs and AI companies are looking for cheap, high-quality compute but will not go through unknown, unclear websites and the associated sales process. We allow them to book pre-configured GPU instances on-demand at wholesale prices that they would normally need to negotiate.\n\nWe’ve built software that makes idle GPUs in data centers accessible and super simple to book and use via our website. Data-centers and AI companies with idle compute have the option to list instances on the spot market as soon as they are available, it takes 5 minutes to set up. Unlike other solutions, our software enables fractional use of GPU boxes, so 8 GPUs can be rented out to 8 different people.\n\n**Other options are either expensive, booked out, or a pain to use**\n\nWe know how inconvenient current solutions are because we’ve dealt with them, both at university and for the previous iteration of this startup (robotics-related).\n\nFor example, Lukas, during his time at ETH, was given a blank check by his lab to book GPUs for his research. He spent the entire night with his supervisor going through Google Cloud to scrape together a few GPU instances; Google will only tell you that an H100 is unavailable in Region X **after** you configured and launched your instance. Plus, they were expensive, with an A100 SXM 40GB at $3.60/gpu/hour (compare this to $1.28 on our site).\n\n**Solution: GPUDeploy**\n\nGPUDeploy is a software solution and marketplace for renting GPUs. We have made our site simple, to the point, and opinionated - there are no hurdles between you and booking a GPU. We offer very competitive pricing and ensure that the compute instance you book is reliable and meets our benchmarks.\n\n![uploaded image](/media/?type=post&id=80936&key=user_uploads/942043/3b64efe2-a067-41d3-8d8c-039e5c80962d)\n\nWe both have a spot offering and an Airbnb-like experience for long-term bookings. We match your spot request with available compute resources that meet our standards. You can then simply connect to the machine to run your workloads.\n\nWe launched with a [Show HN](https://news.ycombinator.com/item?id=40260259) four weeks ago, which immediately got #1 and stayed on the front page for 2 days.\n\nTry it out!  \n\n**Our ask:**\n\n* If you need GPUs, try it out.\n* If you have compute, try renting it out on our site. It’s really simple (2 commands) and flexible, and we help with custom onboarding. For example, you can make a profit of \\~$3000k a year with an RTX4090. Currently, the majority of our computing is booked out. Anyone is able to add compute, but we will sort out unreliable providers immediately.\n* We collaborate with data centers. If you have a cloud with idle GPUs, reach out.\n\n\\\nMessage [nico@gpudeploy.com](mailto:nico@gpudeploy.com) or [contact@gpudeploy.com](mailto:contact@gpudeploy.com) for any questions.", "url": "https://www.ycombinator.com/launches/L3Q-gpudeploy-com-airbnb-for-gpus", "votes": 14, "created_at": "2024-05-17T22:23:42.882Z" } ] }, { "id": 29374, "name": "Superagent", "slug": "superagent", "former_names": [ "Superagent.sh" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a5fb7dd012389ddf81869040550578bb786988ed.png", "website": "https://superagent.sh/", "all_locations": "San Francisco, CA, USA", "long_description": "Superagent helps AI-native developers trust what they merge, control what their agents do, and show users it's safe.\r\n\r\nWe work in your coding agent and on GitHub:\r\n\r\n- Trust the change: checks on every pull request, before merge\r\n- Control it where it runs: boundaries around what your agents can see, say, and do\r\n- Break it before it ships: red teaming against what you actually run\r\n\r\nFree for open source.", "one_liner": "Security for AI-native developers", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1701445003, "tags": [ "Security", "Open Source", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/superagent", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/superagent.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/superagent-sh/", "x_url": "https://x.com/superagent_ai", "fb_url": null, "cb_url": null, "github_url": "https://github.com/superagent-ai/", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a5fb7dd012389ddf81869040550578bb786988ed.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/4fb9bc805969476bc8a221698a1bdea8f7976c00.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1367556, "full_name": "Alan Zabihi", "title": "Founder/CEO", "founder_bio": "CEO & Co-founder of Superagent", "is_active": true, "linkedin_url": "https://linkedin.com/in/alanzabihi", "x_url": "https://twitter.com/alanzabihi", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cea2f5bfccfffc6a14c59ed18dcfed86babdbe0e.jpg" }, { "user_id": 80364, "full_name": "Ismail Pelaseyed", "title": "Founder", "founder_bio": "CTO & Co-founder of Superagent.", "is_active": true, "linkedin_url": "http://se.linkedin.com/in/pelaseyed/en", "x_url": "https://twitter.com/pelaseyed", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cb09040fa52bace9f9b4c6c760946f7028b27257.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 94188, "title": "Superagent — Defender of AI agents 🥷", "tagline": "Superagent protects AI agents from attacks and data leaks", "body": "Hi YC 👋 We’re Alan and Ismail, founders of **Superagent (YC W24)**.\n\nWe’re building open-source **defense for AI agents**. Our product protects agents from prompt injections, malicious tool calls, and customer data leaks — in production, in CI/CD, and wherever they run.\n\n# The Problem\n\nAI agents introduce new attack surfaces that traditional security practices don’t cover:\n\n* **At runtime**: users can inject adversarial prompts that hijack an agent or force it to run harmful commands.\n* **At the model** layer: unsafe or poisoned outputs can embed backdoors into your stack.\n* **In CI/CD**: AI-generated code can contain harmful logic that slips through review and ships to production.\n\nWithout protection, agents can leak customer data or trigger destructive actions that impact your product and your users.\n\n# How Superagent Works\n\nAt the core is **SuperagentLM**, our small language model trained specifically for agentic security. Unlike static rules or regex filters, it reasons about inputs and outputs to catch subtle and novel attacks.\n\nSuperagent integrates at three key points:\n\n1. **Inference providers** — filter requests and responses at the API layer\n2. **Agent frameworks** — run runtime checks on every input, output, and tool call\n3. **CI/CD pipelines** — fail risky builds before unsafe code ships\n\nHere’s a quick example of how to use it with Exa (YC S21):\n\n![uploaded image](/media/?type=post&id=94188&key=user_uploads/1367556/35562a1a-829f-4fc0-bcc2-03952e3f58f6)\n\nEvery request is inspected in real time. Unsafe ones are blocked. Safe ones go through — with reasoning logs you can audit later.\n\n# Why We’re Building This\n\nWe’ve been working closely with builders of AI agents for the last couple of years, building tools for them. What we noticed is that many teams are basically trying to system-prompt their way to security. Vibe security (VibeSec) obviously doesn’t work.\n\nSome of the most popular agentic apps today are surprisingly unsafe in this way. So we decided to see if we could fix it. That’s the motivation behind Superagent: giving teams a real way to ship fast **and** ship safe.\n\n# Get Involved\n\n📖 [Read the docs](https://docs.superagent.sh/)\n\n📅 [Book a call](https://www.superagent.sh/)\n\nWe’d love your feedback: what’s your biggest concern about running agents in production? Book a call or drop a comment!\n\nAlan & Ismail 🥷🥷\\\n[Superagent](https://www.superagent.sh/) (YC W24)\n\n![uploaded image](/media/?type=post&id=94188&key=user_uploads/1367556/22c8addf-151e-4bf5-ade5-18f253df2bc4)\n\n", "url": "https://www.ycombinator.com/launches/OVA-superagent-defender-of-ai-agents", "votes": 14, "created_at": "2025-09-29T14:01:06.539Z" }, { "id": 93541, "title": "Superagent — the AI Firewall 🥷🔥", "tagline": "Stops prompt injections, backdoors, and data leaks.", "body": "Hi everyone, we’re Alan and Ismail, founders of **Superagent** (YC W24).\n\nWe built the world’s first **AI Firewall** — powered by a model that sits between you and your models, protecting every request and response in real time.\n\n---\n\n## The Problem\n\nAI is quickly becoming the foundation of how software is built and used. But every time you send a prompt or receive a response, you take a risk:\n\n* Models can be tricked with prompt injections or jailbreaks\n* Sensitive data like API keys and PII can leak out\n* Malicious code or backdoors can slip through responses\n\nIf you’re building with AI or adopting third-party AI tools, you’re exposed.\n\n---\n\n## Our Solution\n\nSuperagent introduces **NinjaLM** — a small language model fine-tuned for security and safety. It runs in runtime (tens of milliseconds) and reasons about every prompt and response before it reaches your system.\n\n✅ Stops prompt injections and jailbreaks\\\n✅ Prevents secret leaks (API keys, credentials, PII)\\\n✅ Blocks malicious code before it reaches your system\\\n✅ Full audit logs, traces, and observability for compliance\n\nFrom internal apps to tools like Claude Code or ChatGPT, Superagent protects your AI without slowing you down.\n\n## https://youtu.be/GBTAs9yZiPM\n\n## Backstory\n\nBefore Superagent, we built plenty of AI apps ourselves. Each time, we ran into the same problem: adding even the most basic kind of protection was incredibly hard.\n\nTraditional firewalls are built for static rules — not reasoning. But AI isn’t static. It thinks, it adapts, and that creates a completely new class of security challenges.\n\nWe realized the only way forward was to fight fire with fire: build a model that could reason about other models, catching attacks, leaks, and malicious behavior in real time. That’s how the AI Firewall was born.\n\n---\n\n## Try It\n\nWe just launched our hosted service, and the open-source repo is live. Engineers can get started in minutes, and executives get the auditability and compliance they need.\n\n👉 [superagent.sh](http://www.superagent.sh)\\\n👉 [github.com/superagent-ai/superagent](https://github.com/superagent-ai/superagent)\n\n---\n\n## Call to Action\n\nIf you’re building or adopting AI:\n\n* Engineers — run your apps through Superagent today\n* Security teams — add prevention and compliance controls\n* Partners — we’re exploring integrations and distribution\n\nWe’d love your feedback. Links in comments.\n\n![uploaded image](/media/?type=post&id=93541&key=user_uploads/1367556/b76c2ef1-9036-484d-9564-73cecff2c9ff)\n\n---", "url": "https://www.ycombinator.com/launches/OKj-superagent-the-ai-firewall", "votes": 10, "created_at": "2025-09-03T14:51:00.274Z" }, { "id": 92929, "title": "VibeKit 🖖 The Safety Layer for Your Coding Agent", "tagline": "Open-source sandboxing and observability for Claude Code, Gemini CLI, et al.", "body": "Hey YC! 👋\\\nWe’re building **VibeKit**, an open-source safety layer for Claude Code, Gemini CLI, and other coding agents.\n\n![uploaded image](/media/?type=post&id=92929&key=user_uploads/1367556/58ed677f-4f55-4d10-a0ef-b32fb2508117)\n\n## ❌ The Problem\n\nWe love coding with AI agents — until the day Anthropic emailed us to say they had found our API keys in a public GitHub repo and revoked them.\n\nThe leak came from our own coding agent. That’s when we realized most developers have no way to see — let alone control — what their AI agents are doing:\n\n* Which files they read or write\n* What shell commands they run\n* What data leaves their machine\n* Whether secrets get exposed in API calls\n\n## 🖖 The VibeKit Solution\n\nVibeKit is a **universal CLI wrapper** that runs any coding agent in a **local, isolated Docker sandbox**,\n\n![uploaded image](/media/?type=post&id=92929&key=user_uploads/1367556/76cf29ec-d566-42e9-861b-fad1a9bd4889)\n\nIt comes with:\n\n* **Secret redaction** before anything leaves your machine\n* **Full observability** into file changes, commands, API calls, and outbound data\n* **Offline-first**, open-source (MIT), and works with any agent — Claude, GPT-4o, Gemini, etc.\n\n![uploaded image](/media/?type=post&id=92929&key=user_uploads/1367556/20caa134-7f4a-434d-acac-6e5405eeb82b)\n\n## 💻 Try it out\n\n```\n# Install globally\nnpm install -g vibekit\n\n# Run Claude Code with VibeKit\nvibekit claude\n```\n\nThen watch _everything_ your AI is doing — safely.\n\n🎥 **Demo video:** [https://youtu.be/vDwJ4xcdRBM\\\\](https://youtu.be/vDwJ4xcdRBM%5C)\n\n📂 GitHub: [https://github.com/superagent-ai/vibekit\\\\](https://github.com/superagent-ai/vibekit%5C)\n\n📖 Docs: [https://docs.vibekit.sh](https://docs.vibekit.sh/)\n\n## 🙏 Our Ask\n\nIf you use coding agents day-to-day:\n\n* **Run them through VibeKit** — see what they’re _really_ doing.\n* Share your weirdest or most alarming finds with us — we’re building a public library of “agent fails.”\n\n💌 Contact: [founders@vibekit.sh](mailto:founders@vibekit.sh)\n\n---", "url": "https://www.ycombinator.com/launches/OAr-vibekit-the-safety-layer-for-your-coding-agent", "votes": 11, "created_at": "2025-08-12T19:06:49.796Z" }, { "id": 91137, "title": "VibeKit 🖖 Run coding agents in a secure sandbox", "tagline": "Embed OpenAI Codex or Claude Code directly into your app.", "body": "## **Launch YC: VibeKit – Run coding agents in a secure sandbox**\n\n**Hi YC** 👋 We’re Alan and Ismail, the founders of Superagent (YC W24). We build tools for developers working with agents — especially **coding agents**.\n\nToday, we’re launching **VibeKit**, our open-source SDK that lets you run coding agents like OpenAI Codex or Claude Code safely in secure sandboxes.\n\nLocal setups work great for developing with coding agents — we’ve used them ourselves. But as soon as you want to **embed agents into your app**, **automate GitHub workflows**, or **run tasks in isolated environments**, you need something more flexible and secure.\n\n**VibeKit makes this possible.** It supports multiple sandbox providers (E2B today; Daytona, Modal, and [Fly.io](http://Fly.io) coming soon) and gives you:\n\n* ✅ Safe, isolated code execution\n* ✅ Live output streaming\n* ✅ Async run handling\n* ✅ Full prompt + code history\n* ✅ Telemetry and tracing\n* ✅ GitHub-safe automations\n\nWith VibeKit, coding agents can install packages, modify files, or create PRs — all without touching your local or production systems.\n\nhttps://youtu.be/GQaOSEbvOxM\n\nWe originally built VibeKit for internal use while developing Superagent. Since then we’ve used it to:\n\n* Embed coding agents inside apps\n* Build GitHub bots that open issues and PRs\n* Automate internal workflows (e.g. adding PostHog)\n\nNow it’s fully open source (MIT licensed) and available for anyone to use.\n\n🌐 [vibekit.sh](http://vibekit.sh) \n\n💻 [github.com/superagent-ai/vibekit](http://github.com/superagent-ai/vibekit) \n\n### 🙏 **Our Ask**\n\n* ⭐️ Star the repo\n* 🧪 Try embedding a coding agent in your app\n* 💬 Tell us what use cases it unlocked for you — email [founders@superagent.sh](mailto:founders@superagent.sh)\n\n![uploaded image](/media/?type=post&id=91137&key=user_uploads/1367556/d5bc1c0b-6a66-42b4-b75d-b28d6237e1a6)\n\n", "url": "https://www.ycombinator.com/launches/Nhx-vibekit-run-coding-agents-in-a-secure-sandbox", "votes": 18, "created_at": "2025-06-09T13:57:54.068Z" }, { "id": 79352, "title": "🥷 Superagent - Run any workflow using AI", "tagline": "Open-source platform that allows anyone to build AI-agent workflows", "body": "_**Tl;dr:** [_Superagent_](https://superagent.sh/) makes it easy for anyone to use AI to do complex tasks. Enterprises and startups already use it for things like managing R&D projects, customer support, and market research. It's open-source, and it's designed for everyone - not just AI experts. With Superagent, businesses can save money and work smarter. [_Learn more about Superagent_](https://superagent.sh/?utm_source=yc&utm_medium=blog&utm_campaign=launch-yc)._\n\n![uploaded image](/media/?type=post&id=79352&key=user_uploads/89898/db78152a-35a4-497e-acac-55556a095c07)\n\n👋 Hello, we're [Alan](https://linkedin.com/in/alanzabihi) and [Ismail](http://se.linkedin.com/in/pelaseyed/en). Our path to Superagent started while working on an AI app, where we faced the reality of needing to build the entire tech stack and become AI experts just to perform one basic workflow. This experience led us to create Superagent, aiming to simplify AI use for everyone.\n\n## 🚨 The Problem: AI integration is complex\n\nThe reality is, integrating AI into business processes is a complex task. It usually demands teams of machine learning engineers, which is a significant barrier for many companies. Consider a business executive who sees AI as an almost unachievable goal; this perspective can lead them to miss out on the benefits AI could bring to their operations.\n\n## 🚀 Our Solution: Easy-to-build AI-agents\n\nWith Superagent, companies can build their own AI agents to perform whatever workflow they have in their business operations:\n\n* **No coding or infrastructure needed**: Configure AI agents using simple markup.\n* **Integration with Airtable**: Ideal for managing data-heavy tasks like market research.\n* **API and SDKs**: Allows embedding AI agents into any app or third-party system, including task management tools like Jira.\n\nBy choosing Superagent, companies can:\n\n* Automate complex tasks that would typically require manual effort or sophisticated programming.\n* Reduce operational costs by spending less time and fewer resources on routine tasks.\n* Gain a competitive edge by doing better work internally, but also by creating new customer experiences.\n\n## 💡 Opportunity in Enterprise\n\nTechnology, healthcare, and banking are massive sectors with data-heavy operations. Superagent's open-source model has led to bottom-up adoption from these sectors, showing validation of our approach. Join us as we tap into this massive opportunity.\n\n## 👋 How you can join in\n\n\\- Fork us on [GitHub](https://github.com/homanp/superagent)\n\n\\- Join our community on [Discord](https://discord.com/invite/mhmJUTjW4b) \n\n\\- Create your first AI workflow on our [cloud service](https://superagent.sh/?utm_source=yc&utm_medium=blog&utm_campaign=launch-yc)\n\n\\- [Contact us](mailto:alan@superagent.sh) for custom advice on your workflows", "url": "https://www.ycombinator.com/launches/Kds-superagent-run-any-workflow-using-ai", "votes": 89, "created_at": "2024-03-13T14:25:14.679Z" } ] }, { "id": 29384, "name": "Shiboleth", "slug": "shiboleth", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/cade08a222bcb94b59ffc828273ef1cdf70d6f84.png", "website": "https://www.shiboleth.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "Shiboleth automates consumer lending compliance for financial institutions using AI.\r\nBanks and fintechs use us to save months of manual work by automating audits and drafting reports for the governments. \r\n\r\nLLMs allow whole categories of manual compliance processes to be automated in ways that weren’t possible until recently.\r\n\r\nWe are excited to automate back-office operations and enhance consumer protection in one of the most litigious industries.", "one_liner": "Shiboleth automates lending compliance for financial institutions…", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1702497588, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/shiboleth", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/shiboleth.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/shiboleth/about/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/cade08a222bcb94b59ffc828273ef1cdf70d6f84.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/0809e68fabc3ebd69094c7b4e424e67527d4dea6.png" ], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1571199, "full_name": "Esty Scheiner", "title": "Founder/CEO", "founder_bio": "Esty Scheiner is the CEO and Co-founder of Shiboleth. Shiboleth automates regulatory compliance for lending institutions\n\nBefore Shiboleth, Esty was a Security Engineer at Invoca, developing an LLM tool for automating security compliance. She dropped out of NYU CS at 19 yr. old to become a SE at Buggy, quickly rising to manage a 6-person R&D team within a year . Additionally she is a self taught CISSP and OSCP (top compliance and hacking certs) in months instead of 5 years. \n", "is_active": true, "linkedin_url": "https://linkedin.com/in/esty-scheiner-9ab3a9142", "x_url": "https://twitter.com/scheiner_esty", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/07c2e6192c2ad5b9269dadcacb3842a55b87a69a.jpg" }, { "user_id": 750382, "full_name": "Bivu Dhungana", "title": "Founder/CTO", "founder_bio": "Bivu is a co-founder and CTO at shiboleth.ai which he founded with Esty Scheiner in late 2023. Shiboleth automates regulatory compliance for lending institutions. \n\n\nBivu has a decade of experience working as a ML Engineer in logistics, banking and audio. Before Shiboleth, Bivu worked at Pindrop as an AI Engineer where he led a team for IVR fraud detection. His team's product is used by 6 of the largest 10 banks, and amounted to $10 million ARR in sales. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/bivu-dhungana", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bc7acd1e5a8a9c353c79f44fa293861f2adb543f.jpg" } ], "jobs": [ { "id": 78263, "title": " ⚡️ Founding Full Stack Software Engineer ⚡️", "url": "https://www.ycombinator.com/companies/shiboleth/jobs/RDkhDqm-founding-full-stack-software-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$170K - $220K", "equity_range": "1.00% - 2.75%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Django", "Python", "SQL", "Tailwind" ] } ], "news": [ { "title": "Shiboleth eyes bank-fintech compliance", "url": "https://www.axios.com/pro/fintech-deals/2025/02/27/shiboleth-bank-fintech-partnership-compliance-seed", "date": "Feb 27, 2025" } ], "launches": [ { "id": 78847, "title": "Shiboleth: Automating consumer lending compliance", "tagline": "Enabling lending compliance teams to audit customer service chats with AI", "body": "**TLDR**: Lending companies use us to flag compliance violations for customer interactions and create the first drafts of the reports for the government.\n\n🚀 **Shiboleth’s Y Combinator offer:** We are so excited about our technology and the launch 🔥. If you are a financial institution and want to check the work of your QA team or auditor [shiboleth.ai/#ycdeal](http://shiboleth.ai/#ycdeal), or send an email to [founders@shiboleth.ai](mailto:founders@shiboleth.ai) to receive a free audit of up [to 20,000 calls.](mailto:founders@hiboleth.ai)\n\n—\\\n👋 Hello everyone, we are Esty and Bivu!  We are building [Shiboleth](https://www.shiboleth.ai/). If you saw a recent Garry Tan’s [tweet](https://x.com/garrytan/status/1751066532480987434?s=20) about bookface launch live, that was us :). We were chosen as one of the top products based upon “votes from batch and YC alumni”.\n\n[Esty](https://www.linkedin.com/in/esty-scheiner-cissp-oscp-9ab3a9142/) previously worked in the intersection of compliance and conversational intelligence. And [Bivu](https://linkedin.com/in/bivu-dhungana) has a decade-long experience in NLP and AI. Together, we are excited to innovate in the regulatory compliance sector, an area that is long due for innovation. We believe that automating compliance can enable smaller financial institutions to exist in the long term.\n\n![uploaded image](/media/?type=post&id=78847&key=user_uploads/1571199/31340ca2-163b-4a2e-8bde-30f14f4a9a12)\n\n❌  **The Problem:** Consumer lending is very litigious and consequently, it is heavily regulated: agencies such as CFPB, FDIC, and OCC impose a lot of intentionally ambiguous regulations. Currently, the audits are extremely manual. Even with a large team of auditors,  they can only check a fraction of the calls—sometimes as low as 2% which means that violations can be missed. Often, there is “just enough ambiguity” that the calls and communication warrant manual reviews. This is problematic because an internal audit system might not suffice for compliance purposes.\n\n🤔 **How does it work?**: Shiboleth automatically flags compliance violations in customer interactions. It does this by syncing with the companies' runbooks, using advanced LLMs and NLP to parse relevant regulations. Our extensive database of public reviews, CFPB complaints, and enforcement actions helps us identify the most enforceable regulations and recommend appropriate mitigation actions.\n\nYou can check out the [demo](https://www.youtube.com/watch?v=FYJ5OsysNJ4) below. \n\n🌤️**Who Can Use Us**: Our solution is designed for financial institutions, including banks, fintech companies, and non-bank lenders, that are looking to streamline their lending compliance processes and reduce costs. We are currently working with lending institutions but would be interested in hearing adjacent use cases\n\n📫 If you want to be part of our beta, introduce us to new use cases, or just geek out Dodd-Frank in general, please free to reach out to [founders@shiboleth.ai](mailto:founders@shiboleth.ai).", "url": "https://www.ycombinator.com/launches/KVj-shiboleth-automating-consumer-lending-compliance", "votes": 115, "created_at": "2024-02-28T15:01:29.682Z" } ] }, { "id": 29659, "name": "Unbound", "slug": "unbound", "former_names": [ "Unbound Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/36df07c499b1ae5e15e4171c4cc3ef24d462d03c.png", "website": "https://getunbound.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "Use AI tools without fear of data leakage", "team_size": 7, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1715812278, "tags": [ "Privacy", "Cybersecurity", "Data Labeling", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/unbound", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/unbound.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/91353269/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/36df07c499b1ae5e15e4171c4cc3ef24d462d03c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 901694, "full_name": "Rajaram Srinivasan", "title": "Founder/CEO", "founder_bio": "Building data security for Gen AI.\nPrev: Palo Alto Networks, Adobe | MIT Alum", "is_active": true, "linkedin_url": "https://linkedin.com/in/rajaramsrinivasan", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a03990b831f31057f44e921c63774348d6c10eb1.jpg" }, { "user_id": 1985851, "full_name": "Vignesh Subbiah", "title": "Founder/CTO", "founder_bio": "Cofounder at Unbound. Security for AI agents.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vigneshsubbiah16/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/390bb26fdd2b8135d1b2e6de0c675b9497c5ee6b.jpg" } ], "jobs": [ { "id": 69774, "title": "Founding Engineer", "url": "https://www.ycombinator.com/companies/unbound/jobs/FfwAxvH-founding-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$110K - $180K", "equity_range": "0.10% - 1.00%", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 76243, "title": "Founding growth engineer", "url": "https://www.ycombinator.com/companies/unbound/jobs/YIPCJgp-founding-growth-engineer", "location": "San Francisco, CA, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$80K - $135K", "equity_range": "0.10% - 0.50%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 93184, "title": "Software Engineering Intern", "url": "https://www.ycombinator.com/companies/unbound/jobs/hn66xKN-software-engineering-intern", "location": "San Francisco, CA, US", "type": "Internship", "role": "Engineering", "role_type": "Backend", "salary_range": "$5K - $7K / monthly", "equity_range": "", "experience": null, "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Unbound raises $4M to help enterprises embrace AI tools on their terms | Markets Insider", "url": "https://markets.businessinsider.com/news/stocks/unbound-raises-4m-to-help-enterprises-embrace-ai-tools-on-their-terms-1034775030", "date": "Jun 30, 2025" }, { "title": "Unbound secures USD $4 million seed to boost safe AI adoption", "url": "https://securitybrief.com.au/story/unbound-secures-usd-4-million-seed-to-boost-safe-ai-adoption", "date": "May 30, 2025" }, { "title": "Race Capital Leads USD 4 Mn Funding Round in Unbound | Entrepreneur", "url": "https://www.entrepreneur.com/en-in/news-and-trends/race-capital-leads-usd-4-mn-funding-round-in-unbound/492477", "date": "May 29, 2025" }, { "title": "Governance Start-Ups Boom In The Battle To Keep AI Honest", "url": "https://www.forbes.com/sites/davidprosser/2025/05/29/governance-start-ups-boom-in-the-battle-to-keep-ai-honest/", "date": "May 29, 2025" }, { "title": " Unbound raises $4 Mn in seed round led by Race Capital", "url": "https://entrackr.com/snippets/unbound-raises-4-mn-in-seed-round-led-by-race-capital-9317863", "date": "May 29, 2025" } ], "launches": [ { "id": 83204, "title": "🚀 Unbound Security - Secure Gen AI apps for enterprise", "tagline": "We help enterprises prevent data loss on consumer Gen AI apps", "body": "### TL;DR\n\n[Unbound Security](https://www.unboundsecurity.ai/) prevents leakage of sensitive information when employees use Gen AI applications. For example, we intervene and stop when someone pastes a code snippet that contains a secret key into ChatGPT while troubleshooting.\n\n# The problem\n\n1. **AI faces enterprise adoption roadblocks**: Despite Gen AI boosting productivity, many enterprises remain wary. Even in 2024, over 1 in 4 organizations have banned all AI apps, keeping them off-limits to employees.\n2. **AI app sprawl:** There are now well over 1,000 Gen AI apps, and many have questionable security practices. These cool “tools” continue to worry CSOs (Chief Security Officers) as employees are already using many of these to get work done.\n3. **Data privacy remains a top concern**: Over 55% of all prompts contain some form of Personally Identifiable Information (PII). This is not only a privacy nightmare, but also pushes enterprises out of compliance with multiple regulations such as PCI, SOX and HIPAA.\n\n# Our solution\n\n1. **AI app discovery:** We discover and catalog all AI apps in use by employees and help security teams understand the risk levels of each of these apps.\n\n ![uploaded image](/media/?type=post&id=83204&key=user_uploads/901694/8e15836b-4e62-4980-8805-1c87c21af0dd)\n\n2. **Granular application access policies:** Rather than block all apps by default, we allow enterprises to allow some trustworthy AI apps and steer users towards those. For example, if your org invested in Chat GPT enterprise, we help get the most out of that investment by encouraging people to use that instead of a random cool file summarizer on the internet.\n\n ![uploaded image](/media/?type=post&id=83204&key=user_uploads/901694/113c41b1-c9d2-4df4-b74d-b914db53680d)\n\n3. **Protect data leakage:** On the allowed AI apps, Unbound monitors all prompts and also blocks users from sharing sensitive information based on the configured AI usage policy.\n\n ![uploaded image](/media/?type=post&id=83204&key=user_uploads/901694/47fc0b0f-3d45-4d58-8684-64e85e0d8d5c)\n\n\n# Our ask and offer\n\n1. If you know a company that has blocked the usage of AI apps, we can help your friends use these apps with IT consent. Please drop us a note at [founders@unboundsecurity.ai](mailto:founders@unboundsecurity.ai).\n2. If you’d like to understand what people are using AI for within your org, and stay compliant, we are happy to offer our AI visibility platform for free to any YC company. Let’s [chat more over a meeting.](https://calendly.com/rajws/30-mins-meeting)\n\n# The team\n\n[Vignesh](https://www.linkedin.com/in/vigneshsubbiah16/) and [Raj](https://www.linkedin.com/in/rajaramsrinivasan/) worked together at Adobe on the same Engineering team for 5+ years, solving some of the most complex problems in the digital advertising space - The team built sub-millisecond latency systems that processed billions of advertising artifacts. Vignesh went on to be founding engineer at Tophatter and an early engineer at [Shogun (YC S18)](https://www.ycombinator.com/companies/shogun). Raj has built data security products for Palo Alto Networks and Imperva prior to Unbound where he observed the struggles of data security programs in large enterprises.\n\n![uploaded image](/media/?type=post&id=83204&key=user_uploads/901694/7b8b3e08-52e1-4d45-86ac-9963a62da345)\n\n", "url": "https://www.ycombinator.com/launches/Le0-unbound-security-secure-gen-ai-apps-for-enterprise", "votes": 121, "created_at": "2024-08-19T22:37:57.387Z" } ] }, { "id": 29729, "name": "Clearly AI", "slug": "clearly-ai", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c287d41c131d5c10886a84c3cd7fd46b393f7af.png", "website": "https://clearly-ai.com", "all_locations": "Seattle, WA, USA", "long_description": "Clearly AI automates security and privacy reviews with AI. We performed hundreds of reviews at Amazon and Moveworks and now we're building the product we wish we had. Our users complete reviews in minutes instead of days.\r\n\r\nEmily and Joe are technical co-founders and senior engineers. We met in 2019 while working on an Alexa security review.", "one_liner": "Automate security and privacy reviews", "team_size": 17, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1722269171, "tags": [ "Generative AI", "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/clearly-ai", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/clearly-ai.json", "year_founded": 2024, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/clearly-ai", "x_url": "https://twitter.com/ItsClearlyAI", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c287d41c131d5c10886a84c3cd7fd46b393f7af.png", "app_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/bf-public_profile/29787/app_video.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAQC4NIECAODIUI2QA%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022720Z&X-Amz-Expires=60&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEHEaCXVzLXdlc3QtMiJGMEQCICdQyGY%2BbftNLxtKIYzFPxdUXttuiP0N09%2F%2BUfBHiBuhAiBOSl161zU1GSzXg078adXidT%2BI1mNTN00xIiFabrEuZSrlAwg6EAAaDDAwNjIwMTgxMTA3MiIMkex8rUdJQnYvqkb2KsIDZvHjdb5Nj1eMSDUiIIyyiwfJ8RyPFxer5o1XPlMS8x%2FtN9n%2F7PvS5Wd7oFPHi1qVxZAOUh%2BsJ%2B%2BXOPvWZ3Ae6ZZbt6%2BpSxxIqhHajGvQPEffXaUpP5qEh5zdOBvoNiFOEcL3U5kvAXPdFAeyEQUSC22Zz6qlwEbD4gyjAVIG69Bq2BqpO5gGA142dDrsMk9Fpvvrw4sUrmoFsqVRjQeNNnbJ6kGBUpNWGmGUg9xVdF1g6zjy5AOLq9gaZMWpGvdL2up4UE8tZcCtovhQX7LttuknA2oMDZbhb%2Bm1111BTyQwfpo0mzYMWvLSVFktebdbrXNkCCYHuwzkc%2FAYLLBCHcwr959rGhfijkmBq8zJ6L%2F3m2hFjzDHCnZYPOz0rFWk1O%2FdpaLpo4%2B83owIv8pdLkfxnSwz7jpV83o7ddFuQwi3GyYhgDV9NKraaZUPDf35OffhHBAa9LNH9KBtXE%2B9EJapzAmTZRHX0y1pAaJdqK7NnCs3JXj5MlJbG%2Fk7qe6hMwsDLiNtlbMQ85QzyJJHGU4y3dM2z2PBRjDSvRfVwapQjnLimR6h7fxLZHe1JssWKCLL3Y7dNZqEc8LFx7ZPmRWFMOj92tYGOqYB1OGPMkYIGSgzUnwJVB6Fm37ysfFBg0lS7An85D5284tv08ntQNXM%2B3NjFf0CnSg8DB6Uagn6Pf8Hz0vPosKjbkPeKHdUWICNI6ZBqrBsIZuFlEJamVl3d%2B5M5pi50RkfxaC0jUNRP0kzypvFoXoBWM5zGuVWthjEJhSlwkhKt8FAj4eChg9bDGTNeM9DkgbxKs0YI84QCmRK0pRtLAv0T11YvQ%2FTTg%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=5b61a20d2f49ee45b592e4520b2d2c056aa03109d6ea3b4e605512f6de3ff06f", "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1848263, "full_name": "Emily Choi-Greene", "title": "Founder/CEO", "founder_bio": "Founder/CEO at Clearly AI. Previously, Emily owned data security and privacy at Moveworks. Before that, she spent 5 years at Amazon, where she led Alexa AI Security. Emily performed hundreds of security and privacy reviews, from Moveworks' AI data lifecycle to Alexa's machine learning compute platform (used by 5000+ ML scientists). Emily graduated with High Honors in Computer Science from Dartmouth College.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/emilycgreene/", "x_url": "https://twitter.com/escgreene", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/095144c8d2288c74a28b3c53ed81fa5cc42a1d32.jpg" }, { "user_id": 1848395, "full_name": "Joe Choi-Greene", "title": "Founder/CTO", "founder_bio": "Founder/CTO at Clearly AI. \nPreviously, Joe was a sr. software engineer at Amazon. Joe led the satellite telemetry team at Project Kuiper and built exabyte scale datalakes at Alexa. \nJoe graduated from Carnegie Mellon University with a degree in computer science.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jcg-cmu", "x_url": "https://twitter.com/JoeChoiGreene", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b5a8be784960f6931b08f78ae355cd70f2ce405d.jpg" } ], "jobs": [ { "id": 90826, "title": "Forward Deployed Security Engineer", "url": "https://www.ycombinator.com/companies/clearly-ai/jobs/zdixMrj-forward-deployed-security-engineer", "location": "Seattle, WA, US / Remote (US; CA)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$125K - $175K", "equity_range": "0.10% - 0.50%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Information Security", "Software Security" ] } ], "news": [ { "title": "Seattle security startup led by husband-wife duo raises $8.4M – GeekWire", "url": "https://www.geekwire.com/2026/seattle-security-startup-led-by-husband-wife-duo-raises-8-4m/", "date": "Feb 10, 2026" }, { "title": "Okta Announces Finalists for Startup Challenge", "url": "https://www.businesswire.com/news/home/20250918072554/en/Okta-Announces-Finalists-for-Startup-Challenge-to-Build-Identity-Security-Applications", "date": "Sep 18, 2025" }, { "title": "Meet the Winners of the Amazon Bedrock Builders’ Challenge", "url": "https://aws.amazon.com/startups/learn/amazon-bedrock-builders-challenge#overview", "date": "Mar 11, 2025" } ], "launches": [ { "id": 82990, "title": "Clearly AI - Your AI Trust Team", "tagline": "Automate security and privacy with AI that understands your software.", "body": "**TL;DR:** [Clearly AI](https://clearly-ai.com) continuously reviews your software for security and privacy risks. We keep your compliance paperwork up to date and escalate issues that need attention so that your engineers can focus on more critical work.\n\n### The Problem\n\n* **Burn-out:** Many companies struggle to complete in-depth security reviews due to understaffed teams. The industry average is 1 security engineer per 200 software engineers. There is an overwhelming volume of software and policies to monitor and cross-check.\n* **Fragmentation:** Today, a typical enterprise security review takes 3-4 months to complete. Most of that time is spent gathering information and filling out paperwork. Trust teams operate in silos, leading to redundant questions or delayed risk identification.\n\n### Our Solution\n\n* **Triage:** Review all designs and code for security best practices and regulatory compliance.\n * **Raise the Ceiling:** Prioritize which applications need deeper review by security & privacy engineers.\n * **Raise the Floor:** For the rest, perform baseline security & privacy reviews to ensure compliance.\n* **Shift Left:** Bring the collective knowledge of legal, privacy, compliance, and security teams directly to developers from the inception of their work.\n* **Continuous Monitoring:** Real-time, automated checks instead of point-in-time reviews.\n\n![uploaded image](/media/?type=post&id=82990&key=user_uploads/1848263/d98720b6-83d2-42ed-bc4b-5dae8d938410)\n\n### Our Ask\n\nReach out to us if:\n\n* Your security/privacy teams are understaffed and overwhelmed.\n* Security/privacy is critical to your customers (beyond SOC2 certification).\n* You operate across regions with varying privacy regulations, and you need to evaluate and comply.\n\n### Our Offer\n\nGive us your gnarliest security & privacy problems — we’re happy to do a [free consultation](https://calendly.com/emily-cg/security-privacy-consult) and lend our expertise back to the YC community.\n\n### Our Team\n\nEmily & Joe met five years ago while working on an Alexa security review.\n\n* [**Emily**](https://www.linkedin.com/in/emilycgreene/)**:** Senior engineer at Amazon and Moveworks, speaker at USENIX PEPR, expert in privacy-preserving machine learning, featured in the New York Times.\n* [**Joe**](https://www.linkedin.com/in/joseph-choi-cmu)**:** Senior engineer at Amazon, designed and secured spacecraft command software that now orbits Earth, automated data compliance with global regulations like GDPR and HIPAA.\n\n![uploaded image](/media/?type=post&id=82990&key=user_uploads/1848263/d75fc960-831c-41bb-b51a-2a2dc7d0015c)\n\n", "url": "https://www.ycombinator.com/launches/LaY-clearly-ai-your-ai-trust-team", "votes": 221, "created_at": "2024-08-13T18:05:13.368Z" } ] }, { "id": 29750, "name": "winfunc", "slug": "winfunc", "former_names": [ "Stition", "Asterisk" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/758cce64094ba9a7250a8b613b368074620a74f5.png", "website": "https://winfunc.com", "all_locations": "San Francisco, CA, USA", "long_description": "Winfunc (winfunc.com) is an AI Hacker that autonomously finds, verifies, and patches security vulnerabilities in codebases, just like a human security engineer would. \r\n\r\nWinfunc can find business logic errors with context-aware scanning and automate the full auditing cycle to generate reports with zero false positives.\r\n\r\nWinfunc's agent has found vulnerabilities in Google, Supabase, Sentry, Cal, Gumroad, Bun, Hoppscotch, etc.", "one_liner": "ai-native security engineering for mission critical codebases", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1723094847, "tags": [ "SaaS", "B2B", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/winfunc", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/winfunc.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/winfunc", "x_url": "https://x.com/winfunc", "fb_url": null, "cb_url": null, "github_url": "https://github.com/winfunc", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/758cce64094ba9a7250a8b613b368074620a74f5.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/6ff376ba6239359fd82e52f00898c3d24ba45dc8.png" ], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1378207, "full_name": "Mufeed VH", "title": "Founder/CEO", "founder_bio": "founder/hacker at winfunc.\n\nwebsite: mufeedvh.com\ngithub: github.com/mufeedvh", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/mufeed-vh/", "x_url": "https://twitter.com/mufeedvh", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/26370ebfa125cc4425cfac841e698261a9937b41.jpg" }, { "user_id": 629782, "full_name": "Vivek R", "title": "Founder/CTO", "founder_bio": "CTO @ Asterisk. Previously, Vivek built secure, fault tolerant distributed systems for leading POS validators handling a total stake of $2B+, did IoT protocol optimization research for startups, contributor to GStreamer - the leading multimedia framework used by Google, Apple, etc, helped Fortune 100 companies with their infrastructure strategy and optimization.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/123vivekr", "x_url": "https://twitter.com/veev3x", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/de2b3ae0262c681b5388927081725e25a91adcc1.jpg" } ], "jobs": [], "news": [ { "title": "Devika Creator Launches Asterisk, YC-backed AI Agent Startup", "url": "https://analyticsindiamag.com/ai-news-updates/devika-creator-launches-asterisk-yc-backed-ai-agent-startup/", "date": "Aug 12, 2024" } ], "launches": [ { "id": 82844, "title": "Asterisk: AI-automated Security team", "tagline": "Automatically find, exploit, and patch security vulnerabilities across your digital assets with zero false positives.", "body": "**TL;DR**: [Asterisk](https://asterisk.so/) is an AI “hacker” with the ability to find, exploit, and patch security loopholes across your digital assets. It does all of this with no user intervention and generates a report with zero false positives. ([example](https://demo.asterisk.so/?report_id=776e01e4-22a2-44bd-afc5-229ec115e1b1))\n\n![uploaded image](/media/?type=post&id=82844&key=user_uploads/629782/0cd6877d-6d46-4428-ae29-236edb91393e)\n\n# **The Problem**\n\n* Almost 95% of potential vulnerabilities raised by static security tools (SAST) are **false positives**, and security engineers spend a lot of time filtering them out.\n* Current security tech **cannot detect business logic bugs** - think of vulnerabilities like unauthorized access, privilege escalation, and bugs that would rack up your AWS/API bills.\n\n# **Solution**\n\n* **Verification:** Asterisk verifies a vulnerability by spinning up a sandbox, running the software being scanned, and attempts to exploit the bug. If Asterisk flags a vulnerability, you can be sure it's real.\n* **Context-aware Threat Modeling:** Asterisk understands your codebase and can thus emulate a malicious hacker by coming up with attack scenarios, like the recent CrowdStrike incident.\n\n# **Our Team**\n\nWe are [Mufeed](https://www.linkedin.com/in/mufeed-vh/), [Asjid](https://www.linkedin.com/in/asjidkalam/) and [Vivek](https://www.linkedin.com/in/123vivekr/). All of us have a background in security research and systems engineering.\n\n![uploaded image](/media/?type=post&id=82844&key=user_uploads/629782/4120e7a5-43bf-4fa1-9352-699f902b32c9)\n\n**Mufeed**: represented 🇮🇳 at WorldSkills CTF, 🥇 medalist - IndiaSkills CTF, 🥉 medalist - BRICS Skills CTF\n\n**Asjid**: 🥈 medalist - IndiaSkills, ex-security research engineer at Emirates National Bank (UAE)\n\n**Vivek**: ex-distributed systems/platforms engineer at Chorus One (one of the biggest POS validators)\n\nOur team has helped secure Google, Mastercard, Okta, Nvidia, Microsoft, etc. We are also the team behind [Devika,](https://github.com/stitionai/devika) the open-source alternative to Devin with over 18K stars on GitHub.\n\n# **Our Ask**\n\nIf you're looking for a **complete security audit** of your digital assets or want to talk about anything security, email us ([hello@asterisk.so](mailto:hello@asterisk.so)) or book a demo ([asterisk.so/demo](http://asterisk.so/demo)).", "url": "https://www.ycombinator.com/launches/LYC-asterisk-ai-automated-security-team", "votes": 205, "created_at": "2024-08-08T07:20:52.225Z" } ] }, { "id": 29812, "name": "ZeroPath", "slug": "zeropath", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/fd70ee2d072b5f54e3fd3fc0e2531e49708b3fa7.png", "website": "https://zeropath.com", "all_locations": "San Francisco, CA, USA", "long_description": "ZeroPath is a developer tool that autonomously detects, verifies, and submits fixes for vulnerabilities in your code. Engineers can use ZeroPath to find security problems that they might only otherwise catch in pentests or from bug bounty researchers.", "one_liner": "Automatically find and fix your software vulnerabilities", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1718222641, "tags": [ "Developer Tools", "B2B", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/zeropath", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/zeropath.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/zeropathai", "x_url": "https://x.com/zeropathAI", "fb_url": null, "cb_url": null, "github_url": "https://github.com/zeropathai", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/fd70ee2d072b5f54e3fd3fc0e2531e49708b3fa7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 2021206, "full_name": "Dean Valentine", "title": "Founder", "founder_bio": "ZeroPath founder", "is_active": true, "linkedin_url": "", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d4aa118f45ea9f67b3ca5bb4aa5d886701b03b48.jpg" }, { "user_id": 2049348, "full_name": "Raphael Karger", "title": "Founder", "founder_bio": "CTO at ZeroPath. Former Google Security Engineer and BishopFox Consultant.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/raphael-karger/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/db088b311094bb1d324eed9d1fde67f15d0cd2f6.jpg" }, { "user_id": 2021191, "full_name": "Etienne Lunetta", "title": "Founder", "founder_bio": "COO at ZeroPath. Former Co-Founder at Mevlink, acquired by bloXroute Labs in 2023.", "is_active": true, "linkedin_url": "", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/69f8b695e026ab2db3939b185d23a01ceef56eb8.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 82258, "title": "🛡️ ZeroPath - Autonomous vulnerability patching", "tagline": "Detect and fix your web application's exploitable security issues without config.", "body": "📝 TL;DR: [ZeroPath](https://zeropath.com/) is a GitHub app that detects, verifies, and issues pull requests for security vulnerabilities in your code.\n\n![uploaded image](/media/?type=post&id=82258&key=user_uploads/2021206/183871ce-a1b3-4db9-a320-ce73defc63c3)\n\n### 💡 Why We Built This:\n\nAs security engineers and developers, we've seen firsthand how challenging it is for businesses to secure their products. Existing Static Application Security Testing (SAST) tools overwhelm teams with false positives and fail to remediate the real vulnerabilities they do find. We built ZeroPath to allow fast-moving teams to write secure code without having to configure or review a scan dashboard.\n\n![uploaded image](/media/?type=post&id=82258&key=user_uploads/2021206/9f2ff51d-2c6b-4ad5-b7c3-4c48e26fc0e9)\n\n### 🛠 How It Works:\n\n1. Executes regular vulnerability scans of your source code\n2. Integrates with GitHub to scan pull requests for vulnerabilities\n3. Uses advanced LLMs to significantly reduce false positives\n4. Generates patches for vulnerabilities identified\n5. Automatically issues pull requests to patch them\n\n### 💪 Why ZeroPath:\n\n* Integrates with your existing SAST - **removes** **85% of false positives**\n* Reduces vulnerability remediation time by up to **90%**\n* Enables natural language modification of patches, just tag @zeropath-ai in PRs (including your own!)\n* Supports complex, multi-file changes seamlessly\n* Prevents SAST vendor lock-in\n\n### 👥 Our Team:\n\n* [Nathan](https://linkedin.com/in/nathan-hrncirik): Ex-Tesla Red Team Engineer, $100k+ in bug bounties\n* [Raphael](https://linkedin.com/in/raphael-karger): Ex-Google Security Engineer, 12 security researcher hall of fames\n* [Dean](https://www.linkedin.com/in/dean-valentine-3b7583313/) & [Etienne](https://www.linkedin.com/in/etienne-lunetta-574065313/): Founders of Mevlink (acquired by Bloxroute in 2023)\n\n## 💰 YC Launch Deal: 50% off for 12 months\n\n* $20/month per contributing developer (reg. $40)\n* Use code LAUNCHYC at checkout, **valid until 8/15**\n\n### 🙏 How You Can Help:\n\nWe're eager for your insights on our product, feature ideas, and security needs - whether through trying our GitHub app, scheduling a meeting, or sharing feedback.\n\n* [Install our GitHub app](https://zeropath.com/)\n* [Schedule a meeting to discuss your application security needs](https://cal.com/zeropath/30min)\n* [Share your feedback](mailto:hello@zeropath.com)\n\n### 🚀 Get started in 30 seconds: \n\n📅 Want to learn more? Schedule a demo: \n\n![uploaded image](/media/?type=post&id=82258&key=user_uploads/2021206/c947eed7-8cdb-43e0-b330-0c5e36c86ef5)\n\n", "url": "https://www.ycombinator.com/launches/LOk-zeropath-autonomous-vulnerability-patching", "votes": 47, "created_at": "2024-07-18T18:38:13.935Z" } ] }, { "id": 30087, "name": "Gecko Security", "slug": "gecko-security", "former_names": [ "Gecko Security Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/45adce9bea5991ec16d5af841bb7bca96948baf2.png", "website": "https://gecko.security", "all_locations": "London, England, United Kingdom", "long_description": "We built Gecko for teams that want to build secure code quickly without wasting time on security tools that don’t deliver results, or relying on one-time human pentests that quickly become outdated. Gecko uses AI to understand how your application should work, simulates relevant attacks to find critical vulnerabilities, and then verifies these vulnerabilities by exploiting them. It also helps you understand the risk of these vulnerabilities and applies a working fix to keep your code secure.", "one_liner": "Security that understands your company", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1729014786, "tags": [ "SaaS", "B2B", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United Kingdom", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/gecko-security", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2024/gecko-security.json", "year_founded": 2024, "city": "London", "country": "GB", "linkedin_url": "https://www.linkedin.com/company/geckosec", "x_url": "https://x.com/gecko_sec", "fb_url": null, "cb_url": null, "github_url": "https://github.com/Gecko-Security", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/45adce9bea5991ec16d5af841bb7bca96948baf2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 1543392, "full_name": "Jeevan Jutla", "title": "Founder/CEO", "founder_bio": "Jeevan, Co-Founder and CEO of Gecko Security, has previously worked as a security researcher for UK Intelligence, where he built automated security tools. He’s ranked in the top 500 globally for competitive hacking and has co-developed machine learning tools for vulnerability research, 3 years ahead of public research.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jeevan-jutla", "x_url": "https://x.com/jjjutla", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/74dd4dee3403d90703a392dc55f1bfb34cb2bf67.jpg" }, { "user_id": 1969797, "full_name": "Artemiy Malyshau", "title": "Founder/CTO", "founder_bio": "Artemiy is the CTO and Co-Founder at Gecko Security. He holds an MSc from Imperial College London, where he was a scholar. He contributed to research in multi-agent systems and reinforcement learning. Prior, he developed threat intelligence software for Interpol and national governments.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/artemiy-malyshau/", "x_url": "https://x.com/nkoorty", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/5ebf9724a66e3cf8fe013ca476bdfca6e4ccec30.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 92703, "title": "Gecko Security: AI SAST for finding Vulnerabilities in Code", "tagline": "30+ 0-Days found using Gecko", "body": "**TL;DR:** Static analysis tools flood teams with false positives and miss the vulnerabilities that matter. We use LLMs to find the complex business logic flaws that traditional scanners can't detect.\n\n![uploaded image](/media/?type=post&id=92703&key=user_uploads/1969797/42239d23-2918-4c49-bc6d-38a1955fc1c7)\n\n# **The Problem**\n\nCompanies scan their code for security vulnerabilities and are often met with a big pile of findings. 80% of these findings are false positives and not exploitable vulnerabilities. Even among the true positives, these scanners still miss issues like privilege escalation and authentication bypasses. These are the most important issues that only surface later during manual code review or penetration testing.\n\nSecurity teams have to deal with this by spending hours tuning scanners and rules or hiring headcount to triage through the false positives. This translates into delayed releases, overtime costs, and compliance risks when critical flaws slip through undetected.\n\n# **The Solution**\n\nTraditional SAST (Static Application Security Testing) tools have two fundamental limitations. First, they parse code into simplistic models like ASTs or call graphs, which lose context and can't resolve complex call chains. Second, they rely on pattern matching against predefined rules, which works for basic vulnerabilities like XSS and SQLi but fails completely for custom business logic flaws.\n\nGecko solves both problems. We built a custom, compiler-accurate indexer that preserves semantic information and allows us to precisely navigate code like an IDE. This gives us the ground truth of how your code actually works.\n\nWith that foundation, we use LLMs to perform threat modeling. The LLM analyzes your code's business logic, data flows, and trust boundaries to generate targeted attack scenarios. We then systematically validate each potential attack path, using the indexer to reconstruct full call chains from source to sink and determine real-world exploitability before flagging it as a vulnerability.\n\nThis approach finds the complex, multi-step business logic vulnerabilities that have been invisible to traditional tools.\n\n# **Ask**\n\nWe've got a handful of Fortune 500 companies and startups alike excited about this, because it addresses key pain points they couldn’t address with traditional scanners. Customers are seeing 50% fewer false positives on the same codebases, and are finding issues using the scanner that would only appear in pentests and manual code reviews.\n\nWe’ve used it to find 30+ CVEs in projects like Ollama, Gradio, and Ragflow (). You can [try it on any OSS repo](https://app.gecko.security) at or [get a demo](https://cal.com/geckosec/30min).\n\n# **Team**\n\nJJ and Artemiy met four years ago while studying in London. Since then, they have traveled the world competing in CTFs and hackathons, earning over $100,000 in prizes.\n\nJJ, CEO and Co-founder, previously worked for the UK Intelligence Service, as a teenager building automated tooling to defend critical infrastructure. He also worked at Binance in China leading security tool development for the Red Team. \n\nArtemiy, CTO and Co-founder, served in the Austrian Cyberforces and built threat intelligence platforms used by Interpol and national governments. A scholar of Imperial College London, he’s spent his career developing systems that detect and respond to complex cyber threats", "url": "https://www.ycombinator.com/launches/O7D-gecko-security-ai-sast-for-finding-vulnerabilities-in-code", "votes": 22, "created_at": "2025-08-04T18:13:52.289Z" }, { "id": 84816, "title": "Gecko Security: Your AI Security Engineer", "tagline": "Gecko is an AI SAST for finding and fixes security vulnerabilities in your codebase. It's just like having a security engineer making your code secure.", "body": "**TL;DR:** We built [Gecko](https://gecko.security/) for teams that want to build secure code quickly without wasting time on tools that don’t deliver results, or relying on one-time human pentests that quickly become outdated.\n\n![uploaded image](/media/?type=post&id=84816&key=user_uploads/1969797/81233561-38af-49a4-b7ed-03f61aa03ae0)\n\n### **The Problem**\n\nMost developers tell us they think of security as an afterthought, added out of fear rather than part of the development process at the start. This is because current security tools **can’t find critical business logic vulnerabilities**, which are the ones attackers actually exploit, and instead flag low-priority issues with many **false positives**. This makes fixing these issues slow and costly, **pulling engineers away from building** features that grow revenue.\n\n### **The Solution**\n\nGecko uses AI to understand how your application should work, simulates relevant attacks to find critical vulnerabilities, and then verifies these vulnerabilities by exploiting them. It also helps you understand the risk of these vulnerabilities and applies a working fix to **continuously** **keep your code secure**. [Watch our demo here!](https://www.youtube.com/watch?v=ObuItEP3rZk)\n\n### **Technical Details**\n\nAt a high level, Gecko mimics the approach of skilled security experts by using LLM agents combined with program analysis tools like static analyzers, fuzzers, and symbolic executors, which were previously **only used in intelligence agencies**. For fixing vulnerabilities, Gecko uses multiple agents to iteratively refine the patches - ensuring the vulnerability is remediated, and your code isn’t broken. All testing is done in parallel with certified human pentesters, as we continue to benchmark Gecko’s performance to ensure no vulnerabilities are overlooked.\n\n### **Ask**\n\n**Do you have code that needs to be secured?** Email us at [**gecko@gecko.security**](mailto:gecko@gecko.security) or book a demo at [**https://cal.com/geckosec/15min**](https://cal.com/geckosec/15min).\n\n### **Team**\n\n[JJ](https://www.linkedin.com/in/jeevan-jutla/) and [Artemiy](https://www.linkedin.com/in/artemiy-malyshau/) met four years ago while studying in London. Since then, they have traveled the world competing in CTFs and hackathons, earning over $100,000 in prizes. \n\nJJ previously worked for the UK Intelligence Service (GCHQ), as a teenager building automated tooling to defend critical infrastructure. He also worked at Binance in China leading security tool development for the Red Team.\n\nArtemiy holds an MSc from Imperial College London, where he was a scholar. He has contributed to research in multi-agent systems and reinforcement learning. As the first employee and only non-PhD member at his previous company, he developed threat intelligence software for Interpol and national governments. \n\nBoth are deeply committed to cybersecurity and AI, and are focused on solving one of the industry's most challenging problems.", "url": "https://www.ycombinator.com/launches/M40-gecko-security-your-ai-security-engineer", "votes": 81, "created_at": "2024-10-16T21:47:06.425Z" } ] }, { "id": 30189, "name": "SubImage", "slug": "subimage", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/85fc2e3ee1b407fdf958403fc2fbd25fff6a7cac.png", "website": "https://subimage.io", "all_locations": "San Francisco, CA, USA", "long_description": "SubImage builds maps of your infrastructure to give you visibility on what assets you have and how they relate to each other. This enables any security team to deeply understand their environments and reduce risk.\r\n\r\nSubImage is a managed offering built around the Cartography open-source project, and is founded by members of Cartography's original team.", "one_liner": "The Open-Core Security Graph", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1736799545, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/subimage", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2025/subimage.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/subimagesec", "x_url": "https://x.com/subimagesec", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/85fc2e3ee1b407fdf958403fc2fbd25fff6a7cac.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/de5f64252df97d0b747fd203f54b59f6ce9296a2.png" ], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 1645462, "full_name": "Alex Chantavy", "title": "Founder/CEO", "founder_bio": "Co-founder & CEO at SubImage. Former Staff Engineer at Lyft: Created https://cartography.dev, the open source security graph. Built first-of-its-kind container scanning and remediation platform. Former Security Engineer on Microsoft Red Team: did cloud hacking before it was cool. Worked on [REDACTED] at the NSA.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/alexchantavy/", "x_url": "https://twitter.com/alexchantavy", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3f58380a1968d90842eb10d30199dc4bb3d225e2.jpg" }, { "user_id": 2387134, "full_name": "Kunaal Sikka", "title": "Founder/President", "founder_bio": "Co-founder at SubImage. Previously Member of Technical Staff at Anthropic and Staff Engineer at Lyft. At Lyft, reported directly to CISO, new grad to Staff Engineer in 4 years. Architected SIEM, insider abuse, and vulnerability management platforms. Graduated from University of Washington CS in 2 years.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/kunaals/", "x_url": "https://x.com/kunaalsikka", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/18be59b9dcd7652581e0ede30067d114ecaac56f.jpg" } ], "jobs": [ { "id": 107957, "title": "Founding Engineer", "url": "https://www.ycombinator.com/companies/subimage/jobs/NCTFgKK-founding-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$170K - $230K", "equity_range": "0.50% - 1.00%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Python", "Distributed Systems" ] } ], "news": [ { "title": "We've raised $4.2M", "url": "https://www.subimage.io/blog/funding/", "date": "Oct 21, 2025" }, { "title": "Launch HN: SubImage (YC W25) – See your infra from an attacker's perspective | Hacker News", "url": "https://news.ycombinator.com/item?id=43161332", "date": "Feb 24, 2025" } ], "launches": [ { "id": 87887, "title": "SubImage: Software that maps your infrastructure", "tagline": "The open-core alternative to Wiz", "body": "[SubImage](https://subimage.io) maps your infrastructure so that your security team can fix the most pressing risks first. It’s built on top of [Cartography](https://github.com/cartography-cncf/cartography), the open source security graph that we created and that 70+ companies use.\n\n![uploaded image](/media/?type=post&id=87887&key=user_uploads/1645462/73946b9a-a00f-4c1e-8401-1917b2600878)\n\n## **Problem**\n\nIn security, attackers often have to be right just once, but defenders have to be right all the time. \n\nThe scary thing is, given enough time, resources, and motivation, it is a near certainty that an attacker will break into your environment. You need to be ready with detections and controls to catch and evict them.\n\nHowever, most companies, even huge ones, are nowhere near ready for that. They are either inundated with data and stuck deciding what to fix next, or worse, have **poor to no visibility** on high impact risks.\n\nFurther, modern businesses often rely on dozens of cloud and SaaS platforms, so it’s very easy to lose track and make mistakes in configuring access permissions, networking, and other areas to inadvertently introduce an attack path.\n\n## **Solution**\n\nWe originally created Cartography in 2019 to help red teamers (professional corporate hackers) find the shortest paths to their targets. [At the time](https://news.ycombinator.com/item?id=19517977), there was nothing quite like it: other tools weren’t graph-based, didn’t cover the cloud, or weren’t open source.\n\nThe tool grew in popularity when defenders realized that **using an attacker’s mindset** to map out their infra was an immense boon to their work because it cut through the noise, exposing proven attack paths.\n\n![uploaded image](/media/?type=post&id=87887&key=user_uploads/1645462/030c8839-2635-45c8-beda-d6c9b11d1e32)\n\nCartography pulls metadata from multiple sources - SaaS, cloud service providers, a company’s internal services - and writes it to a graph database. This simple technique is incredibly powerful in finding otherwise unseen misconfigurations and attack paths in areas like access permissions, networking, and software vulnerabilities.\n\nSubImage is our fully-hosted solution that picks up where Cartography leaves off: it lets security teams immediately see and take action on the attack paths to their organization’s most sensitive data and secrets without needing to set up or maintain the database and sync jobs behind it.\n\nThe specific fix-action varies: smaller companies may prefer executing AWS CLI commands from an admin session, whereas larger corporations often require automated pull requests within their infrastructure-as-code repositories.\n\n![uploaded image](/media/?type=post&id=87887&key=user_uploads/1645462/d4628233-026a-4118-b6b5-1b41ace550e5)\n\n\n## **Demo: My Stripe API key was stolen**\n\n\n\n## **Demo: Hack my company**\n\nOne of the most effective ways to secure yourself from hackers is to put yourself in their shoes and think about how they would exploit your environment. So, let’s plan an attack on one of SubImage’s storage buckets; it’s kind of like planning to break into a bank vault.\n\n \n\nThe above demo shows that we also provide customers access to the underlying graph database so that they can see the internals of our schema and more deeply understand their infra.\n\n## **Roadmap**\n\nOur north star is for security engineers to stop needing to constantly monitor whether infrastructure, new or old, has introduced a risk – we will do it for them.\n\nSpecifically, we plan to\n\n* Integrate with access management systems to **prune excessive permissions** and enforce that certain invariants are maintained\n* Continuously **alert on and remediate** risky infrastructure changes\n* **Show misconfigurations** in any cloud or SaaS based infrastructure, including vulnerability management\n\n## **Asks**\n\n1. If you’re a company that is building out your security team, we’d love to learn about your problems and work together. Let’s [meet](https://cal.com/team/subimage)!\n2. If you are struggling with security visibility or if any of this sounds interesting to you, check out [Cartography](https://github.com/cartography-cncf/cartography/). We would love to get your feedback and have you as part of our community: join the CNCF Slack workspace [here](https://communityinviter.com/apps/cloud-native/cncf) and then join the #cartography channel.\n\n## **Team**\n\n![uploaded image](/media/?type=post&id=87887&key=user_uploads/89898/0f181717-ad90-4cd8-a86c-67debce4c790)\n\nHi! We’re [Alex](https://www.linkedin.com/in/alexchantavy/) and [Kunaal](https://www.linkedin.com/in/kunaals/), and we’ve been working together since 2020 when we met at Lyft. Alex was the lead engineer on Lyft’s vulnerability management program, led penetration tests for Microsoft’s Red Team, and worked on \\[REDACTED\\] at the NSA. Kunaal was a Staff Engineer at Lyft and Member of Technical Staff at Anthropic, and has spent his career solving large security problems like insider abuse, vulnerability management, and architecting SIEMs.", "url": "https://www.ycombinator.com/launches/MrX-subimage-software-that-maps-your-infrastructure", "votes": 32, "created_at": "2025-02-21T04:53:34.911Z" } ] }, { "id": 30273, "name": "Candor", "slug": "candor-security", "former_names": [ "Physion Works", "Sophris", "Mirror", "Anomaly", "Bastion", "Haleum" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/fb05bd36fb4b277d12ebca5a33307afd09834f65.png", "website": "https://candor.security/", "all_locations": "San Francisco, CA, USA", "long_description": "Candor is agentic data loss prevention (DLP) and insider risk management. Employees share sensitive data with third parties and email source code to personal inboxes every day. For fast-moving companies, protecting these crown jewels and customer trust is core to closing deals. Legacy DLP tools can cross off compliance checkboxes but flood security teams with false positives. Candor's AI agents understand both the data movement and the person behind it, giving lean security teams broad coverage without the noise. ", "one_liner": "Protect your data and stop insider risk", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1740017526, "tags": [ "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/candor-security", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2025/candor-security.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/candorsec", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/fb05bd36fb4b277d12ebca5a33307afd09834f65.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/b25c6e96323189fdf2430d59f53794c097b86ff7.png" ], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 1583056, "full_name": "Ansh Gupta", "title": "Founder", "founder_bio": "Co-Founder/CTO @ Candor (https://candor.security/). We help companies protect themselves from data loss and insider threats with AI.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gupta-ansh", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6b5ede187d11f52f613d3711eada87cdc8a0c23b.jpg" }, { "user_id": 1753464, "full_name": "Aditya Iyengar", "title": "Founder", "founder_bio": "Co-founder @ Candor. Prev SWE @ Flutterflow (W21), Uber, and NASA. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/aditya-v-iyengar", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a6ea81edf6ac8bc6f2c111cae88700e84d81acdf.jpg" } ], "jobs": [ { "id": 93340, "title": "Senior Full-Stack Engineer", "url": "https://www.ycombinator.com/companies/candor-security/jobs/VHLrfOO-senior-full-stack-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $250K", "equity_range": "0.20% - 0.50%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Express", "Node.js", "React", "Docker", "Information Security", "AI Agents" ] } ], "news": [], "launches": [] }, { "id": 30407, "name": "Golf", "slug": "golf", "former_names": [ "authed", "Authed", "authed", "Authed" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/cb627188af8a389c044d02fc9024aae3ea05cdd3.png", "website": "https://golf.dev/", "all_locations": "San Francisco, CA, USA", "long_description": "Golf gives enterprises visibility into shadow AI and control over AI agents and MCP. See what's connected, enforce policies, and generate audit trails - all from one place.", "one_liner": "Agentic AI Security and Governance", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1745255607, "tags": [ "Developer Tools", "Security", "Infrastructure", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/golf", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/golf.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/106327716", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/golf-mcp", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/cb627188af8a389c044d02fc9024aae3ea05cdd3.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 1366358, "full_name": "Wojciech Błaszak", "title": "Founder/CEO", "founder_bio": "Wojciech is the cofounder & CEO @ Golf.\n\nWojciech started building first company at 14, scaling it to $200k rev. He dropped out of university after one semester to keep building full-time. He has previously worked on multiple AI products, including an AI SDR and infrastructure for AI agents. Wojciech also started a community for young Polish hackers and scientists.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/wojciech-błaszak11/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9a5daa1c44dcd87e2763d40b6840f93abec96904.jpg" }, { "user_id": 1313739, "full_name": "Antoni Gmitruk", "title": "Founder/CTO", "founder_bio": "Antoni is the cofounder & CTO @ Golf.\n\nAntoni started building at 15 by creating a fully automated 3D printer. He dropped out of university after one semester to keep building full-time. He has previously worked on multiple AI products, including an AI SDR and infrastructure for AI agents. Antoni also started a community for young Polish hackers and scientists.", "is_active": true, "linkedin_url": "https://linkedin.com/in/antoni-gmitruk-80a268211", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2e0b52ea49b6bc7e7ceceb4127f248f43085852e.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 90569, "title": "Golf: Open-source platform for shipping production MCP servers", "tagline": "We provide the tooling to build and operate MCP servers in production - auth, tracing, and a deployment pipeline included.", "body": "Hi YC,\n\nWe’re Wojciech and Antoni -  high school friends who’ve been building together since we were 14. We're incredibly bullish on a future where AI agents have their own internet through which they access our services - so much so that we dropped out of university to build Golf.\n\n**Golf lets you ship a production-ready MCP server without worrying about the plumbing.** You just write the tools, prompts, and resources you want agents to call. Golf handles everything else - routing, auth, telemetry, error reporting, and deployment. Then you can observe and manage it through our gateway.\n\nhttps://youtu.be/u9ar4w2uE7E\n\n# **The problem**\n\nOver the past few weeks, we spoke with over 40 teams building MCP servers. Everyone hit the same walls: wiring up authentication, figuring out how to trace agent calls, setting up working transports, and debugging behavior in production. The MCP spec doesn’t cover these parts. Teams told us it takes **2-4 weeks** to get that to production.\n\n# **What we built**\n\n**GolfMCP** is an open-source framework that gives you a clear, file-based structure to define what your agent can call. No decorators, no spec knowledge, no boilerplate - just write your logic.\n\n**Golf Gateway** is the hosted layer that runs and observes your server. golf deploy gives you a live server in under 60 seconds, with real-time traces, tool usage, and error monitoring built in.\n\n![uploaded image](/media/?type=post&id=90569&key=user_uploads/1366358/b035bdc4-02c2-42d5-a230-ad38be34dfa9)\n\n# **Early traction**\n\nWe’re already running Golf in production with companies, and we’ve got more landing this week. \n\n**CTAs**\\\nIf you are looking to ship server for your company, schedule a demo of our platform here: https://golf.dev\\\nAlso we’d love to get your feedback, and we’re happy to help teams get to production faster. Reach us at [founders@golf.dev](mailto:founders@golf.dev)", "url": "https://www.ycombinator.com/launches/NYn-golf-open-source-platform-for-shipping-production-mcp-servers", "votes": 74, "created_at": "2025-05-21T01:15:30.127Z" } ] }, { "id": 30452, "name": "Better Auth", "slug": "better-auth", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f768f164c4dd92121e70abbd42713af3118834a.png", "website": "https://better-auth.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Better Auth is a comprehensive authentication framework for TypeScript that lets you implement everything from simple auth flows to enterprise-grade systems directly on your own database, embedded in your backend. It’s loved by developers all over the world and endorsed by leading voices in the ecosystem.\r\n\r\nOn top of the framework, Better Auth also provides an infrastructure layer to help you scale with user management and analytics, bot and fraud detection, transactional email and SMS, global session storage and more.", "one_liner": "The authentication framework for TypeScript", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1744888506, "tags": [ "Developer Tools", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/better-auth", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/better-auth.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/better-auth", "x_url": "https://twitter.com/better_auth", "fb_url": null, "cb_url": null, "github_url": "https://github.com/better-auth", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f768f164c4dd92121e70abbd42713af3118834a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 1184116, "full_name": "Bereket Engida", "title": "Founder/CEO", "founder_bio": "I’ve spent the past few years building developer tools and contributing to open source projects, mostly in TypeScript - including libraries like Better Call, Better Fetch, Loglib and Better Auth. Before that, I worked across several products, which is where I first got obsessed with making dev infra more usable. I care a lot about good DX, clean APIs, and building things that actually ship.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/bekacru/", "x_url": "https://x.com/bekacru", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/da6169f6f81e9fa0e7fd8311a4df990285887bbf.jpg" } ], "jobs": [], "news": [ { "title": "Better Auth is joining Vercel", "url": "https://better-auth.com/blog/better-auth-joins-vercel", "date": "Jul 07, 2026" }, { "title": "Better Auth, an authentication tool by a self-taught Ethiopian dev, raises $5M from Peak XV, YC | TechCrunch", "url": "https://techcrunch.com/2025/06/25/this-self-taught-ethiopian-dev-built-an-authentication-tool-and-got-into-yc/", "date": "Jun 25, 2025" } ], "launches": [ { "id": 90320, "title": "Better Auth - The Authentication Framework for TypeScript", "tagline": "The fastest growing Auth framework for TypeScript: 13K stars + 100K weekly downloads!", "body": "Hey! 👋 We’re building Better Auth - a comprehensive, framework-agnostic authentication framework for TypeScript. It lets you roll your own auth directly on your backend and database, without relying on 3rd party services. From basic sign-ins to complex enterprise systems all with great DX.\n\nhttps://www.youtube.com/watch?v=j_HjHmprVOs\n\nAuth has been a pain point for many developers in the TypeScript ecosystem for a while. Other open-source libraries require a lot of additional code for anything beyond basic authentication. So, we set out to build a comprehensive auth library - framework-agnostic, with a robust set of features out of the box, a plugin ecosystem for everything else you might need, and great documentation.\n\n![uploaded image](/media/?type=post&id=90320&key=user_uploads/1184116/dec3dc74-8395-4d83-b062-c2f3271b8164)\n\nSince launching v1 just 5 months ago:\n\n* **13K+ GitHub stars** and **350K+ monthly npm downloads**\n* We've grown into one of the **most influential** and **well-loved** open source projects in the TypeScript ecosystem.\n* Used in production by great teams including YC companies and major OSS projects including [folo](https://github.com/RSSNext/Folo), [same](https://same.new/), [dokploy](https://github.com/Dokploy/dokploy), [zero](https://github.com/Mail-0/Zero), [onejs](https://github.com/onejs/one) and many more.\n* We’re the recommended auth library by **Next.js, Nuxt, Astro**, and other top JS frameworks.\n* A thriving community with **5K+ members on Discord,** **7K+ followers on X**, and a growing ecosystem of adjacent libraries built by community members.\n* Featured by creators like Theo, Dev Ed and more\n\nTo take it further, and after seeing the pain points of our current users, we're building an **infrastructure layer** on top of the framework to extend the library with functionality we can't offer through the framework alone:\n\n* A comprehensive admin dashboard with user management & analytics\n* Bot/fraud/abuse detection\n* Global session storage\n* and more…\n\nTo be clear – we’re not building a third-party auth service. Our goal is to make rolling your own auth so ridiculously easy that you’ll never need one.\n\nGet started with the library here: [better-auth.com/docs/installation](http://better-auth.com/docs/installation)\n\nJoin the waitlist for infra: http://better-auth.build/\n\nStar the repo: https://github.com/better-auth/better-auth", "url": "https://www.ycombinator.com/launches/NUm-better-auth-the-authentication-framework-for-typescript", "votes": 2197, "created_at": "2025-05-13T13:36:07.545Z" } ] }, { "id": 30456, "name": "Tinfoil", "slug": "tinfoil", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1fb98a08722d6b4a90ad914611f5c3579c0f3558.png", "website": "https://tinfoil.sh", "all_locations": "San Francisco, CA, USA", "long_description": "Tinfoil makes it easy to make your AI workloads secure and provably private. You get the privacy of on-prem deployments, while running on the cloud. It's like end-to-end encrypted messaging but for your AI applications. \r\n\r\nWe’ve built a full-stack platform on top of the latest NVIDIA GPUs offering confidential computing capabilities, meaning that you don’t have to trade off performance for privacy. We integrate a suite of recent advances in secure hardware technologies, in particular NVIDIA’s confidential compute mode available on Hopper and Blackwell. When combined with Tinfoil’s software stack, companies can prove their security claims like \"we can't see and don’t log your queries.” Tinfoil guarantees that all data always stays private and cannot be accessed by anyone other than the end user -- not even by Tinfoil or the cloud provider it’s processed on. Everything can be made end-to-end encrypted and private with Tinfoil. \r\n\r\nThe founding team combines deep academic and industry experience in security and Internet protocols. Tanya was previously a systems engineer at Cloudflare, where she built Internet security protocols used by billions, and contributed to the Workers AI platform. Jules and Sacha hold PhDs from MIT, where they worked on secure hardware, cryptography, and privacy technologies. Jules has also worked at NVIDIA on their confidential computing team. Tinfoil was born from our personal frustration with the false choice between access to powerful AI and the massive data privacy implications of deeply integrated AI.\r\n\r\nAI is a universal tool that becomes part of our personal lives and business workflows. In the process, it needs access to all personal, private, and proprietary data. Right now, the only solutions are data processing agreements (i.e., \"pinky promises\"), band-aids like PII redaction that don't work in practice, or AI locally/on-prem, which doesn't scale. Tinfoil promises to unlock significantly deeper AI adoption and integrations by making it easy to obtain true privacy, just as TLS on the Internet enabled e-commerce to flourish by securing credit cards on the network.\r\n\r\nToday we offer several self-serve products: \r\n\r\n- A consumer-facing chatbot that keeps your chats end-to-end encrypted and provides zero-access inference with powerful open-source models like Kimi, Gemma, and GLM. You can try it out for free: https://chat.tinfoil.sh\r\n\r\n- A developer-friendly API that allows you to build AI applications where all user data is kept private and we as the inference provider cannot see any of the prompts. Our SDKs make sure that all relevant security measures are checked for you before even sending a single byte of data. Learn more:https://docs.tinfoil.sh \r\n\r\n- An advanced confidential computing platform we call Tinfoil Containers that allows you to secure any Docker application. We make it easy to deploy your own logic and applications inside secure enclaves and prove to the world what code is running inside. This enables attested workloads and publicly verifiable privacy policies for sensitive applications. Learn more: https://tinfoil.sh/containers ", "one_liner": "Encrypted AI with verifiable privacy", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1744845895, "tags": [ "Developer Tools", "Security", "Privacy", "Cloud Computing", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tinfoil", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/tinfoil.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/Tinfoil/", "x_url": "https://x.com/TinfoilAI", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/tinfoil", "github_url": "https://github.com/tinfoilsh", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1fb98a08722d6b4a90ad914611f5c3579c0f3558.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1678261, "full_name": "Tanya Verma", "title": "Founder/CEO", "founder_bio": "Co-founder @ Tinfoil | Systems, Cryptography and AI @ Cloudflare | CubeSats & CS @ UIUC", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tanya-verma-130a23124/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/71e19f53dbd482777277fb5c1899f8ee0808a80f.jpg" }, { "user_id": 2554847, "full_name": "Jules Drean", "title": "Founder", "founder_bio": "Jules has an MIT PhD in secure hardware and confidential computing. He has industry experience working at Microsoft Research and NVIDIA on the technologies underlying Tinfoil. During his PhD, Jules has built secure enclaves from the ground up and studied how to attack and defend these systems against advance microarchitectural attacks. His work also looked at using trusted hardware to securely deploy advanced cryptographic primitives such as FHE and MPC.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jdrean", "x_url": "https://x.com/julesdrean", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6e2e2ad4734fda8e101f5d5cfb506c5944356a36.jpg" }, { "user_id": 2540941, "full_name": "Sacha Servan-Schreiber", "title": "Founder", "founder_bio": "Co-founder of Tinfoil | PhD at MIT in cryptography\n\nPersonal website: sachaservanschreiber.com ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sacha-servan-schreiber-308341305", "x_url": "https://x.com/sachaservan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/33096fdaf7641b0498b900f6e2b99c126f850834.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 90590, "title": "Tinfoil: Verifiable Privacy for Cloud AI", "tagline": "We host models and AI workloads on the cloud while guaranteeing zero data access and retention", "body": "Sending your most sensitive or proprietary data to OpenAI et al?\n\nSick of deals getting stalled during enterprise or government security reviews?\n\nHate deploying on various configurations of on-prem infrastructure environments?\n\nSay less ✋\n\nWe’re [Tanya](https://www.linkedin.com/in/tanya-verma-130a23124/), [Jules](https://www.linkedin.com/in/jdrean/), [Sacha](https://www.linkedin.com/in/sacha-servan-schreiber-308341305/) and [Nate](https://www.linkedin.com/in/nate-sales/) from[ Tinfoil](https://tinfoil.sh/). What we’re building at Tinfoil sidesteps these concerns because we can host models while guaranteeing zero data access and retention.\n\nWe let you run powerful models like Llama, Deepseek R1 on cloud GPUs without you having to trust us – or the cloud provider – with your private data.\n\nSince AI performs better the more context you give it, we think solving AI privacy will unlock more valuable AI applications, just how TLS on the Internet enabled e-commerce to flourish knowing that your credit card info wouldn't be stolen by someone sniffing internet packets.\n\nhttps://youtu.be/wnwI22qT-QQ\n\n**Who we are**\n\nWe come from backgrounds in cryptography, security, and infrastructure. Jules did his PhD in trusted hardware and confidential computing at MIT, and worked with NVIDIA and Microsoft Research on the same, Sacha did his PhD in privacy-preserving cryptography at MIT, Nate worked on privacy tech like Tor, and I (Tanya) was on Cloudflare's cryptography team.\n\n We were unsatisfied with band-aid techniques like PII redaction (which is actually undesirable in some cases like AI personal assistants) or “pinky promise” security through legal contracts like DPAs. We wanted a real solution that replaced trust with provable security, and addressed our personal frustration with the false choice between exploring cutting-edge AI capabilities and personal privacy.\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXcicUJrVGkJrvHFqW2CaNEpGzvSfbjySaAR3k-Q8fbf56JtXg8xAJa5MJrYn-RIdJjFirmZ4khWay_UpV6WhnZKZEE9ApI5HX97jRKGw4mJOTblXrujRY_9xcCvGPL139p2QaKd1g?key=xi6EV3GMAYXvlmorGP948w)\n\n**The magic sauce**\n\nRunning models locally or on-prem is an option, but can be expensive and inconvenient. Fully Homomorphic Encryption (FHE) is not practical for LLM inference for the foreseeable future. The next best option is using secure enclaves: a secure environment on the chip that no other software running on the host machine can access. This lets us perform LLM inference in the cloud while being able to prove that no one, not even Tinfoil or the cloud provider, can access the data. And because these security mechanisms are implemented in hardware, there is minimal performance overhead.\n\nUp until recently, secure enclaves were only available on CPUs. But NVIDIA confidential computing recently added these hardware-based capabilities to their latest GPUs, making it possible to run GPU-based workloads in a secure enclave.\n\nBelieve it when you see it, but Tinfoil has negligible performance overhead despite the strong security & privacy guarantees.\n\n**Getting Started**\n\n**The best part is you can start using confidential AI chat and inference with Tinfoil today!**\n\n**Try our private chat: [tinfoil.sh/chat](http://tinfoil.sh/chat).**\n\n[**https://www.youtube.com/watch?v=FuFszT0_vXk**](https://www.youtube.com/watch?v=FuFszT0_vXk)\n\n**Build with our API:** Drop-in replacement for the OpenAI chat-completions API with Tinfoil\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXfBq_bx4bvZAzdB9BTzMg9KSE8UB2bKQO5uqfF5eoZkEWZFUtlbFnZpeD-m_PwaCVgUWftTt3QDLTW-r84u2dvUEGQ0ddbbQuq082ClI48l2cY4jWX-kWG1G6ZfwjNh8GN-EdAVJg?key=xi6EV3GMAYXvlmorGP948w)\n\nWe support several popular open source models like Deepseek R1 70B, Llama3.3 70B, Mistral 3.1 24B. Missing your favorite model? Just ask us to add it!\n\nTry out our free version running Llama3.3 70B in [Colab](https://colab.research.google.com/drive/1DhpUSmSWjxERnEo3U0qyAyApfcdIhvMv?usp=sharing).\n\nSee how Nate psychoanalyzes himself by sending all his iMessage chats to Tinfoil!\n\nhttps://www.loom.com/share/2381c02ba51043528c6d3bdf61270bc0?sid=9ea0e955-ae68-4ce4-9c86-d06cab18d25c\n\n**Deploy your AI Application**: Make your AI application enterprise-ready in a matter of minutes. Here's a demo of how you can use Tinfoil to run a deepfake detection service that could run securely on people's private videos:\n\nhttps://www.youtube.com/watch?v=_8hLmqoutyk\n\nWe encourage you to be skeptical of our privacy claims. Verifiability is our answer. It’s not just us _saying_ it’s private; the hardware and cryptography let _you_ check. Here’s a guide that walks you through the verification process:[ ](https://docs.tinfoil.sh/verify)https://docs.tinfoil.sh/verification/attestation-architecture.\n\n**The Ask**\n\nIf you think this sounds interesting, or too good to be true, contact us at [**founders@tinfoil.sh**](mailto:founders@tinfoil.sh)**!**\n\nWe’d love to hear from you, whether you’re a:\n\n* startup looking to sell into regulated industries\n* government agency that does everything on-prem but doesn’t trust your AI team to handle sensitive data\n* neocloud trying to secure enterprise customers in regulated industries that don’t migrate from the big clouds to you\n* company providing your employees dead-simple confidential LLM chat app\n\nYou can also learn more on our [**blog**](https://tinfoil.sh/blog), and subscribe to our [**LinkedIn**](https://www.linkedin.com/company/tinfoil/) and [**Twitter**](https://x.com/TinfoilAI) to follow updates!", "url": "https://www.ycombinator.com/launches/NZ8-tinfoil-verifiable-privacy-for-cloud-ai", "votes": 44, "created_at": "2025-05-21T14:22:18.121Z" } ] }, { "id": 30477, "name": "Casco", "slug": "casco", "former_names": [ "Transmittr" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/aad91c0390b62c24c8473857d3ed3043cad61263.png", "website": "https://casco.com", "all_locations": "", "long_description": "Casco performs autonomous security testing for your web apps, APIs, infrastructure, and AI systems. Human supervision optionally available. Use Casco for year-round security and get a penetration test report for your SOC2 and ISO27001 compliance certifications. \r\n\r\nTrusted by 100+ companies from enterprises to fast-moving startups, such as Gusto, CrewAI, Novig, and Accrual.\r\n\r\nHack yourself at: https://casco.com\r\n\r\n---\r\n\r\nWe already secure software deployed in 60% of Fortune 500 companies and are default alive. [1]\r\n\r\n[1] http://www.paulgraham.com/aord.html", "one_liner": "Autonomous security testing for web apps, APIs, cloud, and AI systems", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747691019, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Unspecified" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/casco", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/casco.json", "year_founded": 2025, "city": null, "country": null, "linkedin_url": "https://www.linkedin.com/company/getcasco", "x_url": "https://x.com/getcasco", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/aad91c0390b62c24c8473857d3ed3043cad61263.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/eea06fd5a8d65505b51a0b65e88eff836055b4ca.png" ], "primary_partner": { "name": "Jon Xu", "url": "https://www.ycombinator.com/people/jon-xu" }, "founders": [ { "user_id": 1365365, "full_name": "Rene Brandel", "title": "Founder/CEO", "founder_bio": "CEO of Casco. We hack software before bad actors do.", "is_active": true, "linkedin_url": "https://linkedin.com/in/renebrandel", "x_url": "https://x.com/renebrandel", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e050496fe07bfb07ba5a2473d14c8b3d76c7438b.jpg" }, { "user_id": 2479180, "full_name": "Ian Saultz", "title": "Founder/CTO", "founder_bio": "Founder & CTO of Casco", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/iansaultz/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0f09a1e1f681563d9e2bb0167258d82041ecbef1.jpg" } ], "jobs": [ { "id": 79769, "title": "Offensive Security Engineer", "url": "https://www.ycombinator.com/companies/casco/jobs/LhiAAHO-offensive-security-engineer", "location": "US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$200K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 81752, "title": "Software Engineer", "url": "https://www.ycombinator.com/companies/casco/jobs/EGFscZJ-software-engineer", "location": "San Francisco, CA, US / Seattle, WA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$200K", "equity_range": "0.10% - 1.00%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "TypeScript", "Next.js" ] }, { "id": 95044, "title": "Growth Engineer", "url": "https://www.ycombinator.com/companies/casco/jobs/ZfbpM3O-growth-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Marketing", "role_type": null, "salary_range": "$180K", "equity_range": "0.01% - 0.25%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Software Security", "Marketing design" ] }, { "id": 95762, "title": "Technical Account Executive", "url": "https://www.ycombinator.com/companies/casco/jobs/tO2wVfO-technical-account-executive", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$350K", "equity_range": "0.01% - 0.10%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "Software Security" ] }, { "id": 103943, "title": "Product Engineer", "url": "https://www.ycombinator.com/companies/casco/jobs/Vy9JSfH-product-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$200K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "React", "TypeScript" ] }, { "id": 104828, "title": "Sales Development Representative", "url": "https://www.ycombinator.com/companies/casco/jobs/vhGzMBB-sales-development-representative", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$120K", "equity_range": "0.01% - 0.05%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [ { "id": 90632, "title": "Casco - Agentic Red Teaming for AI agents and apps", "tagline": "Secure AI agents and apps", "body": "Hi everyone - we’re Rene and Ian, ex-AWS AI & Security, and we’re thrilled to introduce [Casco](https://casco.com)! Casco prevents AI agents and apps from messing up by evaluating them for security, safety, and accuracy.\n\nCasco already secures AI systems deployed in 60% of Fortune 500 companies.\n\nhttps://youtu.be/SWPnB-GADdE\n\n**The Problem** \n\nCompanies building AI agents and apps face a disproportionate amount of cybersecurity threats that put their business at risk. 73% of enterprises experienced at least one AI-related security incident (that they know of) in the past 12 months, with the average incident cost amounting to $4.8m. It takes 40% longer for companies to identify and address these AI-related incidents.\n\nExisting solutions do not work for these companies:\n\n1. Automated scans yield low-quality, noisy security findings.\n2. Thorough security evaluations are cost-prohibitive to most companies.\n3. New AI attack vectors are emerging faster than companies can adapt.\n\n**Our Solution: Casco’s supervised, agentic red-teaming**\n\nCasco proactively uncovers critical vulnerabilities before attackers do. Here’s how:\n\n1. **Sophisticated, AI-Driven Attack Simulation:** Casco uses advanced techniques, just like an expert human red teamer, to devise and execute multi-step attacks against your AI agents and apps.\n2. **Human-Validated Expertise:** The AI evaluations are supervised and validated by our team, ensuring high-fidelity findings. We’ve built and secured AI systems, applications, and cloud infrastructure at AWS, Microsoft, and the US government.\n3. **Actionable, Compliance-Ready Reports:** Casco provides comprehensive reports with reproduction steps, risk explanations, and remediation guidance, aiding compliance with SOC 2, NIST AI RMF, EU AI Act, and ISO 27001.\n\n**Our Story**\n\nAs founding members of the Generative AI team at AWS (Lead Engineer + Security, Head of Product), we witnessed the evolving landscape of AI agents and applications. We identified emerging security gaps as traditional security practices struggled to keep pace with this new paradigm.\n\nRecognizing the critical need to secure AI systems, we decided to build Casco. Our mission is to empower builders to innovate confidently, knowing their AI systems are secure.\n\n**Secure your AI agent and apps**\n\nIs your AI agent or app secure?\n\n* [**Book a Demo**](https://calendar.app.google/LZybyH27Pd4ScXPk6) to secure your AI systems", "url": "https://www.ycombinator.com/launches/NZo-casco-agentic-red-teaming-for-ai-agents-and-apps", "votes": 122, "created_at": "2025-05-22T15:09:00.327Z" } ] }, { "id": 30527, "name": "MindFort", "slug": "mindfort", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/67f8fa73a583138ab0060e99d6a10e8341a0d040.png", "website": "https://mindfort.ai/?utm_source=ycombinator&utm_medium=referral&utm_campaign=yc", "all_locations": "Los Angeles, CA, USA", "long_description": "MindFort is building fully autonomous AI agents powered by their in-house models that can find, exploit, and patch complex vulnerabilities in web applications at massive scale. MindFort agents use the same principles as human penetration testers to understand their target and figure out the best ways to work together to exploit it. We can do fully autonomous AI web pentesting and bring offensive security to teams out numbered. \r\n\r\nWhile security teams were already behind with legacy tools and processes, AI coding is make the problem worse. AI generates code far faster than human teams can secure it; MindFort can match that speed and scale. Our agents will become critical as organizations scale up development with AI.\r\n", "one_liner": "Autonomous Security Agents", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747245373, "tags": [ "Developer Tools", "Cybersecurity", "Enterprise Software", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/mindfort", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/mindfort.json", "year_founded": 2025, "city": "Los Angeles", "country": "US", "linkedin_url": "https://www.linkedin.com/company/106469568/", "x_url": "https://x.com/mindfort_ai", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/mindfort-ai", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/67f8fa73a583138ab0060e99d6a10e8341a0d040.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 525065, "full_name": "Brandon Veiseh", "title": "Founder/CEO", "founder_bio": "Co-founder and CEO of MindFort AI. Previous founder, product leader in AI and Security.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/brandon-veiseh-77762113a/", "x_url": "https://twitter.com/bveiseh", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6adfd0bc0deb384b42ebb12dc0a50a3df70f67ac.jpg" }, { "user_id": 1327738, "full_name": "Akul Gupta", "title": "Founder/CTO", "founder_bio": "Co-founder and CTO of MindFort.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/akulguptax/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c33e727522c067e9599fb5756c86eb381545c180.jpg" } ], "jobs": [ { "id": 84795, "title": "Software Engineer ", "url": "https://www.ycombinator.com/companies/mindfort/jobs/g3aPQUZ-software-engineer", "location": "Los Angeles, CA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$150K - $250K", "equity_range": "0.20% - 0.50%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 95701, "title": "AI Researcher", "url": "https://www.ycombinator.com/companies/mindfort/jobs/HV2EzUk-ai-researcher", "location": "Los Angeles, CA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$150K - $250K", "equity_range": "0.20% - 0.50%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [ { "id": 90555, "title": "MindFort.ai - Fully Autonomous Security Agents", "tagline": "Fully autonomous security agents that find, validate, and patch vulnerabilites 24/7", "body": "![uploaded image](/media/?type=post&id=90555&key=user_uploads/525065/9bbd9d91-5dba-43e0-9412-2c45bac5782a)\n\nHey everyone! 👋 We're Brandon, Sam, and Akul - Co-founders of [MindFort.ai](http://MindFort.ai).\n\nWe're building fully autonomous AI security agents that find, validate, and patch vulnerabilities in web applications and networks at machine speed and scale.\n\nhttps://youtu.be/Oe-errlwaow\n\n## 🔥 The Problem\n\nSecurity is fundamentally broken for most engineering teams today:\n\n* **Scanners are unreliable** - They flood engineers with 30-50% false positives, wasting precious development time\n* **Traditional pen testing is too slow** - It happens quarterly at best, costs a fortune, and takes weeks to complete\n* **AI-accelerated development creates new risks** - Teams are shipping code faster than ever, but security reviews have become an even bigger bottleneck\n\nThe result? Companies are forced to choose between shipping fast or shipping secure. Engineering teams lose **\\~20%** of their time dealing with security issues or slowing down to accommodate outdated security practices.\n\n## 🚀 Our Solution\n\n[MindFort.ai](http://MindFort.ai)'s autonomous security agents work 24/7/365 to find, validate, and patch vulnerabilities:\n\n* **Find** complex vulnerabilities like a human tester would\n* **Validate** every finding to eliminate false positives\n* **Patch** with intelligent fixes that integrate directly with your codebase\n* **Scale** to thousands of tests in an instant, giving coverage never possible before\n\nUnlike solutions that slow development, MindFort accelerates it by eliminating security bottlenecks. Our platform is already finding vulnerabilities in production systems that other tools miss, identifying issues in bug bounty programs, and scoring high on human penetration testing benchmarks.\n\n## 💡 Our Story\n\nBrandon worked as a PM at ProjectDiscovery, a security scanner company where he led development of the Nuclei cloud platform from an open source tool to an enterprise ready product. He then joined NetSPI, one of the world’s largest penetration testing firms, to build generative AI tools for human testers. He sat with countless customers across both companies, learning about their struggles in securing attack surfaces at scale.\n\nAkul received his masters in computer science from the University of Illinois Urbana-Champaign, and was drawn to AI and security early on in his academic career. He co-authored multiple papers on using LLMs to perform various cybersecurity attacks, worked on creating novel benchmarks for hacking agents, and participated in red teaming and model safety programs at both OpenAI and Anthropic.\n\nSam worked as a senior engineer at Salesforce, where he led security for a large business unit, Tableau. During his time there, he worked first hand on keeping a large scale product secure. Between juggling security assessments, validating findings, and managing remediations inside of a large organization, he had seen it all. He began experimenting with ways to use AI to help solve some of the issues he faced at Salesforce and even worked on a demo of a tool to perform agentic code review through a DARPA program. He recently completed a master’s degree in cybersecurity at UC Berkeley.\n\nWe all met through our work and research. Early on, we all realized that the future of security was going to belong to AI agents, and that the coming tidal wave of new code generated with AI would need a solution of equal magnitude.\n\n![uploaded image](/media/?type=post&id=90555&key=user_uploads/525065/51cbc28d-9ff7-41b3-af19-d3e9fc23ef0a)\n\n## 🔮 Our Vision\n\nSecurity should accelerate your business, not slow it down. We're creating a world where security testing happens continuously and vulnerabilities are patched autonomously, **keeping your product and your users safe, while letting you ship faster.**\n\n## 👇 Our Ask\n\nReady to ship quickly and securely? 👉 **Visit [mindfort.ai](http://mindfort.ai) to request access**\n\n📧 Email us directly: [founders@mindfort.ai](mailto:founders@mindfort.ai)", "url": "https://www.ycombinator.com/launches/NYZ-mindfort-ai-fully-autonomous-security-agents", "votes": 62, "created_at": "2025-05-20T14:20:43.961Z" } ] }, { "id": 30528, "name": "Probo", "slug": "probo", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c0e14dfc874747053fa6732daf6dbf9f9ed3e18d.png", "website": "https://www.probo.com?utm_source=yc-bookface", "all_locations": "San Francisco, CA, USA", "long_description": "Probo acts like your compliance team. You tell us how you work, and Probo does the rest:\r\n1. Set the right requirements - not overkill\r\n2. Handle docs, risks, controls, evidence\r\n3. Run the audit\r\n4. Keep everything up to date afterward\r\nFounders shouldn’t lose weeks to this stuff. Even one day is too much.\r\n", "one_liner": "We help you get compliant while you focus on your business.", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747978784, "tags": [ "SaaS", "B2B", "Compliance", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/probo", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/probo.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/getprobo/", "x_url": "https://x.com/getprobo", "fb_url": null, "cb_url": null, "github_url": "https://github.com/getprobo", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/c0e14dfc874747053fa6732daf6dbf9f9ed3e18d.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Tom Blomfield", "url": "https://www.ycombinator.com/people/tom-blomfield" }, "founders": [ { "user_id": 2229971, "full_name": "Antoine Bouchardy", "title": "Founder/CEO", "founder_bio": "Probo co-founder & CEO. Cybersecurity auditor with a data & product background.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/antoinebouchardy/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/33fd1c4954b833c489ebb4ed6da203da5e451490.jpg" }, { "user_id": 1142157, "full_name": "Bryan Frimin", "title": "Founder/CTO", "founder_bio": "CTO & Co-founder of Probo. French engineer building an open-source AI platform that simplifies SOC2/ISO27001 compliance.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gearnode", "x_url": "https://www.twitter.com/gearnode", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4239e339bb04f3406fd6b9fe2d14cbc0625f40d3.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 90678, "title": "Probo - Open-source compliance platform", "tagline": "We make you SOC 2 compliant so you focus on your business.", "body": "Hi everyone!\n\nWe are Antoine and Bryan from Probo.\n\nWe do your SOC 2 (and other) compliance, making sure you don’t waste time on useless tasks.\n\nOver the last 2 months, we've already worked with 39 companies to get SOC2, HIPAA or ISO27001 without the hassle. \n\nhttps://youtu.be/i-IT5hYwemY\n\n## **What’s broken**\n\nCompliance.\n\nAs an auditor, I asked companies for the same checklists and sent the same doc requests, over and over. Founders wasted time filling in boxes without thinking.\n\nLooking back, it was mindless busywork that frustrated everyone.\n\n## **What we are building**\n\nProbo acts like your compliance **team.** You tell us how you work, and Probo does the rest:\n\n1. Set the _right_ requirements - not overkill\n2. Handle docs, risks, controls, evidence\n3. Run the audit\n4. Keep everything up to date afterward\n\nFounders shouldn’t lose weeks to this stuff. **Even one day is too much.**\n\n## **What’s next**\n\nThree things:\n\n* **Open source**: Commoditize existing tools \n* **AI powered:** Agents to continuously monitor and maintain things up to date\n* **No third-party trust:** proofs are end-to-end verifiable\n\nIf you’re building and don’t want to lose weeks on compliance,\n\nIf this sounds like something you’ve wished existed,\n\n=> [founders@getprobo.com](mailto:founders@getprobo.com)\n\n=> [www.getprobo.com](http://www.getprobo.com)\n\n![uploaded image](/media/?type=post&id=90678&key=user_uploads/2229971/12941717-a6c6-4eae-b8eb-08a49e657b33)\n\n", "url": "https://www.ycombinator.com/launches/NaY-probo-open-source-compliance-platform", "votes": 144, "created_at": "2025-05-23T16:45:14.090Z" } ] }, { "id": 30535, "name": "Cotool", "slug": "cotool", "former_names": [ "Holtzman" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c50bede6546396b2ac97015979b5f1979c3c8f35.png", "website": "https://cotool.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Cotool builds AI agents and the infrastructure around them to help security teams detect threats, investigate alerts, hunt for attacks, and respond.\r\n\r\nOur agents work across a team's security tools and data. They investigate alerts, write and tune Python detections, and turn threat intelligence into hunts and new coverage. Teams can customize agents around their workflows, inspect the evidence, edit detection logic, and bring humans in when judgment or approval matters.\r\n\r\nUnderneath the agents, Cotool provides log storage and search built for their workloads, with access to data where it already lives. The goal is to give security teams more capacity to defend their companies as their environments and workloads grow.\r\n\r\nTeams at Ramp, EliseAI, ClickHouse, Legora, and many more use Cotool.", "one_liner": "Security operations optimized for agents.", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747110142, "tags": [ "SaaS", "Compliance", "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cotool", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/cotool.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/cotool-ai", "x_url": "https://x.com/cotoolai", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/c50bede6546396b2ac97015979b5f1979c3c8f35.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 2254937, "full_name": "Max Pollard", "title": "Founder/CEO", "founder_bio": "Building AI agents and infrastructure to help security teams detect threats, investigate alerts, and respond. Co-founder and CEO of Cotool. San Francisco native.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/mmpollard/", "x_url": "https://x.com/maxpollard415", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a3e5bb1453fdc94ab1ddc26b05036ed17d06b708.jpg" }, { "user_id": 2300356, "full_name": "Logan Carmody", "title": "Founder/CTO", "founder_bio": "building Cotool for security teams\n\nhmu if you're interested in chatting (opp|app)-sec, agents, trail running or cycling", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/logan-carmody/", "x_url": "https://x.com/endorseurgirl", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/05e1063a714ee172a41aecc6b0eb0b25ab451463.jpg" }, { "user_id": 2530428, "full_name": "Eddie Conk", "title": "Founder/CPO", "founder_bio": "Building Cotool to help security teams eliminate manual & repetitive tasks.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/eddieconk", "x_url": "https://x.com/eddieconkml", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4fae79b207cffda00fa166e58974e0c57e47421d.jpg" } ], "jobs": [ { "id": 116142, "title": "Founding Product Engineer", "url": "https://www.ycombinator.com/companies/cotool/jobs/s3Bwr2M-founding-product-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $300K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 116143, "title": "Machine Learning Engineer — Applied AI & Agents", "url": "https://www.ycombinator.com/companies/cotool/jobs/WWZZsd5-machine-learning-engineer-applied-ai-agents", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Machine learning", "salary_range": "$150K - $300K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 116240, "title": "Account Executive", "url": "https://www.ycombinator.com/companies/cotool/jobs/8quCd1f-account-executive", "location": "San Francisco, CA, US / Remote (New York, NY, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$200K - $300K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Cotool raises a $7.4M seed led by a16z for agentic security", "url": "https://www.axios.com/pro/enterprise-software-deals/2026/03/05/cybersecurity-cotool-seed-a16z-enterprise-tech", "date": "Mar 05, 2026" } ], "launches": [ { "id": 90398, "title": "Cotool - Composable AI Agents for every Security Team", "tagline": "Reduce time spent on investigations and detection engineering by 90%", "body": "Hey everyone 👋\n\nWe're [Eddie](https://www.linkedin.com/in/eddieconk/), [Logan](https://www.linkedin.com/in/logan-carmody/), and [Max](https://www.linkedin.com/in/mmpollard/) – co-founders of [Cotool](https://cotool.ai).\n\n### TL;DR\n\nCotool uses AI to automate repetitive security workflows so teams can focus on threat hunting instead of manual tasks. Our early users have used the copilot and agents to cut investigation time by 90% and increase detection quality & coverage. Book a demo to learn how you can do the same!\\\nhttps://www.youtube.com/watch?v=GnyZuJGQ5C0\n\n### ❌ The Problem\n\nSecurity is complex, but the problems facing most teams are not:\n\n1. Alert Fatigue: Hours lost to false positives, while genuine threats slip by unnoticed.\n2. Context Switching: Investigations requiring constant toggling across 5-10 disconnected tools just to assemble basic context.\n3. Documentation Overhead: Teams spend more time as technical writers than security practitioners, bogged down in endless reporting.\n\nBefore founding Cotool, we collaborated with cutting-edge security teams including OpenAI, Coinbase, Figma, and DoorDash, experiencing these universal challenges firsthand.\n\nAdvancements in AI now offer an opportunity to truly reimagine this model; by building intuitive, collaborative tools that complement, not replace, security professionals.\n\n### 👷 Our Solution\n\nCotool provides a suite of Agents and an AI co-pilot designed specifically for security teams, streamlining workflows and reducing frustration through:\n\n* Seamless Investigations 🔍: A true AI co-pilot that works alongside security engineers during alert triage, investigations, and detection engineering; automatically gathering relevant context from across tools so they can focus on reasoning, not tool-hopping.\n* No-code Agents 🤖: Turn successful debugging flows into reusable agents, then refine their behavior with natural language prompts and connect them to any tools Cotool has access to, with granular permission controls.\n* Automated Documentation 📊: Generating thorough, accurate reports in seconds, freeing up valuable security practitioner time.\n\n![uploaded image](/media/?type=post&id=90398&key=user_uploads/2254937/d59dd9d1-e396-4f77-8dce-283a5e31c4ee)\n\n### 👨‍💻 The Team\n\nWe have worked together for years and co-founded Cotool in 2025.\n\n[Max Pollard](https://www.linkedin.com/in/mmpollard/) (CEO) led the forward deployed engineering team at Material, working directly with security teams to understand their workflows and pain points. He built the team up from one to 8 engineers and embedded himself with the world's best security programs. Previously he worked as a SE at Okta. He holds a BA in Business and Computer Science from UC Berkeley.\n\n[Eddie Conk](https://www.linkedin.com/in/eddieconk/) (CPO + Head of AI) spent the last 3 years at Material Security, leading the ML Engineering function. He developed and trained AI models for detecting Phishing emails at scale for some of the largest and most secure companies in the world. Previously he was an ML Engineer at Apple, and holds a BA in Computer Science from UC Berkeley.\n\n[Logan Carmody](https://www.linkedin.com/in/logan-carmody/) (CTO) was an early engineer and the technical lead for the Phishing Protection product at Material Security. He helped develop the proprietary language and compiler which Material’s threat researchers used to detect Phishing messages and Workspace breaches. He previously was a Staff SWE at LinkedIn working in infrastructure, and holds a BS in Computer Science and Philosophy from Duke University.\n\nTogether, we've spent years embedded with some of the world's best security teams. We're passionate about helping security teams focus on what they do best – hunting threats, not handling workflows.", "url": "https://www.ycombinator.com/launches/NW2-cotool-composable-ai-agents-for-every-security-team", "votes": 142, "created_at": "2025-05-14T16:47:35.959Z" } ] }, { "id": 30558, "name": "BitPatrol", "slug": "bitpatrol", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a49803acbbc34d447ce47d0129bde3f02dd6b0ec.png", "website": "https://www.bitpatrol.io/", "all_locations": "New York City, NY, USA", "long_description": "Leverage cutting-edge AI to detect exposed credentials in real time and protect your organization from high-impact data breaches.", "one_liner": "AI-powered code security", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747422859, "tags": [ "DevSecOps", "Machine Learning", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/bitpatrol", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/bitpatrol.json", "year_founded": 2024, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/bitpatrol/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/BitPatrol", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a49803acbbc34d447ce47d0129bde3f02dd6b0ec.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Aaron Epstein", "url": "https://www.ycombinator.com/people/aaron-epstein" }, "founders": [ { "user_id": 2475147, "full_name": "Christopher Lambert", "title": "Founder/CEO", "founder_bio": "Building BitPatrol — AI-powered secret detection that actually works. ex-Stripe, Tesla, Lyft.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/~chris/", "x_url": "https://x.com/theriley106", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/91f2d4b7be340fcad47a8c214790d2be665e9e90.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 90617, "title": "🚨 BitPatrol – Secret Detection That Actually Works", "tagline": "AI-powered security tool that prevents secret leaks in source code.", "body": "**Vibe coding is flooding GitHub with leaked secrets.**\n\nAs writing code becomes increasingly accessible, it's easier than ever to accidentally expose API keys, database credentials, SSH private keys, and more.\n\n**TLDR:** BitPatrol detects secret leaks in your source code that traditional scanners miss, helping you prevent costly data breaches.\n\n🎥 **Launch Video:** [Watch here](https://youtu.be/2qu3B_bX7dw)\n\n---\n\n### **The Problem**\n\nSecret leaks are happening every day, impacting companies across every industry. Traditional scanning tools attempt to catch these leaks using rigid regex patterns and keyword matching.\n\n![uploaded image](/media/?type=post&id=90617&key=user_uploads/2475147/274a7869-42fd-41fc-86f4-668846d4d01e)\n\nHowever, these methods struggle with secrets that don't follow set patterns, allowing critical leaks like these to slip through undetected.\n\n![uploaded image](/media/?type=post&id=90617&key=user_uploads/2475147/e67f96a4-a636-461e-9434-93a92f23f1ff)\n\n### **Our Solution**\n\nUnlike legacy tools that rely on regular expressions, BitPatrol uses our proprietary machine learning model to detect secrets based on code context and developer intent – not just string patterns.\n\n![uploaded image](/media/?type=post&id=90617&key=user_uploads/2475147/243b128a-4438-4e39-bf3b-7c6c1b8e3d32)\n\nOnce our model flags a potential secret, we reference it against our dataset of billions of public commits, docker images, and open source packages. This helps us rapidly assess the secret's exposure frequency, drastically reducing false positives and solving the issue of alert fatigue.\n\nUsing our [GitHub App](https://github.com/apps/bitpatrol), you can trigger actions that occur when a secret is detected, including automated alerts and custom workflows to immediately respond and remediate when a secret is leaked.\n\n### **The Team**\n\nBitPatrol was founded by [Chris Lambert](https://www.linkedin.com/in/~chris), a former Stripe engineer who quickly rose to the top 2% globally on HackerOne after uncovering secret leaks at some of the world’s largest companies—many of which were actively using our competitor’s tools.\n\n### 🙏 **Ask: How You Can Help**\n\n* **Try BitPatrol:** Install our [GitHub App](https://github.com/apps/bitpatrol) and experience immediate, real-time secret detection.\n* **Connect with Us:** If you know a technical leader concerned about protecting their company from secret leaks in code, please connect them to [founders@bitpatrol.io](mailto:founders@bitpatrol.io)\n\n### 🔥 **The Deal**\n\nTo celebrate our launch, we’re offering:\n\n* **Free 2024 Company Secret Leak Audit**\n * External-only scan — requires no internal data access\n * Deep, high-coverage audit of your public code surface (commits, mobile apps, etc.)\n * Request an [audit here](https://docs.google.com/forms/d/e/1FAIpQLSfBwBwk9-tizbOo1y3Aj9aK6jXeX8QNKJIhwEFTp0OuvhcNAg/viewform?usp=header)\n* **Exclusive early-adopter pricing**\n * Just $20/dev/month for real-time secret scanning with our [GitHub App](https://github.com/apps/bitpatrol)\n\nDon’t let vibe coding turn into your next major breach—secure your code with BitPatrol today.\n\n👉 [Get started at BitPatrol.io](https://bitpatrol.io/) or reach out directly: [founders@bitpatrol.io](mailto:founders@bitpatrol.io)", "url": "https://www.ycombinator.com/launches/NZZ-bitpatrol-secret-detection-that-actually-works", "votes": 62, "created_at": "2025-05-21T20:55:32.897Z" } ] }, { "id": 30626, "name": "ContextFort", "slug": "contextfort", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6087e1f0e34063f0cc8f7a39962c8cbe63788444.png", "website": "https://contextfort.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "ContextFort gives security teams visibility and controls for AI browser agents.\r\nIt’s a Chrome extension that:\r\nDetects when an AI agent takes control of the browser\r\nRecords every action during the session (pages visited, clicks, text entry) \r\nProvides controls to prevent risky actions and cross-site data leakage", "one_liner": "Visibility and Controls for Browser Agents", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1753951898, "tags": [ "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/contextfort", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2025/contextfort.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/6087e1f0e34063f0cc8f7a39962c8cbe63788444.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Ankit Gupta", "url": "https://www.ycombinator.com/people/ankit-gupta" }, "founders": [ { "user_id": 1596702, "full_name": "Ashwin Ramachandran", "title": "Founder/CEO", "founder_bio": "MS CS @ UC San Diego | CS @ IIT Bombay\nAutomating drawing reviews for construction contractors", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ashwinram2002/", "x_url": "https://x.com/ashwinram2002", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/45afc911c6470bb22f6e4e3f2a5baec670169b32.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 92604, "title": "ContextFort - Copilot for Construction Drawing Review", "tagline": "Automating Drawing Reviews for Construction Contractors", "body": "# **tl;dr**\n\nContextFort automatically finds missing dimensions and overlay mismatches across your architectural and structural drawings and drafts Requests For Information (RFIs). Watch our [demo](https://www.youtube.com/watch?v=2C4Gfe4UoJA) here.\n\n# **The Problem**\n\nContractors plan their construction using drawings prepared by the design team (Architects, Structural Engineers). But before building, they need to review them for errors and ask for clarification by submitting a **Request For Information (RFI)**.\n\nToday, this review is done by **manual pageturn and eyeballing overlays** which takes up **weeks**. And, this has to be done every time a modified version is released.\n\nIf an inconsistency goes unidentified or an RFI is not sent early, the project gets **delayed** or ends up needing **costly rework** with change-orders having uncertain payments.\n\n**The problem goes beyond this.** Corrections following these RFIs affect multiple trades but they are never notified; for example, a concrete contractor moving a column by 3 inches can affect HVAC and elevator contractors. This poor cross-trade visibility has been the cause for a majority of reworks.\n\n# **Our Solution**\n\nToday, ContextFort saves contractors **2-3 weeks/project** by using AI to:\n\n1. Identify missing and inconsistent dimensions across architectural and structural drawings\n2. Find overlay mismatches between different versions.\n3. Ensure RFIs being generated are not already in the construction documents.\n4. To draft an RFI following the format laid out in the spec sheets.\n\n![uploaded image](/media/?type=post&id=92604&key=user_uploads/1596702/7b5f2e9e-d0d6-4ad6-8bd2-2e09171ba7b6)\n\nOur vision is to turn every drawing set into a **living, shared model:**\n\n1. One that tests itself with rules that capture every trade clearances, codes, scheduling constraints and run automatically on every edit\n2. Only the teams affected by a change get pinged– no more hunting through 200 sheets to see what moved\n3. Each contractor views a filtered lens of the model that shows precisely what they must build and how other trades’ moves impact them\n\n**Our mission is to turn RFIs into a rare exception and have projects finish first-time-right.**\n\n# **Our Ask**\n\nWe would love for you to:\n\n1. Intro us to builders, general and sub contractors\n2. Email us with thoughts and ideas to [ashwin@contextfort.ai](mailto:ashwin@contextfort.ai)\n3. Upload your drawings at [contextfort.ai](http://contextfort.ai)", "url": "https://www.ycombinator.com/launches/O5c-contextfort-copilot-for-construction-drawing-review", "votes": 22, "created_at": "2025-08-03T19:18:44.328Z" } ] }, { "id": 30651, "name": "Alter", "slug": "alter", "former_names": [ "Alter AI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a30946452aaca1a7c8b4b8fefafd9807f194243.png", "website": "https://alterauth.com", "all_locations": "New York City, NY, USA", "long_description": "Alter is a zero-trust identity and access control platform purpose-built for AI agents. It wraps every tool call in strong authentication, fine-grained authorization, and real-time guardrails, so agents can move fast without breaking things.\r\n\r\nEach request is verified at the parameter level, authorized against granular policies, executed with least-privilege access, and fully audited in real time. Unsafe actions, whether it’s a rogue DROP TABLE or a payment above policy limits, are blocked before they touch production. Behind the scenes, Alter manages credentials, issuing ephemeral, scope-narrowed access for every interaction, then rotating or expiring it in seconds. The result: no long-lived secrets, no blind spots, and no surprises in audit.\r\n\r\nWith Alter, teams can move fast on AI agent initiatives while staying fully compliant with SOC 2, HIPAA, GDPR, and internal security standards. A CISO-ready dashboard delivers real-time visibility, detailed audit logs, and compliance-ready controls, removing silos, eliminating excessive permissions, and providing complete oversight of every agent workflow.", "one_liner": "Privileged Access Management for AI Agents", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1752476002, "tags": [ "AIOps", "Developer Tools", "DevSecOps", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/alter", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2025/alter.json", "year_founded": 2025, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/alterai-dev", "x_url": "https://x.com/alter_ai_labs", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a30946452aaca1a7c8b4b8fefafd9807f194243.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jon Xu", "url": "https://www.ycombinator.com/people/jon-xu" }, "founders": [ { "user_id": 736424, "full_name": "Srikar Dandamuraju", "title": "Founder/CEO", "founder_bio": "Co-Founder & CEO of Alter (YC S25), a zero-trust identity and access control platform for AI agents. Former Platform Lead at Goldman Sachs, where I scaled GSAM’s post-trade infrastructure from single to multi-cluster and helped launch the GM Card. Before that, software engineer at Addepar and Clear Street.\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/srikar-d-473390136", "x_url": "https://x.com/realsreeks", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cab46acc391807e07306cfd19067daaf2b55c346.jpg" }, { "user_id": 1363069, "full_name": "Kevan Dodhia", "title": "Founder/CTO", "founder_bio": "Co-founder and CTO of Alter (YC S25), a zero-trust identity and access control platform for AI agents. Previously technical co-founder of Compute.ai, where we built a compute engine 5x faster than EMR Spark and sold into highly regulated enterprises like LSEG. Compute.ai was acquired by Terizza in 2025.", "is_active": true, "linkedin_url": "https://linkedin.com/in/kevan-dodhia-760183129", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ab81ff957341010eea7e1ee52d81382311c83b1c.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 93044, "title": "Alter – Identity and Access Control Platform To Secure Agents", "tagline": "Build secure, compliant agents without the fear of breaking production", "body": "### **TL;DR**\n\nAlter sits in the middle of every AI agent interaction, verifying identity and applying fine-grained RBAC & ABAC to check every parameter against policy. It instantly rejects dangerous actions and provides clear audit trails logging every request/response and decision.\\\n\\\nInterested? Learn more and request beta access at [alterai.dev](http://alterai.dev)\n\nDon’t want to read? Here is a video explaining what we do in a nutshell\n\n[Identity And Access Control Platform To Secure Agents | Alter (YC S25)](https://www.youtube.com/watch?v=UX0ACmMXpMg)\n\n**The Problem**\n\n**Dangerous:** Long-lived credentials and over-scoped service accounts mean a single leak can give an agent the keys to production letting it run destructive commands, exfiltrate sensitive data, or trigger costly transactions.\\\n**Opaque:** Scattered logs and siloed security make it impossible to trace “which agent did what, with which parameters” when something goes wrong, leaving teams blind in audits or incident response.\\\n**Slow:** Security reviews drag on for weeks because least-privilege and policy checks are hard to implement at scale, delaying projects and eroding velocity.\\\n**Overexposed:** Agents often get blanket root access, with no guardrails to stop prompt-injection or malicious payload swaps, so one bad input can become a catastrophic action.\\\n**The result:** enterprises face agents that _can_ and _do_ take unsafe actions in production, forcing teams to choose between unacceptable risk or shelving AI initiatives entirely.\\\n**\\\nOur Solution**\n\nAlter is the safest way to run AI agents in production without giving them blanket credentials or risking compliance breaches. From one central control layer, organizations can:\n\n* Host or connect to all their tools. We support MCP and Native tools (A2A coming soon)\n* Approve or deny any agent request in real time, with identity verification baked into every call.\n* Apply parameter-level RBAC & ABAC so dangerous actions like drop table commands in prod, during a freeze never reach production.\n* Instantly grant seconds-lived, scope-narrowed tokens so agents get only the access they need, only for that task.\n* Remove the need for long-lived API keys entirely, eliminating one of the biggest security liabilities.\n* See exactly what every agent did, when, and with what parameters, all in one CISO-ready dashboard.\n* Pass SOC 2, HIPAA, and GDPR audits without slowing down because compliance controls run automatically in the background.\n* Scale to any number of agents and tools without creating security silos or over-permissive access.\n\n### **The Team**\n\nWe are Srikar and Kevan.\\\n\\\nWe previously built enterprise-grade infrastructure at ComputeAI and Goldman Sachs, powering mission-critical systems for the London Stock Exchange and the Apple Card launch. Now we’re using that experience to make AI agents safe for production by giving them only the access they need and only for as long as they need it.\\\n**\\\nOur Ask**\n\nWe’re looking to connect with:\n\n* Engineering and security leaders running AI agents in production\n* Enterprises in regulated industries (finance, healthcare, government) with strict compliance requirements\n* Startups building AI-first products that need zero-trust access controls\n* Infosec teams looking to eliminate long-lived credentials and enforce least-privilege by default\n\nAs a bonus, we have also partnered with former OpenAI cybersecurity experts to provide you with ongoing red teaming, catching prompt-injection, data exfiltration, and other exploits before attackers can.\n\nIf you or someone you know is interested, please reach out to us at [**founders@alterai.dev**](mailto:founders@alterai.dev) or book a time to chat.", "url": "https://www.ycombinator.com/launches/OCi-alter-identity-and-access-control-platform-to-secure-agents", "votes": 30, "created_at": "2025-08-15T19:42:34.047Z" } ] }, { "id": 30696, "name": "GhostEye", "slug": "ghosteye", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5e189bef77c95ad81a23c2a379e641dd9f19e141.png", "website": "https://ghosteye.ai", "all_locations": "New York City, NY, USA", "long_description": "We emulate the attacks real adversaries run today: help-desk vishing, deepfaked executives, MFA fatigue, and the payloads that follow. We run them against your people and the controls around them to reveal what is actually exploitable, not what looks compliant. Then we close the gap, retest until the fix holds, and give your leadership the evidence that risk actually went down. From initial access to remediation.", "one_liner": "Your always-on red team.", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1753230986, "tags": [ "B2B", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/ghosteye", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2025/ghosteye.json", "year_founded": 2025, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/ghosteye-ai/", "x_url": "https://x.com/GhostEyeee", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/ghosteye", "github_url": "https://github.com/ghosteye-ai", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5e189bef77c95ad81a23c2a379e641dd9f19e141.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Andrew Miklas", "url": "https://www.ycombinator.com/people/andrew-miklas" }, "founders": [ { "user_id": 2000500, "full_name": "Mohammad Eshan", "title": "Founder/CEO", "founder_bio": "CEO of GhostEye. Former BlackRock Red Team Lead & Offensive Cyber Operations at MITRE", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/moheshan/", "x_url": "https://x.com/eshannnnnnnn", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d0e178742b8ef2e867b88e7c60c6fda46fd68c05.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 30875, "name": "Veria Labs", "slug": "veria-labs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4a840ecd92ea1ebab3e7fa406ce9389683fe9208.png", "website": "https://verialabs.com", "all_locations": "San Francisco, CA, USA", "long_description": "Veria Labs is developing AI agents that hack better than the best human hackers. Founded by members of the #1 US competitive hacking team, we've already found critical bugs in AI tools, operating systems, fintech and billion dollar crypto exchanges. \r\n\r\nNow we're scaling that expertise through AI-native security tooling that operates faster than human researchers while finding deeper, more complex vulnerabilities that traditional tools miss.", "one_liner": "Continuous AI pentesting that finds and fixes vulnerabilities", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1758644249, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/veria-labs", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2025/veria-labs.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/verialabs/", "x_url": "https://twitter.com/verialabs", "fb_url": null, "cb_url": null, "github_url": "https://github.com/verialabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4a840ecd92ea1ebab3e7fa406ce9389683fe9208.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Tom Blomfield", "url": "https://www.ycombinator.com/people/tom-blomfield" }, "founders": [ { "user_id": 2964558, "full_name": "Cayden Liao", "title": "Founder", "founder_bio": "I've previously done work in the Web3 security space writing fuzzers for crypto and zero knowledge protocols. NCAA varsity swimmer and part of the #1 CTF (competitive hacking) team in the US. Prevented the largest hack in crypto history $94B.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/cayden-liao-6b018a272/", "x_url": "https://x.com/Cayden_Liao", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e0738bc3df42b0c5f6d82f610337031d0e8e310b.jpg" }, { "user_id": 948094, "full_name": "Jayden Sarveshkumar", "title": "Founder", "founder_bio": "working on the future of security @ Veria Labs. web hacking @ .;,;. (#1 US competitive hacking team). ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jayden-s/", "x_url": "https://x.com/0jayden_", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f58ac057077848126e2af32cae2e0ade1d46e13c.jpg" }, { "user_id": 2411026, "full_name": "Stephen Xu", "title": "Founder", "founder_bio": "CEO & Co-Founder @ Veria Labs\n\nPreviously doing Offensive Security @ TikTok, and play on the #1 CTF (competitive hacking) team in the US. Also used to do computational physics research at some point.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/stuxf", "x_url": "https://x.com/stuxfdev", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0250381cdafcf8e7303136fa3900d8298e020161.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 94260, "title": "Veria Labs: AI agents that pentest your code continuously", "tagline": "Automated penetration testing for modern development teams", "body": "👋Hi all, we’re Stephen, Cayden and Jayden from [Veria Labs](https://verialabs.com)!\n\n## TL;DR\n\n* Most companies pentest only 1-2x per year, but high-performing teams deploy multiple times per day \n* We're building AI agents that continuously find vulnerabilities in your application\n* **Our ask:** If you're at a fintech, healthcare, or crypto company that wants to be secure while moving fast, let’s talk: \n\n---\n\n## The Problem\n\nYou ship code constantly. You test for security once a year, if at all.\n\nThis isn't a startup problem. It's structural. PCI DSS mandates annual pentests. HIPAA requires regular security assessments. Crypto projects get audited before launch. But after that initial test, your codebase evolves, you add features, you refactor, and there's no continuous security validation.\n\nTraditional pentesting is **fundamentally broken** for modern development:\n\n**It's too slow.** Results take weeks to deliver. By the time you get the report, your codebase has changed 50+ times.\n\n**It's too expensive.** $15,000-$30,000+ per engagement. You can't afford to test continuously at these prices, but you also can't afford _not_ to be secure.\n\n**It has terrible coverage.** Pentesters scope to 5-10 application features because that's all they can audit in two weeks. The rest of your codebase gets ignored. Your background jobs, admin panels, internal APIs are all potential attack vectors that never get looked at.\n\n**It's too shallow.** Even within their limited scope, human pentesters are constrained by time. They get 5-10 days, bill $250-300/hour, and move on to the next client. They find the obvious vulnerabilities: SQL injection, XSS, broken auth. But complex, multi-step exploits that require deep exploration of your business logic get missed because there's simply not enough time.\n\nMeanwhile, 1 in 5 companies don't test their software for security vulnerabilities at all.\n\n## Our Solution\n\nWe're building AI agents that run continuously on your codebase and send you actionable results every Monday morning.\n\n**Why we're different from traditional pentesting:**\n\nOur agents aren't constrained by human hours or budgets. We can test exhaustively: every code path, every edge case, every possible attack chain. We're not just faster and cheaper. We find more bugs.\n\n**Why we're different from SAST tools (Semgrep, Snyk):**\n\nStatic analysis tools flag potential issues but can't exploit them. Our LLM-based agents:\n\n* Actually exploit vulnerabilities to prove they're real (no false positives)\n* Understand and adapts to your business logic and data flows\n* Learn your codebase architecture and conventions, which means dramatically fewer false positives\n* Chain together low-severity findings into high-impact exploits\n\n## About Us\n\nWe're members of the [#1 competitive hacking (CTF) team](https://ctf.gg/contests) in the United States.\n\nBetween us, we've found critical vulnerabilities in AI tools, operating systems, fintech apps, and billion-dollar crypto exchanges. The future of security testing is automated, and we're building it.\n\n## What We’re Looking For\n\nIf you:\n\n* Deploy code daily but test for security sporadically (or never)\n* Are spending $30K+ per year on pentests that are outdated within weeks\n* Need continuous security without hiring an entire red team\n* Want to find complex vulnerabilities before attackers do\n\nLet's talk: \n\nWe're especially interested in working with **fintech, healthcare, and crypto companies** (where the stakes are highest), but if you're facing similar challenges in other industries, we'd love to hear from you too.\n\n![uploaded image](/media/?type=post&id=94260&key=user_uploads/2411026/8021be6a-59f2-4d9c-9c43-ec32d957299e)\n\n", "url": "https://www.ycombinator.com/launches/OWK-veria-labs-ai-agents-that-pentest-your-code-continuously", "votes": 16, "created_at": "2025-10-01T13:55:13.126Z" } ] }, { "id": 30896, "name": "Multifactor", "slug": "multifactor", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b22602dcf84ece0389bd7a801525177573cf75ba.png", "website": "https://multifactor.com", "all_locations": "San Francisco, CA, USA", "long_description": "The agentic era is here, but its foundation is dangerously insecure. A growing number of high-profile \"AI agent gone rogue\" security incidents make headlines each week.\r\n\r\nAs enterprise adoption of agentic software has far outpaced the development of applicable cybersecurity solutions, CISOs have loudly voiced a growing need for verifiable, fine-grained security controls on complex multi-agent systems. That's why we built Multifactor.\r\n\r\nMultifactor offers best-in-class authentication, authorization, and auditing technologies for agentic systems, allowing users to securely and revocably share online accounts with agents while maintaining fine-grained permissions and a detailed event history. We are doing for AI security what Cloudflare did for web security, Okta did for identity security, and Wiz did for cloud security: defining the category.\r\n\r\nA world-class \"account manager\" that allows agents to securely use online accounts on your behalf is just the start—our early enterprise partners include companies using AI agents to manage $7.5+ billion manufacturing supply chains, where the consequences for lapses in security are severe. Our patented AI security technology seamlessly integrates with existing agentic software to thwart attacks like prompt injection, so CISOs and end users alike can breathe a sigh of relief, without slowing the pace of AI adoption.", "one_liner": "Zero-trust authentication, authorization, and auditing for AI agents", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1758318085, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/multifactor", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2025/multifactor.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/multifactorcom", "x_url": "https://x.com/multifactorcom", "fb_url": "https://www.facebook.com/multifactorinc", "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b22602dcf84ece0389bd7a801525177573cf75ba.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 2875344, "full_name": "Vivek Nair", "title": "Founder/CEO", "founder_bio": "Former CIA agent and Technical Lead for elite cyber units of the CIA & DOD. Youngest ever Ph.D. in Computer Science from UC Berkeley. NSF, NPSC, and Hertz fellow. Winner of the CIA's Exceptional Performance Award for extraordinary contributions to US national security.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/nair/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cb961cfd0982ca0cd0ed93c6f045e1cb3b432e00.jpg" } ], "jobs": [], "news": [ { "title": "A.I. Deal Making Is Getting Faster - The New York Times", "url": "https://www.nytimes.com/2025/12/04/technology/ai-deal-making-faster.html", "date": "Dec 04, 2025" }, { "title": "The Top Startups To Watch From Y Combinator’s Fall 2025 Batch", "url": "https://www.forbes.com/sites/dariashunina/2025/11/13/the-top-startups-to-watch-from-y-combinators-fall-2025-batch", "date": "Nov 13, 2025" }, { "title": "Hertz Foundation Entrepreneurship Award Goes to Vivek Nair for AI Cybersecurity Startup - Hertz Foundation", "url": "https://www.hertzfoundation.org/news/hertz-foundation-entrepreneurship-award-goes-to-vivek-nair-for-ai-cybersecurity-startup/", "date": "Sep 19, 2025" } ], "launches": [ { "id": 95453, "title": "Multifactor: A password manager built for secure sharing with humans & AI", "tagline": "Multifactor lets you share online accounts securely without exposing passwords, just by sending a link. Import from LastPass, Apple, or Google with one click, then let humans and AI agents use your accounts on your behalf.", "body": "### Explainer Video\n\nhttps://www.youtube.com/watch?v=lug9O3BK7ok\n\nMultifactor is building the future of zero-trust authentication, authorization, and auditing for AI agents.\n\nToday, we’re excited to launch the best new way to securely share online accounts with humans and AI agents alike. Multifactor turns any online account into a “checkpoint link,” making secure and revocable account sharing as easy as sharing a Google doc.\n\n### FAQs\n\n**🧑‍💻 Who are we?**\\\nVivek Nair, co-founder & CEO, is a Ph.D. computer scientist and former CIA officer. Colin Roberts, co-founder & CTO, is a Ph.D. mathematician and former NASA scientist. We’re both passionate about usable security, with over a decade of cybersecurity experience.\n\n**🤔 What can I use it for?**\\\nOne of our investors uses the app to share email and calendar access with a rotating team of personal assistants without worrying about unauthorized edits.\\\nOur friend who is a financial advisor uses Multifactor to manage their clients’ brokerage accounts without needing their passwords.\\\nOur colleague uses Multifactor to share Instacart and Netflix accounts with her roommates while being able to easily add and remove people.\n\n**⏳ Why now?**\\\nWith increasing adoption of passkeys, biometrics, and MFA, accounts are getting more secure but harder than ever to share. Sharing conventional accounts with non-human actors (like AI agents) is also an emerging need that current solutions fail to address.\n\n**🔜 What’s next?**\\\nMulti, our AI assistant specializing in secure online account use, is right around the corner, with API access for developers coming shortly thereafter. The version you’re using today will always be free, but an enterprise plan with advanced features is coming soon.\n\nOur world-class \"account manager\" that allows agents to securely use online accounts on your behalf is just the start—our patented AI security technology seamlessly integrates with existing agentic software to thwart attacks like prompt injection, so CISOs and end users alike can breathe a sigh of relief, without slowing the pace of AI adoption.\n\n### Get Started\n\n* On the Web: https://app.multifactor.com\n* On iOS: https://apps.apple.com/us/app/multifactor-account-manager/id6753222030?platform=iphone\n* On Android: [https://play.google.com/store/apps/details?id=com.multifactor.app](https://play.google.com/store/apps/details?id=com.multifactor.app&ref=producthunt)\n* On Mac: https://apps.apple.com/us/app/multifactor-account-manager/id6753222030?platform=mac\n* On Windows: https://apps.microsoft.com/detail/9njxfnh5xb8d?hl=en-US&gl=US\n* On Chrome: https://chromewebstore.google.com/detail/multifactor/kbmlcdbnkedhffonmapkcglkllgdelhm\n\n### Demo Videos\n\nSharing accounts just by sending a link, **without** ever actually sharing the passwords. Can your password manager do that? https://www.youtube.com/watch?v=Vr_Ub0pBi6M\n\nInstantly revoke shared accounts, without having to change your passwords. Can your password manager do that? https://www.youtube.com/watch?v=TmDJX29SIU0\n\nOne-click logins to any site, on any device. Can your password manager do that? https://www.youtube.com/watch?v=r9NgEfFDy8A\n\nSecurely sharing any online account with AI agents. Can your password manager do that? https://www.youtube.com/watch?v=d3kRAlZei00\n\n### Product Images\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/2e4495eb-cc9b-4892-b77f-e02a76ea5f24)\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/541e921d-397a-47fa-8761-e444494d56db)\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/45648ce2-232c-4816-8c89-c75fb112fd57)\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/9ae9040b-e6bc-4b78-b262-d0e8b397fb5a)\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/6110c113-ae56-484f-b5a0-af47bf54f92d)\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/b7a883f3-b8f5-4ed2-bbd5-fc76fc6d3a5f)\n\n![uploaded image](/media/?type=post&id=95453&key=user_uploads/2875344/4c57abc1-748f-4ed6-a296-23223420f78a)\n\n", "url": "https://www.ycombinator.com/launches/OpZ-multifactor-a-password-manager-built-for-secure-sharing-with-humans-ai", "votes": 22, "created_at": "2025-11-12T18:52:02.240Z" } ] }, { "id": 30903, "name": "Kestrel AI", "slug": "kestrel-ai", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a17c93b508bc423bb59667db4befdfd07cfd6f68.png", "website": "https://usekestrel.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "Kestrel is the AI automation layer for platform engineering teams.\r\n\r\nPlatform teams use Kestrel to automate incident response, cloud provisioning, CI/CD, security, and developer requests across their stack.\r\n\r\nKestrel turns natural-language prompts into deterministic, production-ready workflows with 40+ integrations, 200+ pre-built actions, and support for custom HTTP and webhook actions.\r\n\r\nDeveloper-first, with a CLI, Python SDK, and MCP server to manage workflows from where platform teams already work.", "one_liner": "AI Agents for Platform Engineering", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1761187283, "tags": [ "AIOps", "Developer Tools", "DevOps", "Infrastructure" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/kestrel-ai", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2025/kestrel-ai.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/kestrel-ai-security/", "x_url": "https://x.com/kestrel__ai", "fb_url": null, "cb_url": null, "github_url": "https://github.com/KestrelAI/Kestrel-Operator", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a17c93b508bc423bb59667db4befdfd07cfd6f68.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/1567ed15193a6530e6a8ca6468ddada7553e0aa0.png" ], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 2950276, "full_name": "Raman Varma", "title": "Founder/CEO", "founder_bio": "Co-founder & CEO. Prev: CS @ Berkeley; ML @ Sky Computing / BAIR labs, Square, Coursera; SWE @ Illumio.\nBuilding Kestrel – AI agents for platform engineering teams.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ramanvarma/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b2b5f7e9806eb261a5342845ec47b959b65e467e.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 104092, "title": "Kestrel - AI Agents for Platform Engineering", "tagline": "Automate incident response, CI/CD, developer requests, security, and more with AI agents that build deterministic workflows across your platform stack.", "body": "TL;DR: Kestrel turns natural-language prompts into deterministic, production-ready workflows that automate incident response, cloud provisioning, CI/CD, security, and developer requests. It supports 30+ integrations and is developer-first, with a CLI, Python SDK, and MCP server so you can manage workflows from where you (and your coding agents) already work. Build your first workflow in <5 mins with $1,000 in usage credits at [usekestrel.ai](http://usekestrel.ai).\n\n\n\n**The Problem**\n\nCoding agents made every developer faster. But the platform team did not get faster with them.\n\nDevelopers now ship with Cursor/Claude/Codex and generate infrastructure, deployments, and provisioning requests at a rate no platform team was staffed for.\n\nAt illumio I once waited more than three weeks just to get Kafka clusters provisioned for a new service I was building. And provisioning is only part of it. The platform team is also on the hook for incident response when production breaks, repairing the CI/CD glue that ties the deployment pipeline together, platform security, and every \"can you just\" developer request in Slack.\n\nMost platform teams pick one of two bad options. They hand developers (and their agents) direct access to infra, CI/CD, and cloud accounts, and hope nothing breaks. Or they gatekeep and become the bottleneck every developer has to wait on.\n\nBuilding a platform that developers actually like has been a luxury only the largest engineering orgs could staff, and an understaffed platform effort usually does more harm than good.\n\n**The Solution**\n\nSee how it works: \n\nPlatform teams use Kestrel to automate incident response, cloud provisioning, CI/CD, security, developer requests, and more across their stack. You describe what you want to automate in plain English, and the Workflow Agent builds the whole thing. It draws from 140+ pre-built actions across 30+ integrations, plus custom HTTP APIs and webhooks for anything that isn't built in yet.\n\nOnce a workflow is configured it runs deterministically with no LLM deciding what to do at runtime.\n\nYou can define workflows that handle self-service developer requests without handing over the keys; scope who can trigger each workflow; fence it to specific clusters, cloud accounts, or repos; and require approval before anything touches production. Developers get a golden path without free rein, and the platform team keeps the guardrails without gatekeeping.\n\nKestrel analyzes your connected integrations and suggests ready-to-deploy workflows, and the Workflow Assistant turns your existing runbooks and scripts into production-ready automations, so you don't have to start from scratch: \n\nEvery workflow you build in Kestrel is fully observable, with a dashboard that shows what's running, what's waiting on approval, and what failed; real-time step-level logs; and a failure diagnosis agent that fixes failed workflows for you: \n\nThe [Kestrel CLI](https://docs.usekestrel.ai/workflows/cli), [Python SDK](https://docs.usekestrel.ai/workflows/sdk), and [MCP server](https://docs.usekestrel.ai/workflows/mcp) let you and your coding agents build and manage workflows from the terminal and application code.\n\n**How It Works**\n\nFirst, connect your platform stack. Kestrel supports 30+ integrations across infrastructure, PaaS, AI compute, observability, on-call, networking, databases, CI/CD, and IaC:\n\n![uploaded image](/media/?type=post&id=104092&key=user_uploads/2950276/c11a044c-2df5-4c23-8035-5c23b99ad45c)\n\nThen, open the Workflow Agent and describe what you want to automate. Here are a few examples:\n\n* “When a PagerDuty alert fires for the production Kubernetes cluster, run root cause analysis, post the findings to #incidents in Slack, create a P1 Jira ticket, and apply the recommended fix after approval in Kestrel.”\n* “When a developer submits a cloud provisioning request in Slack, route it to the team lead for approval, provision the AWS resources with Terraform in the infra repo, and notify the developer once the pull request is merged.”\n\nEverything you do in the dashboard is available via the CLI/SDK/MCP. E.g. you can generate a workflow, activate it, and clear an approval from the terminal:\n\n![uploaded image](/media/?type=post&id=104092&key=user_uploads/2950276/e5c068f1-98e7-4e35-9e83-407f2d4807a6)\n\n**Ask**\n\nIf you're a platform engineer or eng leader tired of manually responding to developer requests, incidents, or CI/CD failures, you can try it yourself today with a 14-day free trial and $1,000 in usage credits. Use suggested workflows and the Workflow Assistant to build your first platform automations in minutes.\n\nIf you want to learn more about what onboarding looks like or dedicated infrastructure/on-prem deployment options, [book a demo](https://calendly.com/hello-usekestrel/30min) and I'll walk you through it.\n\n[Try Kestrel today](https://platform.usekestrel.ai/register)", "url": "https://www.ycombinator.com/launches/R4u-kestrel-ai-agents-for-platform-engineering", "votes": 20, "created_at": "2026-07-01T23:54:04.445Z" }, { "id": 95330, "title": "Kestrel: AI Copilot for Kubernetes Ops & Security", "tagline": "Run Kubernetes securely and fix incidents in seconds, not hours.", "body": "Hey everyone, we’re [Raman](https://www.linkedin.com/in/ramanvarma/) and [Evan](https://www.linkedin.com/in/evanchopra/) from Kestrel 👋\\\n\\\n**TL;DR:** Kestrel helps teams using Kubernetes detect, investigate, and fix issues without manual firefighting. It monitors cluster health and security 24/7, finds root causes, and generates ready-to-apply YAML fixes - so incidents get resolved before you even reach for your laptop.\\\n\\\nLaunch video: https://youtu.be/HA2YziEBMVw\n\n**Ask:** If your team runs Kubernetes, we’d love to hear from you! You can reach out to us at [raman@usekestrel.ai](mailto:raman@usekestrel.ai) or [book a demo here](https://calendly.com/raman-usekestrel/demo). Or get started in minutes with a [14-day trial](https://platform.usekestrel.ai/register)!\n\n# **The** **Problem**\n\nRunning Kubernetes at scale is **chaos**.\\\n\\\nAs founding engineers on the Kubernetes Security team at Illumio, we saw both startups and large **organizations struggle with its complexity and scale**. For example, network policies are so tricky that many teams default to allowing everything, and even basic ops tasks like debugging failed rollouts mean spending hours digging through logs and events just to find where things went wrong.\\\n\\\nOver time, this complexity compounds and clusters begin to drift - configs diverge, policies break, and “temporary” workarounds become production. And when something goes wrong, **engineers are buried under alerts and reports** from disconnected tools, trying to debug blind at 3 a.m.\n\n# **Our Solution**\n\nKestrel is redefining how teams manage Kubernetes with the **first agentic platform that unifies ops and security**. It replaces manual triage with autonomous investigations and human-in-the-loop remediations - so issues that used to take hours to debug can be understood and fixed in seconds.\n\n💬 **AI Chat Assistant**: Investigate **any Kubernetes issue** across all of your clusters in plain English - skip the complex queries and context switching, and get answers with ready-to-apply YAML fixes from a single point of command.\n\n![uploaded image](/media/?type=post&id=95330&key=user_uploads/2950276/4cabf3fd-7053-4e7b-8562-4feaa5f72df4)\n\n🚨 **Incident Response**: Kestrel continuously monitors your clusters to detect incidents, trace root causes, and generate **YAML fixes that can be applied with a single click**. It's like having a dedicated on-call SRE team - without the burnout or headcount.\n\n![uploaded image](/media/?type=post&id=95330&key=user_uploads/2950276/218cbd5b-4100-4341-a02b-4b8ff04d5a26)\n\n🌐 **Topology Map**: Visualize your Kubernetes infra with classified intra-cluster, cross-cluster, and external traffic overlaid in real time.\n\n![uploaded image](/media/?type=post&id=95330&key=user_uploads/2950276/280f095a-4030-46bf-824e-1f0d421cf761)\n\n⚠️ **Risk Assessments**: Launch a swarm of specialized AI agents that discover vulnerabilities and provide **exact remediation steps** across network security, RBAC, privilege escalation, container image security and more. Validate fixes with a single click.\n\n![uploaded image](/media/?type=post&id=95330&key=user_uploads/2950276/53b80638-b9b4-4986-be1d-7a5ed6db5571)\n\n# **The Team**\n\n[Raman](https://www.linkedin.com/in/ramanvarma/) and [Evan](https://www.linkedin.com/in/evanchopra/) were founding engineers on Illumio’s Kubernetes team, where they built distributed systems to secure clusters for Fortune 500 companies.\\\n\\\nRaman previously worked on ML systems research at Sky Lab and BAIR. Evan was a security researcher during his Master’s in Computer Science, focusing on the Signal Protocol.\n\n![uploaded image](/media/?type=post&id=95330&key=user_uploads/2950276/7eeab8b1-9e35-4d4a-bac4-41b196c89fc7)\n\n", "url": "https://www.ycombinator.com/launches/Ona-kestrel-ai-copilot-for-kubernetes-ops-security", "votes": 37, "created_at": "2025-11-09T16:01:39.639Z" } ] }, { "id": 30906, "name": "Agentic Fabriq", "slug": "agentic-fabriq", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9a5cc9740ffbab442e3f13d623875ee650093eac.png", "website": "https://www.agenticfabriq.com", "all_locations": "San Francisco, CA, USA", "long_description": "Agentic Fabriq helps companies securely manage what AI agents can access and do across business tools, data, and teams. We give each agent an identity, scoped permissions, approval flows, and audit logs, so employees and customer-facing workflows can use agents without relying on shared API keys, overbroad service accounts, or one-off integrations.", "one_liner": "The control plane for AI agents.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1762294029, "tags": [ "B2B", "Identity", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/agentic-fabriq", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2026/agentic-fabriq.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/agentic-fabriq/", "x_url": "https://x.com/agenticfabriq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/agentic-fabriq", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9a5cc9740ffbab442e3f13d623875ee650093eac.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 2840984, "full_name": "Paulina Xu", "title": "Founder/CEO", "founder_bio": "AI + Physics @ MIT, working on Agentic Fabriq (security middleware for all agentic communication)", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/paulina-xu-5bba0821b?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=ios_app", "x_url": "https://x.com/paulinazhxu", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c121ed2a60fa303b7cd17e1f0dc5f1159b30b9e4.jpg" }, { "user_id": 2459873, "full_name": "Matthew Xu", "title": "Founder", "founder_bio": "Dropped out of MIT at 19. Building Agentic Fabriq, the security layer between agentic applications and tools.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/matthew-xu-b32a36271", "x_url": "https://x.com/matthew_xu23", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/063a24958bb9b6eaa3b201fd0c124e25cc472de6.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 98377, "title": "Agentic Fabriq: Okta for Agents", "tagline": "The central hub for agent identity, governance, and visibility. ", "body": "Hey everyone! This is Paulina & Matthew from Agentic Fabriq. \n\n**TL;DR:** AI agents are entering production — but identity systems weren’t built for them. Agentic Fabriq is the identity and governance layer built specifically for AI agents.\n\nOur launch video:   \n\n![uploaded image](/media/?type=post&id=98377&key=user_uploads/2840984/7ee786fe-0377-4c6d-9e0e-e8032c2998a7)\n\n\n**The Problem**\n\nAgents are moving fast. Security isn’t.\n\nTeams are shipping AI agents that call tools, trigger workflows, access internal data, and act on behalf of users. But the identity layer underneath them was designed for humans logging into apps — not autonomous software acting across systems.\n\nToday, teams hardcode tokens into workflows, drop user identity once an agent runs, and re-implement OAuth for every integration. Security teams lose visibility into what agents are accessing and doing, and no one can confidently answer a simple question: **who did this agent act for?**\n\nOAuth, IAM, and IdPs were built for humans and apps. They were never designed for agents calling tools, calling other agents, and operating autonomously across environments. Engineers get stuck rebuilding auth, IT struggles to govern permissions, and security teams are left without clear audit trails.\n\n**What We Built**\n\nAgentic Fabriq is the identity, governance, and visibility layer for AI agents.\n\nWe sit in the middle of every agent’s calls and manage both agent identity and user identity. We handle token exchange and authentication, enforce least-privilege access, and enable fine-grained, per-user permissioning for every agent. Every action is logged centrally for audit and compliance.\n\nInstead of wiring OAuth, scopes, and policies for every agent and every workflow, you call us once.\n\nYou connect your tools, register your agent, define the permissions — and we handle identity propagation, authorization, and logging.\n\nHere’s a demo of our permissioning feature with OpenWebUI: \n\n**What This Enables**\n\n* Per-user agent access\n* Agent + user pair permissioning\n* Full visibility across tools and workflows\n* Instant revocation and policy control\n* Compliance-ready audit trails\n\nWe make it easy for companies to make their agents secure.\n\n**Why Now**\n\nEvery major computing shift forced identity to evolve. \n\nSaaS required SSO. \n\nCloud required IAM. \n\nAPIs required OAuth. \n\n\\\nAgents are the next shift – and they need their own security platform. \n\nWe’re building it.\n\n**Our Ask**\n\nIf you’re building internal agents, shipping AI into enterprise, or thinking about agent governance and security, we’d love to talk.\n\n**CONTACT**\n\n* email us: [founders@agenticfabriq.com](mailto:founders@agenticfabriq.com)\n* book a meeting: \n* website: \n\n**TEAM**\n\nPaulina and Matthew met @ MIT admit weekend and have been friends since. They dropped out before their second year to work on Agentic Fabriq\n\nPaulina was studying AI + Physics and doing CS/ML research at MIT Kavli Institute, MIT Haystack Observatory, and INAF Padua.\n\nMatthew was studying AI + Math and doing CS/Econ research at MIT Futuretech Lab and Computational Biology research at MIT CSAIL.", "url": "https://www.ycombinator.com/launches/Paj-agentic-fabriq-okta-for-agents", "votes": 9, "created_at": "2026-03-03T01:46:49.295Z" }, { "id": 95246, "title": "Agentic Fabriq: Okta for Agents", "tagline": "Power your AI with governed data", "body": "Hey everyone! This is [Paulina](https://www.linkedin.com/in/paulina-xu-5bba0821b/) & [Matthew](https://www.linkedin.com/in/matthew-xu-b32a36271/) from Agentic Fabriq.\n\n**TL;DR:** Agentic Fabriq is Okta for agents. Fabriq ensures that employees can’t access data or do actions with agents that they themselves would not have permissions to do.\n\n![uploaded image](/media/?type=post&id=95246&key=user_uploads/2840984/d57b9148-8a8a-44a0-8c53-1292f611641b)\n\nOur launch video:[ https://youtu.be/V4dTw58ZeTQ?si=ykoz3x06_fTgEXeK](https://youtu.be/V4dTw58ZeTQ?si=ykoz3x06_fTgEXeK)\n\nThe field of agentic AI is brand new, and everyone is rushing to build and ship their own agents. But there’s a critical gap appearing: **how do you guarantee an agent can’t do more than the employee using it?**\n\n**THE PROBLEM**\n\nAI is rewriting how work gets done, but most companies still can’t let every employee harness it with **their own, permissioned data**. The market is full of tools and agents, but **the core organizational layer is missing**. There’s no unified place to enforce per-user + least-privilege access, separate tenants, or audit what an agent did, with which user, and why, across all of your internal agents and tools.\n\nToday, there’s only scattered solutions to this with identity and permission systems that were built for humans, not for agents acting as humans. Agentic Fabriq solves this issue **for the first time** by giving IT and admins a way to ensure their agents are always constrained to the **exact permissions of the employee asking** - no more, no less.\n\n**OUR SOLUTION**\n\nAgentic Fabriq is the secure fabric that simplifies data permissioning for all your agents, tools, and employees. We handle the auth & integration so IT & admin can manage employee permissions, agent permissions per employee, and tool connections. We’ve solved the security and identity hurdles so you can connect to a tool in minutes and personalize **what your agents can do and access per user**.\n\nOn Fabriq,\n\n![uploaded image](/media/?type=post&id=95246&key=user_uploads/2840984/07608446-8a9e-4906-88ff-57c9bd5cb1d4)\n\nregister a tool connection,\n\n![uploaded image](/media/?type=post&id=95246&key=user_uploads/2840984/8e2c2fb2-38b9-4253-b87a-5894da56de89)\n\nregister your own AI/agents,\n\n![uploaded image](/media/?type=post&id=95246&key=user_uploads/2840984/f703ec51-0cd0-47e3-99ca-8d330c6fe157)\n\nand manage your entire organization\n\n![uploaded image](/media/?type=post&id=95246&key=user_uploads/2840984/6b9fad2b-5606-4ed6-8e3f-af21f966357b)\n\n![uploaded image](/media/?type=post&id=95246&key=user_uploads/2840984/4bbadb2e-6cb7-4858-9343-0b63b8938458)\n\n**we made it as simple as that.**\n\nAgentic Fabriq provides users with:\n\n* **per-user connections**: connect your own account to approved tools - no shared creds\n* **org-wide controls**: define what internal agents/apps can access & which employees can use them\n* **least-privilege by default**: access is scoped & revocable, with centralized policy\n* **full visibility**: every action is logged for audit & compliance\n* **prebuilt connectors**: add tools fast without rebuilding auth & permissions each time\n\nThis allows teams to make the most use of AI with exactly the data they’re allowed to use - **safely, auditable & at scale.**\n\n**OUR ASK**\n\nIf you or anyone you know would like to be early adopters of Fabriq, book a call with us or send us an email!\n\n**CONTACT**\n\n* email us: [founders@agenticfabriq.com](mailto:founders@agenticfabriq.com)\n* book a meeting:[ https://calendly.com/paulinaxu/agentic-fabriq-meeting](https://calendly.com/paulinaxu/agentic-fabriq-meeting)\n* website:[ https://www.agenticfabriq.com](https://www.agenticfabriq.com)\n\n**TEAM**\n\nPaulina and Matthew met @ MIT admit weekend and have been friends since. They dropped out before their second year to work on Agentic Fabriq\n\nPaulina was studying AI + Physics and doing CS/ML research at MIT Kavli Institute, MIT Haystack Observatory, and INAF Padua.\n\nMatthew was studying AI + Math and doing CS/Econ research at MIT Futuretech Lab and Computational Biology research at MIT CSAIL.", "url": "https://www.ycombinator.com/launches/OmE-agentic-fabriq-okta-for-agents", "votes": 18, "created_at": "2025-11-06T20:55:28.851Z" } ] }, { "id": 31016, "name": "Crosslayer Labs", "slug": "crosslayer-labs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0d04232f7799c42a8a176b06d7c366c511a6cab7.png", "website": "https://www.crosslayerlabs.com/", "all_locations": "New York City, NY, USA", "long_description": "Crosslayer Labs detects impersonation attacks on websites and APIs. We provide \"outside-in\" monitoring of customer infrastructure, comprehensively discovering and monitoring all Internet dependencies, including DNS, BGP, TLS certs, Javascript. We correlate signals from different layers of the Internet stack to identify attack patterns. Our alerts are actionable and contain root cause analysis/remediation recommendations. Our founding team is world renowned for previously inventing the MPIC standard adopted by all the major CAs including Google, Apple, Amazon. The MPIC standard is securing over 700 million websites via the issuance of over 3 billion digital certificates, and is now a global internet standard that protects every single HTTPS connection.", "one_liner": "Protect, monitor and defend your Internet presence", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1770673305, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/crosslayer-labs", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2026/crosslayer-labs.json", "year_founded": 2025, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/108065591/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0d04232f7799c42a8a176b06d7c366c511a6cab7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Tyler Bosmeny", "url": "https://www.ycombinator.com/people/tyler-bosmeny" }, "founders": [ { "user_id": 2814225, "full_name": "Henry Birge-Lee", "title": "Founder/CEO", "founder_bio": "I am am innovator in web and network security. I invented Multi-Perspective Issuance Corroboration (MPIC) which now secures every single HTTPS connection. I am currently focusing on building the Crosslayer Labs platform for web resource integrity.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/henry-birge-lee-211002121/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fb71a7d12e55b997a889dead80bbf7d885e874e1.jpg" }, { "user_id": 2799261, "full_name": "Grace Cimaszewski", "title": "Founder/CTO", "founder_bio": "I'm a recent PhD graduate from Princeton and security researcher. I've worked with the CA/Browser Forum to turn my research on TLS certificate security into ecosystem-wide requirements which now improve the security of every HTTPS connection you view in your browser. Before starting Crosslayer with my long-time research collaborators, I was a visiting research at Google and Corelight Labs.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/grace-c-bb3945a3/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1cacfdfdae5bdbb137046ddee85774b9dbd6b78e.jpg" }, { "user_id": 2348947, "full_name": "Prateek Mittal", "title": "Founder", "founder_bio": "I am a professor at Princeton University and co-founder of Crosslayer Labs (YC W26). I specialize in the field of cybersecurity/privacy and am the recipient of the ACM Grace Hopper Award. My research has helped secure every single web connection (HTTPS) worldwide and enhanced the security of deployed LLMs (e.g., GPT 3.5 and GPT4V at OpenAI). ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/prateek-mittal-aa859a45", "x_url": "https://x.com/prateekmittal_", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/521d817792974179d869977bd4cff33015f95c2d.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 97781, "title": "Crosslayer Labs: We discovered (and can protect you against) a new attack allowing hackers to spoof any website(!)", "tagline": "TLS certificates no longer guarantee website authenticity. We built Crosslayer Labs to stop hackers from stealing user credentials. ", "body": "**Tl;dr** Crosslayer Labs detects attacks on Internet infrastructure that allow hackers to impersonate websites and APIs. We would know; our team previously invented technology that secures every single web connection (HTTPS) worldwide.\n\n### The Problem\n\nImagine you are visiting [brex.com](http://brex.com) - but you’ve been redirected to an adversary spoofing Brex, while the lock icon on your browser still checks out.  Suddenly, all your startup money is drained. Science fiction? No, these are the next generation of security threats.\n\n \n\n### The Solution\n\nCrosslayer Labs protects websites and APIs from hijack attacks. We discover and monitor network dependencies for your domain (across the entire network stack) to detect when someone is impersonating your website. Our approach is unique in the way that it combines data from your entire network stack.\n\n[https://www.youtube.com/watch?v=QgYjFO1j08A](https://www.youtube.com/watch?v=QgYjFO1j08A&authuser=0)\n\n### Team\n\nWe are a team of serious security researchers: we invented a technology called Multi-Perspective Issuance Corroboration (MPIC) that is used to sign digital certificates (over 3 billion and counting) for all websites. \n\n**Prateek** is a Professor at Princeton, and his research has revolutionized the security and privacy of internet communications and AI systems. He helped secure every single web connection (HTTPS) worldwide and enhanced the security of deployed LLMs (e.g., GPT 3.5 and GPT4V at OpenAI). He is the recipient of the ACM Grace Hopper Award, IEEE Fellow, ACM Distinguished Member, and Distinguished Alumni awards from IIT Guwahati and UIUC. \n\n**Henry** is a member of the CA/Browser Forum and former research staff at Princeton University. Henry’s research uncovered a fundamental security vulnerability in how TLS certificates are issued to websites. He is an author of the MPIC standard at the CA/Browser Forum and he founded the Open MPIC project that implements MPIC for 1.5 million certificates a day. His work also led to DNSSEC adoption by CAs, and he is a recipient of the IRTF’s applied networking research prize.\\\n\\\n**Grace** just finished her PhD at Princeton, where she performed transformative research on the web PKI, and was named runner up for the Privacy Enhancing Technology Award and the Andreas Pfitzmann Best Student Paper Award. Grace mapped the attack surface of millions of websites to shape how MPIC was deployed by leading CAs, including working with Google Trust Services. \n\n### Ask\n\nKnow any CISOs or security heads who would lose their job if their website was impersonated? We'd love to meet. Think: crypto exchanges, fintech, banks, health care, tax portals.  Email: [contact@crosslayerlabs.com](mailto:contact@crosslayerlabs.com)", "url": "https://www.ycombinator.com/launches/PR7-crosslayer-labs-we-discovered-and-can-protect-you-against-a-new-attack-allowing-hackers-to-spoof-any-website", "votes": 6, "created_at": "2026-02-13T16:10:15.717Z" } ] }, { "id": 31094, "name": "Lexius", "slug": "lexius", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f713f0f123c886d7ce59127e88d9c062f767183.png", "website": "https://www.lexius.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Lexius turns existing security cameras into an AI security guard that detects, documents, and alerts incidents like shoplifting and slip-and-falls.\r\n\r\nMillions of locations already have cameras but no intelligence. Replacing them costs $50K to $100K per site. Lexius upgrades every camera instantly, no rip and replace, no new hardware.\r\n\r\nReal-world camera systems are messy, fragmented, and decades old, and AI breaks on low-quality CCTV. The hard part isn’t the model, it’s making unreliable systems work at scale with accuracy high enough for real decisions.\r\n\r\nLexius starts with security and liability, and becomes the operating system for physical spaces.", "one_liner": "AI for Corporate Security Cameras", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1766833804, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/lexius", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2026/lexius.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/lexiusss/", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/lexius", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f713f0f123c886d7ce59127e88d9c062f767183.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 1856621, "full_name": "David Elskamp", "title": "Founder/CEO", "founder_bio": "2x founder, started a media company at 14, scaled it to six figures, ran it for 8 years while working with global brands.\n\nBA & MA in Computer Science, with a focus on computer vision, conducting AI research and building AI systems for real-world environments.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/davidelskamp/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1c8e9333ef895b386c6513163ed7166c5b1e9f36.jpg" }, { "user_id": 1940897, "full_name": "Liam Webster", "title": "Founder/CTO", "founder_bio": "Lego Kid -> amateur moviemaker -> seeing machines\nEECS @ UC Berkeley, AI researcher @ the International Computer Science Institute (ML & Privacy).", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/liamwebsterxyz/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4779d65db0e20c7360c72d71468495bd4a90f2a9.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 98246, "title": "Lexius — 🚨 AI for any Security Camera", "tagline": "We make any old security camera intelligent", "body": "**Hi! 👋** We’re [David](https://www.linkedin.com/in/davidelskamp) and [Liam](https://www.linkedin.com/in/liamwebsterxyz) - co-founders of [Lexius](https://www.lexius.ai/).\n\n## TL;DR\n\nLexius turns existing security cameras into AI security guards that **detect theft, prevent liability, and turns months of video into searchable answers.** Trusted by 7-Eleven, Erewhon and Prada.\n\n**_Ask_:** Do you have/work with a lot of **security cameras** or know someone who does? Email [david@lexius.ai](mailto:david@lexius.ai).\n\n\n\n## **❌** The Problem\n\nBuildings with security cameras generate **thousands of hours of footage**, but:\n\n* No one has time to review it\n* Investigations take days of scrubbing video\n* Critical moments get missed\n* Legacy systems are hard to access and impossible to scale\n\n_Security cameras generate video. They don’t generate answers._\n\n## 🎥 Our Solution\n\nLexius runs on top of **any existing camera** system and gives them **superpowers**:\n\n* **Access**: Instantly view live or recorded footage from anywhere.\n\n![uploaded image](/media/?type=post&id=98246&key=user_uploads/1856621/08a8927c-63df-49c5-bb65-e9288028a1eb)\n\n* **AI Alerts**: Receive real time alerts for shoplifting, fall incidents or anything you’d like. Sent right to your phone.\n\n![uploaded image](/media/?type=post&id=98246&key=user_uploads/1856621/2c748d8f-91e3-422b-9d32-3570f8ad85dd)\n\n* **Search and Trace**: Instantly search across months of footage across all your sites and follow a person across multiple cameras and visits in seconds.\n\n![uploaded image](/media/?type=post&id=98246&key=user_uploads/1856621/60b9cf00-9014-4f54-9211-e8269edb89e3)\n\n* **Repeat Offenders:** Automatically identify, track, and alert on individuals who return across multiple visits, helping teams build stronger cases and prevent problems.\n* **Case Building**: Automatically stitch events together and generate clean, ready to use case files with evidence.\n\n_Setup takes minutes, not weeks._\n\n## Who It’s For\n\n**Warehouses / Manufacturing / Hotels / Offices / Campuses / Casinos / Law enforcement / Retail / Malls**\n\n_If you have cameras, Lexius can unlock more value from them._\n\n## Erewhon loves our product and uses it across their stores!\n\n\n\n[_www.lexius.ai_](https://www.lexius.ai/)", "url": "https://www.ycombinator.com/launches/PYc-lexius-ai-for-any-security-camera", "votes": 48, "created_at": "2026-02-27T07:29:04.860Z" } ] }, { "id": 31174, "name": "Parameter", "slug": "parameter", "former_names": [ "Anytool", "Hex Security", "Parameter", "Parameter (fka Hex Security)" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/10c4b553697048031ea44635278f71a342e7f4dc.png", "website": "https://parameter.ai?utm_source=ycombinator&utm_medium=referral&utm_campaign=parameter-profile", "all_locations": "San Francisco, CA, USA", "long_description": "Parameter builds AI agents that run continuous penetration tests against your apps and infrastructure. Instead of a once-a-year penetration test, Parameter's agents works 24/7 to find and verify critical vulnerabilities so you can prevent them before attackers.\r\n\r\nFormerly Hex Security", "one_liner": "Security builds trust. Strengthen both, all on one platform.", "team_size": 14, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1768943987, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/parameter", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2026/parameter.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/param-ai", "x_url": "https://x.com/parameter_ai", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/10c4b553697048031ea44635278f71a342e7f4dc.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 2947591, "full_name": "Ahmad Khan", "title": "Founder/CEO", "founder_bio": "Co-Founder, Parameter. \n\nPreviously, I was building robots that learned from each other by sharing skills on-chain, and researching World Models that give robots complete environmental understanding. Our robot became the first in history to ring the NASDAQ bell. I studied Math at University of Waterloo.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ahmad-khan-b6584b225/", "x_url": "https://x.com/zer0day", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fb13d4b1cc92b0b8f09c4a24a36fe8e89027df53.jpg" }, { "user_id": 507733, "full_name": "Huzaifa Ahmad", "title": "Founder/CTO", "founder_bio": "Cofounder, Parameter. \n\nPreviously, I built software at companies like PlayAI, AWS, and Capital One. On the side, I built consumer apps that reached millions of downloads. But I've always loved breaking things just as much as building them. In college, I reverse engineered every major ATS platform and built Talently, a tool that sent over 200K job applications. Now we build AI that hacks before attackers do.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/hzzaifa", "x_url": "https://x.com/hzzzaifa", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6020e21b469a93c206367db43cbad4a06f4ca99c.jpg" }, { "user_id": 2593631, "full_name": "Prama Yudhistira", "title": "Founder/CPO", "founder_bio": "Co-Founder, Parameter.\n\n\nAt Codegen, I built asynchronous coding agents that improved the workflow of developers, and even got non-developers writing production software.\nAt AMD, I built infrastructure for MI300 GPU firmware testing.\nI competed internationally in piano, winning multiple competitions and performing with orchestras like the Qatar Philharmonic Orchestra. \n", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/pramayudhistira/", "x_url": "https://x.com/menace_codes", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a1d67b527be838a072da4b2c709b3df445c96ccb.jpg" } ], "jobs": [ { "id": 92590, "title": "Member of Security Staff", "url": "https://www.ycombinator.com/companies/parameter/jobs/aSsK2sx-member-of-security-staff", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$130K - $180K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 92592, "title": "Member of Technical Staff", "url": "https://www.ycombinator.com/companies/parameter/jobs/t56j82p-member-of-technical-staff", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$130K - $250K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [ { "id": 97640, "title": "Parameter: AI that Hacks before Attackers do", "tagline": "AI agents that find security vulnerabilities in your apps & infrastructure", "body": "We're[ @Huzaifa Ahmad](https://www.linkedin.com/in/ahmadhuzaifa012/),[ @Ahmad Khan](https://www.linkedin.com/in/ahmad-khan-b6584b225/), and[ @Prama Yudhistira](https://www.linkedin.com/in/pramayudhistira/) (Parameter W26). **We built AI agents that automate penetration testing.**\n\n![uploaded image](/media/?type=post&id=97640&key=user_uploads/507733/e0895a51-0f41-4ecb-b7d2-6e10257676ee)\n\n**In the past few weeks, our agents found critical vulnerabilities in dozens of YC companies (ones you’ve heard of):** SQL injection exposing billions of records, demonstrated a PoC worm that could infect entire networks, gained access to hundreds of codebases, and more. Through this, we have prevented an estimated $3B+ in potential damages (based on exposed record counts and IBM's Cost of a Data Breach benchmarks).\n\n[🎥 Watch our launch video](https://youtu.be/kDWcB4GjzeA)\n\n**The problem:** Companies lose $10T+ annually to preventable vulnerabilities, yet most pentest once a year because it's manual, expensive, and slow. By the time you get the PDF, your codebase has changed.\n\nAnd that gap is widening. In September 2025, Anthropic caught Chinese state-sponsored hackers using AI to run 80-90% of an attack autonomously — thousands of requests per second, speeds no human team could match. The attackers have AI now, and defenders need it too.\n\n![uploaded image](/media/?type=post&id=97640&key=user_uploads/2947591/e8003001-ba20-41f7-9c96-11922c602f4b)\n\n**What we built:** AI agents that run continuous penetration tests against your apps and infrastructure. They find vulnerabilities, chain exploits together, and deliver actionable findings with reproduction steps — at a fraction of the cost of traditional pentesting.\n\n![uploaded image](/media/?type=post&id=97640&key=user_uploads/2947591/0f00074f-e1d6-4ef2-bc4e-9466839fab36)\n\nWant to see what we find in your systems? Book a discovery call: [hex.co](http://hex.co)\n\nVisit us at [hex.co](http://hex.co) | [founders@hex.co](mailto:founders@hex.co)", "url": "https://www.ycombinator.com/launches/POq-parameter-ai-that-hacks-before-attackers-do", "votes": 303, "created_at": "2026-02-09T00:33:20.433Z" } ] }, { "id": 31248, "name": "BeeSafe AI", "slug": "beesafe-ai", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a94eb8ceff47b3a9989e9c3c4f0bff0ac9c2e0a.png", "website": "https://beesafe.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "BeeSafe AI is building the frontier model layer for social engineering defense. Cyberattacks have moved from code to conversation: attackers now use AI to carry out long-term, trust-based manipulation across SMS, voice, email, and social platforms, often inside encrypted channels where defenders cannot see, detect, or stop them.\r\n\r\nBeeSafe changes that by deploying undercover AI agents that engage attackers directly, expose hidden infrastructure, and convert live adversarial conversations into actionable intelligence. Each engagement adds to BeeSafe's proprietary dataset of real attacker behavior and trains foundational models that continually learn about counter-persuasion, deception, and manipulation in the wild.\r\n\r\nBeeSafe is starting in financial crime, where banks already value our data against Authorized Push Payment (APP) fraud and money laundering, but the opportunity is far broader. The same data and models that uncover mule networks today can protect consumers, secure enterprises, and strengthen governments against the next generation of AI-powered social engineering attacks tomorrow.", "one_liner": "Frontier AI Defenses for Social Engineering Attacks", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1770327115, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/beesafe-ai", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2026/beesafe-ai.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/beesafe-ai", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a94eb8ceff47b3a9989e9c3c4f0bff0ac9c2e0a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jon Xu", "url": "https://www.ycombinator.com/people/jon-xu" }, "founders": [ { "user_id": 286, "full_name": "Daniel Spokoyny", "title": "Founder/CEO", "founder_bio": "I am a machine learning and security researcher with 10+ years in ML and NLP. I earned my PhD at CMU with research on novel transformer architectures, better training objectives, and evaluation benchmarks for reasoning.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/spokoyny/", "x_url": "https://x.com/daniel_spokoyny", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0df99e432cace13afae394421aaa72c3927d9c3d.jpg" }, { "user_id": 3268572, "full_name": "Ariana Mirian", "title": "Founder", "founder_bio": "Cofounder at BeeSafe AI. I have over ten years of experience as a security research and measurement scientist, using large scale data to make better security decisions. I've worked in various organizations, such as Censys, Google Chrome, and UCSD, all of which have provided unique perspectives into security at scale to protect the end user. My goal is to make the Internet a safer place for everyone, regardless of background or technical expertise.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/arianamirian/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/06d54df787963805facaeaffb57351bad78e5b56.jpg" }, { "user_id": 3152047, "full_name": "Nikolai Vogler", "title": "Founder/CTO", "founder_bio": "CS PhD from UCSD and ex-CMU LTI. My objective is to reduce human-driven cyber risk after hearing so many stories from peers about how they’ve gotten scammed. I have worked in machine translation, optical character recognition, and document attribution, which was actually interrupted by a real-world ransomware attack.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/nikolai-vogler-3808a82b2", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/27e6b8765f3577595f09c193fa32720c34e81f6c.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 97562, "title": "BeeSafe AI — Fraud Prevention Platform for Trust-Based Scams", "tagline": "Stopping scams before they reach your customers", "body": "![uploaded image](/media/?type=post&id=97562&key=user_uploads/3268572/9d3f5b62-fcc6-4c25-9f79-3c11e7a60a40)\n\n**TL;DR:** BeeSafe stops scams at the source by engaging with scammers to identify and shut down the fraudulent accounts they use for their operations. We are [Ariana Mirian](https://www.linkedin.com/in/arianamirian), [Nikolai Vogler](https://www.linkedin.com/in/nikolai-vogler), and [Daniel Spokoyny](https://www.linkedin.com/in/spokoyny), three PhD AI & security experts, and we pioneered the first AI system for engaging sophisticated, trust-based scammers—now we’re scaling it into a product that helps:\n\n* **Financial Services & Crypto** detect mule accounts for AML compliance\n* **Telecommunications** block suspicious inbound messages\n* **Government Agencies** take down cybercriminal operations\n\n**The Problem: The $12B Visibility Gap for Financial Institutions**\n\nHave you ever received a text like this?\n\n![uploaded image](/media/?type=post&id=97562&key=user_uploads/3268572/33ca436a-5f83-4652-ba59-bdba6898fb52)\n\nThis seemingly harmless message is the start of a sophisticated social engineering scam, sometimes referred to as “pig butchering”. Scammers strike up a conversation to build trust with their victims over time, eventually convincing them to authorize real-time, irreversible payments via P2P apps, crypto, or wire transfers:\n\n![uploaded image](/media/?type=post&id=97562&key=user_uploads/3268572/1e5c6c13-4a22-4cb0-840f-8bc24ec3fdc8)\n\n$12B was reported stolen in trust-based scams like this in the US last year, according to the FTC. With multilingual LLMs, deepfakes, and voice cloning, trust-based scam losses are skyrocketing.\n\nFinancial Services, Telcos, and Government Agencies have little visibility into trust-based scams because attackers bypass traditional fraud prevention systems (e.g. behavior-based anomaly detection):\n\n* **Off-Platform Trust Building:** Conversations are held across multiple, end-to-end encrypted platforms, leaving any one platform blind\n* **Authorized Transactions:** Victims are manipulated over time into trusting the attackers so they authorize transactions\n* **Reactive Investigations:** Enterprises only know about the scams after a victim reports lost money (if they report it at all)\n\n**The Solution: AI-Powered Scam Disruption**\n\nInstead of blocking scammers, our system intercepts and engages with them to extract intelligence, including financial mule accounts, fraudulent assets, malicious domains, crypto drainers, and other related infrastructure.\n\n![uploaded image](/media/?type=post&id=97562&key=user_uploads/3268572/59fdda02-ba50-4593-817a-68e8b7d5bca8)\n\nOur intel’s edge:\n\n* **Full Campaign Context:** we map the entire fraud operations, from initial message to financial exfiltration, allowing us to map patterns of attacks.\n* **Verified Data:** Our intelligence represents ground truth, and is not based on a probabilistic risk score. We minimize false positives by capturing details directly from the attackers.\n* **Real Time-Discovery:** all attacker infrastructure is discovered in real-time, preventing real-victim losses.\n\nWe provide instant access to high-fidelity fraud signals for B2B and deliver this to our customers in a way that does not add any friction to everyday users.\n\nWe have already enabled financial services and government agencies to identify and intercept scammers pre-transaction to prevent victim losses, with 10,000s of real scammer conversations across communication channels, and 1,000s of mule accounts + linked infrastructure already.\n\n**Our asks:**\n\nIf your organization and customers are facing trust-based fraud, we want to meet and see how BeeSafe can help.\n\nPlease reach out if you work in\n\n* anti-fraud, anti-money laundering, or compliance organization\n* consumer-facing fintechs, crypto exchanges, or telcos\n\nby sending us a message at [founders@beesafe.ai](mailto:founders@beesafe.ai) or visiting [beesafe.ai](http://beesafe.ai) to learn more.\n\n**About Us:** We are [Ariana Mirian](https://www.linkedin.com/in/arianamirian), [Nikolai Vogler](https://www.linkedin.com/in/nikolai-vogler), and [Daniel Spokoyny](https://www.linkedin.com/in/spokoyny) a team of three PhD founders from Carnegie Mellon and UC San Diego. We wrote the paper that introduced the first AI system for sophisticated, trust-based scams. We bring expertise in building AI systems for security—grounded in core machine learning research and real-world cybercrime defense—with industry research experience from Google, Microsoft, Censys, and major DoD-funded programs.", "url": "https://www.ycombinator.com/launches/PNa-beesafe-ai-fraud-prevention-platform-for-trust-based-scams", "votes": 21, "created_at": "2026-02-06T17:43:15.281Z" } ] }, { "id": 31494, "name": "RASPIRE", "slug": "raspire", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0eec2630d827ef4927b95e335dc060a630450da9.png", "website": "https://raspire.com/", "all_locations": "Cairo, Cairo Governorate, Egypt", "long_description": "RASPIRE is the first line of defense for applications against AI-powered fraud attacks, API abuse, and runtime threats. Unlike code scanners and pentesting tools that identify vulnerabilities before release, RASPIRE operates like a security expert running inside applications, monitoring, detecting, and blocking attacks 24/7 in real time. All without writing a single line of code.", "one_liner": "Autonomous Runtime Security", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1780001140, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Egypt", "Middle East and North Africa" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/raspire", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2026/raspire.json", "year_founded": 2025, "city": "Cairo", "country": "EG", "linkedin_url": "https://www.linkedin.com/company/raspire", "x_url": "https://x.com/raspire_", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0eec2630d827ef4927b95e335dc060a630450da9.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Andrew Miklas", "url": "https://www.ycombinator.com/people/andrew-miklas" }, "founders": [ { "user_id": 2883773, "full_name": "Kareem Selim", "title": "Founder/CEO", "founder_bio": "Co-founder & CEO @ RASPIRE. Used to break apps for a living. Now shipping automated security for them, built by hackers, against hackers.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/kareem-se1im", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1821dbc0b5e8a5df323515f4a9c2ed1068837dbf.jpg" }, { "user_id": 3400512, "full_name": "Hassan Mostafa", "title": "Founder/CTO", "founder_bio": "Co-founder & CTO @ RASPIRE. Spent years breaking apps for banks and fintechs, now building the runtime security they were missing.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/h4ss4nmostafa/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a5e2122e34822d6bbb15b273a2dfcb644fd4ceb3.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 102582, "title": "RASPIRE - App Security at AI Speed.", "tagline": "The fastest way to secure mobile apps without writing a single line of code.", "body": "Hey everyone 👋! We're [Kareem Selim](https://www.linkedin.com/in/kareem-se1im/) and [Hassan Mostafa](https://www.linkedin.com/in/h4ss4nmostafa/), co-founders of [RASPIRE](https://www.linkedin.com/company/raspire/).\n\n**TL;DR:** RASPIRE is an AI runtime security layer for mobile apps. It protects applications every time they run, automatically detecting and responding to attacks in production while giving security teams real-time visibility into threats across their applications. Already protecting apps used by 20M+ end users across banking, fintech, healthtech, and e-commerce.\\\n\\\n**Our Launch Video**: \n\n\\\n**Ask**: Building a mobile app or already have one? We'll help you secure it. Book a demo: [cal.com/raspire/demo](https://cal.com/raspire/demo)\n\n**The problem**\n\nBuilding and shipping a mobile app has never been easier.\n\nBut security still requires complex integrations, code changes, and months of work.\n\nExisting solutions often requires SDK integrations, configuration, and security expertise to operate but developers shouldn't become security experts just to ship an app.\n\nAs a result, security is often overlooked or assumed to be handled by app stores.\n\nit's not…\n\nand as AI accelerates app development, the attack surface is growing faster than security can keep up.\\\n\\\n**The Solution**\n\nIf you can build an app in one click, you should be able to secure it in one click.\n\nRASPIRE is making securing mobile apps as simple as building them. We protect Android and iOS applications without writing a single line of code.\n\nSimply upload your compiled app, and RASPIRE automatically applies the right protections in minutes, from anti-fraud and app integrity to reverse-engineering and API protection.\n\nUnlike code scanners tools that stop before release, RASPIRE protects applications every time they run, automatically detecting and responding to attacks in production while giving security teams real-time visibility into threats across their applications.\n\n**How it works**\n\nUpload your compiled app (APK/IPA). We harden it automatically. No SDK. No code changes. No config files. No workflow changes. Done in minutes. Plugs into your CI/CD pipeline. Cloud or on-prem, your call.\n\n![uploaded image](/media/?type=post&id=102582&key=user_uploads/3400512/3f3b04d5-4b8a-4357-b2ac-09e039c8ac59)\n\n**Full visibility into your app's security**\n\nOnce shielded, you get real-time visibility into everything happening inside your app. Security events flow into your existing SIEM or your application monitoring platform (e.g. Sentry/DataDog).\n\n![uploaded image](/media/?type=post&id=102582&key=user_uploads/3400512/6156e141-2d96-48e9-aa78-a0e933f97d96)\n\n**Hunt the attackers, not just the attacks**\n\nMost security tools tell you what happened. RASPIRE tells you who did it, down to the device. And lets you block them permanently.\n\n**The team**\n\nWe've known each other for 10 years. We've won CTFs and security hackathons together, and spent 15 combined years in offensive security. Hundreds of security audits for banks, fintechs, and enterprises. We've seen every way a mobile app can break. Now we make sure yours doesn't.\n\n![uploaded image](/media/?type=post&id=102582&key=user_uploads/3400512/011a04a0-00ff-448b-9b18-5387b6933a2e)\n\n**Our ask**\n\nIf any of these describe you, we'd love to talk:\n\n* Leading mobile security and compliance across your organization.\n* Building apps in banking, fintech, healthcare, or other regulated industries.\n* Running a consumer mobile app and concerned about fraud, account takeover, or reverse engineering.\n* Building mobile games and need anti-cheat protection.\n* Building apps with AI and want to protect your APIs, secrets, and user data.\n\nVisit [raspire.com](http://raspire.com) or book a demo at [cal.com/raspire/demo](https://cal.com/raspire/demo)", "url": "https://www.ycombinator.com/launches/QgY-raspire-app-security-at-ai-speed", "votes": 1176, "created_at": "2026-06-04T18:26:15.672Z" } ] }, { "id": 31506, "name": "Tolmo", "slug": "tolmo", "former_names": [ "Droid Factory" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8b1fe60a254c3f83e0d218298337418aad753714.png", "website": "https://www.tolmo.com", "all_locations": "San Francisco, CA, USA", "long_description": "Tolmo is an agent-driven security platform that secures every layer — code, CI, cloud applications at the speed of AI changes.\r\n\r\nCodebases are growing faster than ever, at a rate humans can’t keep up with. Tolmo deploys fleets of AI security agents on a live production knowledge graph that connects data from cloud services, containers, databases, and third-party providers (Observability, Security, etc.).\r\n\r\nTolmo agents triage, verify impact, and remediate security issues autonomously, escalating to humans only when truly necessary.", "one_liner": "Tolmo is the AI security platform that secures every layer of cloud…", "team_size": 12, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1781726326, "tags": [ "DevSecOps", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tolmo", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2026/tolmo.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tolmohq/", "x_url": "https://x.com/tolmhq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/tolmo", "github_url": "https://github.com/tolmohq", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8b1fe60a254c3f83e0d218298337418aad753714.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 207041, "full_name": "Pierre Betouin", "title": "Founder/CEO", "founder_bio": "Pierre was leading security products at Datadog following the acquisition of Sqreen (W18) - a cybersecurity company providing a comprehensive security monitoring for cloud and web apps protecting over 800 customers in production.\n\nPierre previously spent 9 years at Apple, where he led the team in charge of security assessments for the Internet Services department, hacking products and designing protection.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/pbetouin/", "x_url": "https://twitter.com/pbetouin", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d773913accb3577e364f48d8247e9689aceedade.jpg" }, { "user_id": 3476457, "full_name": "Vladimir de Turckheim", "title": "Founder", "founder_bio": "Vladimir (Vlad) was a Staff Engineer working on security products at Datadog. He joined following the acquisition of Sqreen (W18) where he was employee #4 in charge of Node.js instrumentation. He was a Node.js core collaborator for five years and has setup the whole Node.js security program.\n\nHe is also the founder of Heal.dev.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vladimirdeturckheim/", "x_url": "https://x.com/poledesfetes", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/25d9ce09a2a3f07ad97a622bed9a661b3710e706.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 103900, "title": "Tolmo: Secure your software shipped at Claude Code pace", "tagline": "Tolmo is your always-on fleet of security agents", "body": "Hi everyone! I'm Vlad, co-founder of **Tolmo**, along with Jean-Baptiste Aviat, Pierre Betouin, and Arnaud Breton.\n\n![uploaded image](/media/?type=post&id=103900&key=user_uploads/3476457/8df11a35-45e9-4f77-95d6-0c8bede1dc1a)\n\n\n**Tolmo is an agent-native security platform.** We deploy fleets of AI security agents that continuously identify, triage, and remediate security issues across every layer: code, CI, cloud, and even spec documents. All of that at the speed AI ships software.\n\n\n\n**Why now?** Production environments are growing faster than humans can review and secure them: 200+ PRs/engineer/week is no longer an outlier. The old security playbook (manual review, ticket queues, alert triage) is fundamentally broken at that pace. At the same time, attackers are using AI agents to break into systems faster than ever, and offensive tooling is being created faster than defensive tooling. Attacking infrastructure has never been cheaper or easier.\n\n**How it works:** Our agents reason over a live production knowledge graph connecting your cloud services, containers, databases, and third-party providers. They identify, triage, and remediate autonomously. Escalating to a human only when truly necessary.\n\n**Who we are:** We're the team behind Datadog's security products and Sqreen (YC W18). We secured thousands of organizations at Datadog, and we've seen firsthand that existing solutions won't keep up with the security challenges introduced by coding agents.\n\n**Join the waitlist: [https://app.tolmo.com/waitlist](https://app.tolmo.com/waitlist)**", "url": "https://www.ycombinator.com/launches/R1o-tolmo-secure-your-software-shipped-at-claude-code-pace", "votes": 7, "created_at": "2026-06-24T15:45:04.646Z" } ] }, { "id": 31537, "name": "Trident", "slug": "trident", "former_names": [ "Esprit" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/537de46d97dcdac9c07b330a6a1a4b2ab0583b7b.png", "website": "https://tridentsecurity.io/", "all_locations": "San Francisco, CA, USA", "long_description": "Trident is the standard for modern day security. its an agentic pentester that chains vulnerabilities together like a real attacker mapping verified attack paths across AWS, Azure, GCP, web apps, and APIs. Run AI attacks and get fixes.\r\n\r\nGet started today: tridentsecurity.io", "one_liner": "Autonomous offensive security agents. The best defense is offense", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1785361922, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/trident", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/trident.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tridentsecure", "x_url": "https://x.com/TridentSecures", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/537de46d97dcdac9c07b330a6a1a4b2ab0583b7b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harshita Arora", "url": "https://www.ycombinator.com/people/harshita-arora" }, "founders": [ { "user_id": 2758911, "full_name": "Junaid Mahmood", "title": "Founder/CEO", "founder_bio": "Co-founder @Trident, CTF player & bounty hunter. Taught coding at 16 ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/junaidmahmood-/", "x_url": "https://x.com/whosjunaidd", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6d60dad6ab24eccee2fa15fe372ef5e8b202fc97.jpg" }, { "user_id": 2702103, "full_name": "Dekai Li", "title": "Founder/CTO", "founder_bio": "Co-founder @Trident, CS @University of Waterloo. \n", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/li-dekai-8287332a6/", "x_url": "https://x.com/li_dekaii", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/5fbb11cf2687c50bb8c031cace4f6fbb674856c8.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 110468, "title": "Trident: Secure your company 24/7", "tagline": "My app keeps getting hacked what can I do?", "body": "\n![uploaded image](/media/?type=post&id=110468&key=user_uploads/2758911/13ca2ba5-d205-4afd-8d7c-ea92334d7136)\n\n**TL;DR**: Traditional pentesting is a thing of the past. Attackers use AI now, so we're making it fair. Trident safely and continuously attacks your own apps and cloud so you know what to fix before they do.\n\n![uploaded image](/media/?type=post&id=110468&key=user_uploads/2758911/a4001049-62a7-4856-b611-2f692dc8c3b7)\n\nToday we're launching Trident.\n\nAI changed the game on both sides. Your team ships every single hour; attackers scan and exploit at a scale no human team can match. Meanwhile, security is still sold as an annual pentest: a PDF about a version of your product that no longer exists.\n\nThat's not a fair fight. So we built Trident to make it even.\n\nTrident safely runs attacks on your own web apps, APIs, and cloud (AWS, GCP, Azure, Kubernetes), continuously. Every finding comes as an attack path that actually reaches your data, with proof of exploit and a proper fix. You know what to fix before someone else finds it.\\\n\\\n[https://drive.google.com/file/d/1qIn0j8LgI3XijoqyE0HBT4G66hBdyCAy](https://drive.google.com/file/d/1qIn0j8LgI3XijoqyE0HBT4G66hBdyCAy/view?usp=sharing)\n\nSince our batch started, we've found critical vulns in a ton of startups, bug bounty prorgams and 3 unicorns:\n\n* API keys hardcoded in desktop app binaries (yes, that was us on Twitter)\n* Publicly exposed S3 buckets and Azure Blob containers\n* Exploitable flaws in live DeFi protocols\n\nAll responsibly disclosed and fixed before anyone else got there. And none of these were careless teams, just great ones moving fast.\n\n![uploaded image](/media/?type=post&id=110468&key=user_uploads/2758911/bdb88f72-d6d1-44f1-a2d8-4aa555bfa399)\n\nCan't afford a dedicated security team yet? That's exactly who we built this for.\n\nYour job is to ship. Ours is to secure.", "url": "https://www.ycombinator.com/launches/Sjk-trident-secure-your-company-24-7", "votes": 14, "created_at": "2026-08-13T22:30:00.463Z" } ] }, { "id": 31554, "name": "Clawvisor", "slug": "clawvisor", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/7b7343f0662dc74045154f30ca2872d79b80c650.png", "website": "https://clawvisor.com", "all_locations": "San Francisco, CA, USA", "long_description": "Clawvisor lets AI agents use apps like Gmail, Slack, and Google Drive without going rogue or ever seeing your credentials. You approve tasks once. Clawvisor enforces them on every request.", "one_liner": "The Authorization Layer for AI Agents", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1778081648, "tags": [], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/clawvisor", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2026/clawvisor.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://x.com/clawvisor", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/7b7343f0662dc74045154f30ca2872d79b80c650.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Garry Tan", "url": "https://www.ycombinator.com/people/garry-tan" }, "founders": [ { "user_id": 18959, "full_name": "Eric Levine", "title": "Founder", "founder_bio": "Founder of Clawvisor (P26). Previously: co-founder at Berbix (S18), acquired in 2023 by Socure; Trust & Safety engineering at Airbnb; Visiting Group Partner at Y Combinator.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/levineericj/", "x_url": "https://x.com/ericlevine", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2082522a9ca705ce9879c4f4ac9d76ce7f37d0a4.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 100899, "title": "Clawvisor — The Authorization Layer for AI Agents", "tagline": "Give agents access without giving them the keys.", "body": "TL;DR: Clawvisor lets AI agents use apps like Gmail, Slack, and Google Drive without going rogue or ever seeing your credentials. You approve tasks once. Clawvisor enforces them on every request.\n\n[_Launch video_](https://www.youtube.com/watch?v=2UWv557dg6M)\n\nWe're at the start of something on the scale of the industrial revolution. Agents will draft our emails, run our reports, manage our calendars, ship our code. A single person with a capable agent can get done in an afternoon what used to take a team a week. The leverage is almost unlimited.\n\nBut outside of coding agents, few people are actually using them, at least not for anything that matters. We’ve seen what can go wrong. Mass-deleted inboxes, dropped production databases, sent emails that can't be undone. It's what happens when a long-running agent's instructions drift and it starts going rogue with hallucinated goals. The blast radius is whatever permissions you gave it, and granting access to \"delete emails\" covers both cleaning up spam and wiping your entire inbox. If you work in a regulated industry, at a security-conscious company, or you’re paying attention, agents are off the table.\n\nWe need a way to bring agents to the world safely. Something that lets you point one at your actual inbox, your actual calendar, your actual codebase, and trust it to do the work without trusting it with the keys. The capability is already here. We just have to make it safe to use.\n\nThat’s why I built Clawvisor.\n\n**The Problem**\n\n* OAuth scopes are too coarse for nondeterministic agents. \"Read access\" means both \"triage recently received emails\" and \"exfiltrate an archive of the whole inbox\".\n* Approving every action causes fatigue. You stop reading and start blindly clicking “approve”.\n* Credentials end up everywhere. API keys scattered across .env files, config directories, messaging apps.\n* Today’s default approach is basically YOLO.\n\n**The Solution**\n\nClawvisor sits between your agent and your data. You ask your agent to do work. Your agent declares a task. You approve it once. Clawvisor enforces it on every request.\n\n* No credential exposure. Keys stay in a vault. The agent never sees them.\n* Real-time policy enforcement. Requests that don’t match the task get blocked.\n* Context-aware guardrails. Agents can only act on data they actually retrieved.\n* Full audit trail. Every action and decision is logged.\n\nFor example, if you approve an agent to “check today’s calendar” and it tries to pull 5 years of events? Blocked.\n\nApprovals happen per task, not per action, so you avoid fatigue. Each task is also scored for risk, so you know when to pay extra attention.\n\nIt’s agent-agnostic by design. If your agent can talk HTTP, it can use Clawvisor. OpenClaw, Claude Code, Claude Cowork, Hermes, Perplexity Computer are all supported. BYOA.\n\n[_Demo video_](https://youtu.be/83oP_vOmpBk)\n\n**The Team**\n\nPreviously I cofounded Berbix (S18, acquired for $70M in 2023) building best-in-class identity verification. Prior to that, I led the Airbnb Trust & Safety engineering team building systems and tools to catch bad actors before they could cause damage.\n\n**The Ask**\n\nIf you’ve avoided giving agents access to real data, this is why Clawvisor exists. Try it today.\n\n* Get up-and-running in minutes: \n* Self-host or read the source: \n\n![uploaded image](/media/?type=post&id=100899&key=user_uploads/18959/0c865792-dbf3-48de-a32f-5f975df88ba7)\n\n", "url": "https://www.ycombinator.com/launches/QFP-clawvisor-the-authorization-layer-for-ai-agents", "votes": 13, "created_at": "2026-05-07T14:14:25.350Z" } ] }, { "id": 32138, "name": "NebuSec", "slug": "nebusec", "former_names": [ "Nebula Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c60d9cd12e8c1b315e07ee45555c24b5f74d5654.png", "website": "https://nebusec.ai", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "NebuSec is founded by the world’s #1 hacking team.\r\n\r\nWe were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser.\r\n\r\n“Audited by NebuSec” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers.", "one_liner": "Autonomous AI defense system for cyber attack", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1783007241, "tags": [ "B2B", "Security", "Cybersecurity", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/nebusec", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/nebusec.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/125323912", "x_url": "https://x.com/nebusecurity", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/c60d9cd12e8c1b315e07ee45555c24b5f74d5654.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Ankit Gupta", "url": "https://www.ycombinator.com/people/ankit-gupta" }, "founders": [ { "user_id": 1626290, "full_name": "Eten Zou", "title": "Founder/CEO", "founder_bio": "CEO & Founder @ Nebula Security (YC S26). PhD in Cybersecurity.\nFocus on automated vulnerability research.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/xiaochen-zou-phd-29540b168", "x_url": "https://x.com/etenal7", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/57bbc9606ef7588538536a132b2206290ce936f1.jpg" }, { "user_id": 3676420, "full_name": "Yuan Tan", "title": "Founder/CTO", "founder_bio": "Founder at Nebula Security (YC S26). Black Hat USA speaker. PhD dropout in System Security with experience in DARPA-funded fundamental research on program analysis.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/yuantan1/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/da759eb576807bd53522ad4e38bb45e06f4c0862.jpg" }, { "user_id": 3676409, "full_name": "Frank Wu", "title": "Founder/COO", "founder_bio": "Founder of Nebula Security (YC S26). Black Hat USA speaker and DEF CON finalist with r3kapig, the world's No. 1 hacking team in 2025. He led the DARPA AIxCC automated program repair team and shipped end-to-end RCE/LPE exploit chains on Chrome, Firefox, Linux, and Android. He pwned Google's kernelCTF multiple times with zero-days, and has published research at top academic venues such as USENIX Security and NDSS. Ph.D. dropout.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/yifan-wu-cs", "x_url": "https://x.com/FrankOverF1ow", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/54eba66a2435edef35054374d3e93dbb8d0af4ba.jpg" }, { "user_id": 3680004, "full_name": "Xiaochuan Yu", "title": "Founder/VP of Vulnerability Research", "founder_bio": "Founder at Nebula Security (YC S26). Hacked into iPhone, Chrome, Firefox, Safari, QEMU, and various things in your daily life. DEFCON finalist for 3 consecutive years. $200k+ Bug Bounty in Chrome. Core member of r3kapig, the #1 hacking team in the world in 2025, on CTFTime. M.S. from UC San Diego. Research published at USENIX Security, BlackHat USA. Ph.D. droped out. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/xiaochuan-yu-3103a5297", "x_url": "https://x.com/Nyaaaaa_ovo", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8c980e06818698012626c4e85e58e70351bf6003.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 106602, "title": "Nebula Security: Bringing beyond Mythos protection to your product", "tagline": "#enterprise #cybersecurity #security #pentest #b2b", "body": "**TL;DR:** AI has changed cybersecurity. Don't let the next HuggingFace incident happen to your product. Hire VEGA, your best security engineer — a cybersecurity agent built by the world's best hacking team. It brings the same capabilities used to uncover critical vulnerabilities in browsers, operating systems, and internet infrastructure to protect your product. [Book a demo](https://nebula-security.cal.com/etenz/30min?overlayCalendar=true) today or find us at \n\n**The Problem:** Cybersecurity has changed. When the attackers have AI, how do you prevent the next HuggingFace incident from happening to your product?\n\nWe are here at Nebula Security for one reason, we are building the **world’s best cybersecurity agent**, bringing beyond Mythos protection to your product. \n\n### AI makes you fast. We make you secure\n\nIntroducing **VEGA**, the best cybersecurity agent that is built by the world's best hackers. An agent that has discovered critical vulnerabilities in major infrastructure and earned over **$400K** in rewards from Google.\n\nWatch our [launch video](https://youtu.be/gOzg5M5DhXI)\n\nWith VEGA, you can:\n\n* Autonomously find bugs in your codebase\n* Monitor code changes 24/7\n* Analyze root causes and generate Proofs of Concept\n* Provide ready-to-use patches\n* Understand the overall code health\n\nYou focus on bringing your product to the world. We manage the security.\n\n# The world saw the proof\n\nWhile ~~other companies~~ create hypes, we show you the proof.\n\nVEGA discovered\n\n* [IonStack](https://x.com/nebusecurity/status/2069707520160227688?s=20): the world's first fullchain exploit to root Android 17.\n* [GhostLock](https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html): a 15-year-old Linux kernel vulnerability capable of compromising nearly all the Linux devices in the world.\n* [nginx-poolslip](https://x.com/nebusecurity/status/2057071579876753643?s=20) and nginx-quicburst: the world's first and second vulnerabilities capable of remotely control your Nginx servers\n* And 91 more CVEs from Linux, Windows, Chrome Browser, Firefox, Nginx, Wordpress, and the other software you use every day.\n\nWe found vulnerabilities in the world's most complex software. Let us protect your product too.\n\n# The epic hacker team\n\n* Eten (CEO): PhD in Cybersecurity; Pwn2Own winner; speaker at Linux Security Summit, Off-by-One, IEEE S&P, USENIX Security, and NDSS. Previously worked at Microsoft.\n* Yuan (CTO): Previous cybersecurity PhD; Black hat speaker; Bringing VEGA to secure Linux Kernel.\n* Xiaochuan (Research Lead): From the world's #1 hacking team; three-time DEFCON participant; Jailbreak iPhone; Black Hat speaker; Previously worked at Zellic.\n* Frank (Research Lead): From the world’s #1 hacking team; DEFCON participant; Black hat speaker. Built the world’s first Android 17 root exploit.\n\nWe have won over **$400,000** from Google by breaking into their safest system.\n\nLet us show you what we can find in your system. [Book a demo](https://nebula-security.cal.com/etenz/30min?overlayCalendar=true) today.\n\nFind us at | Email to [founders@nebusec.ai](mailto:founders@nebusec.ai)\n\n![uploaded image](/media/?type=post&id=106602&key=user_uploads/1626290/4c0c365e-7cc4-469f-9c1c-c04a82c4f1b7)\n\n", "url": "https://www.ycombinator.com/launches/RjO-nebula-security-bringing-beyond-mythos-protection-to-your-product", "votes": 12, "created_at": "2026-07-23T21:25:03.912Z" } ] }, { "id": 32418, "name": "Traceforce", "slug": "traceforce", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8a31e3b43130c5974d52608c066ff45cc746112f.png", "website": "https://www.traceforce.ai", "all_locations": "San Francisco, CA, USA", "long_description": "AI apps such as ChatGPT and Claude have become part of everyone's daily workflow, but they introduce new security risks that traditional security tools weren't built to handle. Security teams at companies from startups to Fortune 500s, are struggling to keep up.\r\n\r\nTraceforce gives a company’s security team visibility of how AI apps are being used across company’s devices, and the ability to detect and prevent security breaches and unsafe actions as early as possible.", "one_liner": "CrowdStrike for AI Agents", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1785015608, "tags": [ "SaaS", "Security", "Cybersecurity", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/traceforce", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/traceforce.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/traceforce-security", "x_url": "", "fb_url": null, "cb_url": "Traceforce, Inc", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8a31e3b43130c5974d52608c066ff45cc746112f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 2775802, "full_name": "Xia Hua", "title": "Founder/CEO", "founder_bio": "Founder at Traceforce. Previously Director of Engineering at Clumio, managing all flagship ransomware protection products. PhD in Applied Math from MIT.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/xia-hua-ph-d-28856a30/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2f3e3c63d811c56302968adf9fea80553cf68f79.jpg" }, { "user_id": 3675843, "full_name": "Varun Wadhwa", "title": "Founder/CTO", "founder_bio": "Co-founder & CTO at TraceForce. Previously Senior Software Engineer at LinkedIn, leading high-performance database systems for RAG. Before that, Staff Software Engineer at Clumio, leading distributed data infrastructure and backup. Earlier built distributed payments systems at Microsoft. BS in EECS, UC Berkeley.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/varunwadhwarcds", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3bb82e62b797bba9d01efa60a14cb9d26fe41a26.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 117100, "title": "Traceforce TraceGraph – Ask anything about your company's AI usage", "tagline": "Know where every AI token goes", "body": "**TL;DR:** TraceGraph turns every AI interaction in your company into a fully queryable graph linking users, apps, models, MCPs, and tokens. You can ask questions in plain English, slice the data any way you want, and build agentic workflows on top of it out of the box. Try it free at [traceforce.ai](http://www.traceforce.ai).\n\n**👋 Hi YC, we're Xia and Varun**\n\nWe're the founders of Traceforce (S26), and we're building security and visibility for AI agents running on company devices. We previously built one of the world’s most scalable cyber-resillience systems at Clumio.\n\n**🔥 The problem**\n\nAI usage is exploding, but the data about it is stuck in billing totals and static dashboards. When you want to know which team's agents are burning tokens, which MCPs get called most, or who is using AI in ways that don't fit policy, you end up exporting CSVs or waiting on someone to build a report.\n\n**🕸️ How TraceGraph works**\n\nTraceforce runs on the endpoint, so it captures AI activity across every app and agent. TraceGraph connects that activity into one graph, and that graph lets you do three things:\n\n* **Query anything.** Every user, team, app, model, MCP, and token is a connected node, so you can slice the data in any combination with no predefined dashboards.\n* **Ask in natural language.** For example: _\"Which teams' token usage doubled this month?\"_ or _\"Show Claude Code sessions that called the Supabase MCP.\"_\n* **Build agentic workflows out of the box.** Put agents on top of the graph to flag spend spikes, send weekly usage reports, or escalate risky patterns automatically.\n\n🎥 **Demo:**\n\n\n\n**🙏 Our asks**\n\n* **Try it:** Install in under 5 minutes and see your team's token usage today.\n* **Intros:** Heads of engineering, IT, finance, or security leaders managing AI rollouts and spend.\n* **Feedback:** What would you ask your AI usage data? We'll show you the answer.\n\n📩 xia@traceforce.ai\n\nBook a time ", "url": "https://www.ycombinator.com/launches/USi-traceforce-tracegraph-ask-anything-about-your-company-s-ai-usage", "votes": 7, "created_at": "2026-09-28T14:55:58.682Z" }, { "id": 107460, "title": "Traceforce — Catch risky agent actions your security gateway will never spot", "tagline": "Company-wide security monitoring for AI apps", "body": "# \\*\\*\\*\\*\n\n**TL;DR:** AI agents are quietly pulling secrets off your employees' laptops — and your security gateway can't see it. Traceforce installs in under 5 minutes and gives you a full inventory of every AI app, MCP, and skill running on every device, then lets you block the dangerous stuff in real time. Built by the ex-Clumio engineering team. Traceforce is already deployed on 6,000+ devices across 10+ enterprise customers, with 40+ active pilots worth $3M+ in ARR. Try it free at [www.traceforce.ai](http://www.traceforce.ai).\\\n\\\n**The incident that started this**\\\nAt our last company, an AI coding agent running on a developer's laptop scraped what looked like database credentials and pushed them straight into a public GitHub repo. It took us _weeks_ to investigate, rotate credentials, and clean up the fallout. We got lucky — they were dev-environment creds, so no customer was affected. Next time, nobody will be that lucky.\\\n\\\nThat's the whole problem with AI at work now: ChatGPT, Claude, Cursor, and Claude Code are everywhere on employee devices, wired into your data through MCPs and skills that no one is tracking. The tools your security team already owns — gateways, proxies, enterprise APIs — never see any of it, because the risky action happens _on the device_, before it ever hits the network.\\\n\\\n**Why us**\\\nWe're Xia and Varun. We ran engineering at Clumio, a cyber-resilience company acquired by Commvault in 2024, where Xia was Director of Engineering and Varun was tech lead. We've spent our careers building security infrastructure — and we validated this problem with 50+ CISOs and CIOs before writing a line of code. Every one of them said the same thing: \\_I need to see and control this without slowing my engineers down.\\_\\\n\\\n**Why on-device — and why gateways can't do this**\\\nCompetitors sit at the gateway or plug into enterprise APIs. That misses the self-adopted AI tools employees install themselves, and it can't see how an agent is actually connected to your data via MCPs. Traceforce runs on the endpoint, so we see the full picture — which AI apps are running, what MCPs and skills they're wired to, what data they can reach — and we can _warn or block_ an unsafe action the moment it happens, not after it's already on the network.\\\n\\\n**What you get**\n\n* Install in <5 min. Full inventory of every AI app, MCP, and skill across your devices within 30 minutes.\n* Discover shadow AI and see exactly how each agent connects to your data sources.\n* Real-time controls: warn and block unsafe actions (like uploading a client list to a chatbot) before they happen.\n* Open-source MCP pentesting: we also built [mcp-xray](https://github.com/traceforce/mcp-xray) to dynamically detect vulnerable MCPs — try it today.\n\n\\\n**Traction**\n\n* Securing 6000+ employee devices across 10+ enterprises.\n* Customer quote from a leading database provider with over 500 employees: “To govern AI, we need full visibility into AI usage before we can place any type of controls. Traceforce gives us both visibility and control we needed”.\n* 40+ Active pilots including multiple Fortunate 500 enterprises.\n\n\\\n\\\n**Our ask**\n\n* **Intros** to security engineers, security architects, DevSecOps teams, or CISOs securing AI adoption. (We're the ex-Clumio team — that's usually enough to get a conversation.)\n* **Try Traceforce free** on your own laptop — <5 min to install, and we want candid feedback, good or bad.\n* **Challenge us:** tell us which AI apps, MCPs, or workflows we should support next.\n* **Share** with anyone wrestling with security over ChatGPT, Claude, Cursor, Claude Code, or custom MCPs.", "url": "https://www.ycombinator.com/launches/RxE-traceforce-catch-risky-agent-actions-your-security-gateway-will-never-spot", "votes": 7, "created_at": "2026-07-28T16:50:42.184Z" } ] }, { "id": 32624, "name": "Fabraix", "slug": "fabraix", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/d3d83aa2013bbe6b22b37f316b294d0c717eea35.png", "website": "https://fabraix.com", "all_locations": "San Francisco, CA, USA", "long_description": "Fabraix builds state-of-the-art AI red-teaming agents that continuously detect security vulnerabilities in customer-facing AI. Our product, Nyx, has already found vulnerabilities in agents at dozens of Fortune 500 companies. On AgentHarm, the leading benchmark for offensive AI security, Nyx achieved a 78% attack success rate, compared with 67% for GPT-5.6 Sol.\r\n\r\nAI agents can change more often than teams can test them. A new model, prompt, tool, permission, or data source can change what an agent does, even when the application code stays the same. And AI is also increasing how much software companies produce and how often it changes. We built Nyx to automate the work required to red-team AI agents. It is multi modal by design and interacts with the target indirectly through controlled replicas of SaaS products and websites that we maintain, placing malicious payloads in webpages, documents, files, messages, and tool outputs to test how an agent behaves under different conditions.\r\n\r\nNyx often finds its first vulnerability within minutes or hours rather than days or weeks. Because the work is fully automated, companies can repeat the test with every change and at a much lower cost than what a 7-figure red-teaming (and point-in-time) engagement would require.\r\n\r\nWe're also the team behind ACE (Adversarial Cost to Exploit), a benchmark that measures AI security in terms of how much it costs attackers to break an AI system; providing a game-theoretic framework to understand how motivated a rational attacker would be in exploiting the system.", "one_liner": "The world's frontier hacker of AI agents.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1783913331, "tags": [ "Reinforcement Learning", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/fabraix", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/fabraix.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/fabraix/", "x_url": "https://x.com/FabraixHQ", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/d3d83aa2013bbe6b22b37f316b294d0c717eea35.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jon Xu", "url": "https://www.ycombinator.com/people/jon-xu" }, "founders": [ { "user_id": 693526, "full_name": "Ahmed Aly", "title": "Founder/CEO", "founder_bio": "Co-founder @ Fabraix, building a frontier hacker agent that finds failure modes and security exploits in AI systems before real users do. Previously the first data scientist at Sequoia-backed Two, where he built AI systems for adversarial environments from scratch and scaled them to process $1B+ in annual B2B transactions, averting $50M in losses for multiple Fortune 150 companies. A published researcher with multiple papers in Q1 journals and a UCL PhD drop-out.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ahmed-a-657264b4/", "x_url": "https://x.com/zachdotai", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/72bc6e2cde8727671fbf9c026c0c9a0ffcc80f4f.jpg" }, { "user_id": 2769430, "full_name": "Ibrahim Abdu", "title": "Founder/CTO", "founder_bio": "Red-teamed AI agents in Meta's Privacy org; built an SRE agent triaging 3M+ errors/month, saving 10,000+ engineering hours a year. Built a compiler for insider-trading detection at TradingHub: $100M+ in daily trades; Oxford PPE, top 8% of cohort.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/i-a-7352b7137/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e3d923fd8bbb4ccfb176340c73f6ebc968516321.jpg" } ], "jobs": [], "news": [ { "title": "Meet The YC Startups Betting On What Comes Next", "url": "https://www.forbes.com/sites/dariashunina/2026/09/03/meet-the-yc-startups-betting-on-what-comes-next/", "date": "Sep 03, 2026" } ], "launches": [ { "id": 106270, "title": "Fabraix: The Frontier Agent that Hacks Customer-facing AI.", "tagline": "Fabraix builds AI red-teaming agents that continuously detect security vulnerabilities in customer-facing AI. We already found vulnerabilities in agents at dozens of Fortune 500 companies.", "body": "**TL;DR**: Fabraix builds AI red-teaming agents that continuously detect security vulnerabilities in customer-facing AI. Our product, Nyx, has already found vulnerabilities in agents at dozens of Fortune 500 companies, and hits a 78% attack success rate on AgentHarm (leading offensive AI security benchmark) vs. 67% for GPT-5.6 Sol.\n\n**Ask**: If your team ships customer-facing AI agents (chat, voice, browser, or coding) and needs to continuously test them for security vulnerabilities, find us at [founders@fabraix.com](mailto:founders@fabraix.com).\n\n\n\n**The Problem**\n\nAI agents introduce new vulnerabilities not present in traditional software..\n\nIn order for agents to be truly useful, they must be trusted to interact with untrusted surfaces like MCPs, websites and files, take real actions, and have access to confidential data. You can’t tell your defenses are sound by just reading your prompts since the agent's behaviour is not deterministic. The best thing to do is run your agent and really try to break it.  \n\nDoing this red-teaming process manually is time consuming, costly, and you are unlikely to catch everything. And as soon as the agent is updated, you need to repeat it. Security teams simply don’t have the bandwidth to keep up with the rapid deployment inside organisations.\n\n**Our Solution**\n\nNyx is our red-teaming agent that tests customer-facing AI agents, via direct interaction and also indirectly via its environment. It requires no access to your agent’s source code in order to test.\n\nNyx is highly adaptive when attacking. Rather than cycling through hard coded payloads like existing tools, it dynamically adjusts its attack strategies based on your agents defenses and responses. It probes your agent over a wide surface area of attack vectors, and deep dives This adaptive approach makes it 20x more effective as a red-teamer compared to other solutions.\n\nWe maintain a library of over 10,000 attack strategies and jailbreaks. These are high level strategies which are used by Nyx to generate dynamic adaptive attacks, over multiple turns. \n\nEvery finding includes the attack steps, the agent’s responses, and the resulting failure for you to reproduce. You can then rerun the same test after a release to check whether the failure remains fixed. \n\nOn the AgentHarm benchmark, Nyx achieved a 78% attack success rate, compared with 67% for GPT-5.6 Sol. Nyx has also found exploitable failures in public-facing agents operated by dozens of Fortune 500 companies.\n\nWe also built ACE (Adversarial Cost to Exploit), a benchmark that measures AI security in terms of how much it costs attackers to break an AI system; providing a game-theoretic framework to understand how motivated a rational attacker would be in exploiting the system.\n\n**The Team**\n\nWe both have a lot of experience building and securing AI agents at scale.\n\nIbrahim built AI agents at Meta that diagnosed and fixed production errors. Before that, he built compilers and database engines in Fintech. He graduated from Oxford in the top 8% of his cohort.\n\nAhmed led international payments fraud team at Monzo. Before that, he was the first data scientist at a Sequoia-backed startup, where he built its fraud engine from scratch into processing more than $1B in annual B2B transactions and preventing tens of millions in losses for Fortune 150 companies. He has published several peer-reviewed research papers in Q1 journals.\n\nWe previously worked together, and have known each other for almost four years.\n\n![uploaded image](/media/?type=post&id=106270&key=user_uploads/693526/5f437cbd-2009-40cc-8c69-746da9ea8300)\n\n**The Ask**\n\nIf you ship a customer-facing (chat, voice, browser, or coding) agent, we can help you find all the failure modes and built a self-healing loop to discover, triage, and maintain secure AI agents.\n\n[founders@fabraix.com](mailto:founders@fabraix.com)", "url": "https://www.ycombinator.com/launches/Re2-fabraix-the-frontier-agent-that-hacks-customer-facing-ai", "votes": 127, "created_at": "2026-07-20T15:06:58.917Z" } ] }, { "id": 33059, "name": "Palisade", "slug": "palisade-2", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/15205df0821b37ecf5cd82136bd682c2cb65c1b2.png", "website": "https://palisade-ai.com/", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "AI that finds and fixes OS-level vulnerabilities across device fleets", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1784742432, "tags": [ "SaaS", "B2B", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/palisade-2", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/palisade-2.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/palisade-ai/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/15205df0821b37ecf5cd82136bd682c2cb65c1b2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jon Xu", "url": "https://www.ycombinator.com/people/jon-xu" }, "founders": [ { "user_id": 2688178, "full_name": "Fnu Prince", "title": "Founder", "founder_bio": "Left Caltech at 18 to start Palisade (YC S26). Previously did red-teaming at 16, USACO Platinum/USAPhO HM/AIME, built my own OS for fun (pre-Claude/Codex)", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/fnu-prince-a98405276/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/382f016fead85bdbb69a24e2165f092473c60b9c.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 106995, "title": "Palisade - AI that detects and fixes OS vulnerabilities across every endpoint in minutes", "tagline": "AI that finds and fixes OS-level vulnerabilities across device fleets", "body": "**TL;DR:** For companies running large fleets of OS-level endpoints (running GPU clusters, having a network of cloud devices, or deploying on-device), Palisade detects and fixes operating-system vulnerabilities (privilege escalation, remote code execution, memory corruption) that are extremely hard to detect and mitigate without applying AI to kernel-level data (syscalls, eBPF traces, process/memory events, network packets). A fix that used to take weeks to roll out, Palisade now applies in minutes across every endpoint.\n\nHey YC! I'm Prince, an ML researcher and engineer who dropped out from Caltech at 18 to build Palisade.\n\n**What’s the problem:** Modern attacks increasingly target the operating system, but most security products only observe the network, cloud, or application layers. That leaves OS vulnerabilities among the hardest problems to detect and the slowest to remediate across a fleet.\n\n**Why I’m building this:** Since I was 16, I have done plenty of professional red-team and blue-team security work. One pattern kept showing up: OS-level vulnerabilities were consistently the hardest to handle. Detection required low-level visibility, and even after identifying a vulnerability, rolling out a mitigation across hundreds or thousands of machines often took weeks. My background in both machine learning and operating systems convinced me this didn't have to be a manual process, so I built Palisade to automatically detect and remediate these vulnerabilities at the kernel level across an entire fleet.\n\n**What Palisade does:** Palisade watches your systems at the kernel level—syscalls, eBPF traces, process and memory events, and network packets—and uses AI to find OS vulnerabilities other tools miss, then implement the fix automatically across every endpoint.\n\n![uploaded image](/media/?type=post&id=106995&key=user_uploads/2688178/fa8c6d6a-b058-4f44-87d0-5511d038718b)\n\n_The Palisade control plane, live against a real kernel (LSM-BPF). The live feed at the bottom: every row is a real syscall decision._\n\nThe vulnerabilities it catches are the ones you can't see from the app or network layer alone:\n\n* Privilege escalation\n* Remote code execution\n* Memory corruption\n\nMost are caught before an exploit ever happens, and the fix is applied immediately, fleet-wide. The same patch that used to take weeks now lands in minutes.\n\n![uploaded image](/media/?type=post&id=106995&key=user_uploads/2688178/2f4e756d-1348-44a2-bdce-bb3491925da5)\n\n_The host audit: real findings ranked by severity. The bottom one is the cloud-metadata exposure: the same path behind the Capital One breach. One click on **Apply fix** and it's installed as a kernel rule._\n\nPalisade can already detect and fix real problems:\n\n* CVE-2024-1086: use-after-free in the Linux kernel's netfilter (nf_tables); local privilege escalation to root\n* CVE-2025-6019: libblockdev/udisks privilege escalation to full root\n* CVE-2025-32463: sudo --chroot local privilege escalation to root\n\n**Who it's for:** Companies running a lot of OS-level endpoints, where a single kernel vulnerability multiplies across the whole fleet. Whether it’s network servers or GPUs, we have you covered.\n\n\n\n**Our asks:**\n\n* Intros: if you run a large fleet of OS-level endpoints, or know a security/infra lead who does, I'd love an intro.\n* See the demo and tell me if you’d use it. Brutal feedback welcome.\n\n— [prince@palisade-ai.com](mailto:prince@palisade-ai.com), , DMs welcome", "url": "https://www.ycombinator.com/launches/Rpj-palisade-ai-that-detects-and-fixes-os-vulnerabilities-across-every-endpoint-in-minutes", "votes": 8, "created_at": "2026-07-23T00:33:01.523Z" } ] }, { "id": 33179, "name": "Verdict Machine", "slug": "verdict-machine", "former_names": [ "TxAI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/efc3c74e529cc296ebd75ff470655d005300ddf0.png", "website": "https://verdictmachine.com", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Verdict Machine uses AI to understand each financial institution's complete on-chain environment, assess its cyber risk and generate tailored controls. The same live model powers transaction prevention, continuous cyber diligence, security posture and cost-efficient wallet screening. Before execution, Verdict Machine evaluates proposed transactions against the institution's active policies.\n\nIn our first weeks, we started POCs with asset managers and digital-asset infrastructure providers whose systems move billions of dollars every week for financial institutions. We're now in active evaluations with digital-asset teams at some of the world's largest banks.\n\nThe founding team launched and led blockchain security at Check Point (NASDAQ: CHKP).", "one_liner": "AI cybersecurity for financial institutions' digital assets", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1786374737, "tags": [ "Crypto / Web3", "Security", "AI" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Israel", "Middle East and North Africa" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/verdict-machine", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/verdict-machine.json", "year_founded": 2026, "city": "Tel Aviv-Yafo", "country": "IL", "linkedin_url": "https://www.linkedin.com/company/verdict-machine/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/efc3c74e529cc296ebd75ff470655d005300ddf0.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 85721, "full_name": "Dan Danay", "title": "Founder/CEO", "founder_bio": "Co-founder and CEO at Verdict Machine (YC S26). Previously Head of Blockchain Security at Check Point (NASDAQ:CHKP), launching their digital assets division. Founded keyTango (MPC-powered crypto clearing house) and Airmada (YC W16, automated drone stations). MIT Sloan MBA. Captain in Israeli Navy, commanded missile ship and naval electronics school.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/dandanay/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/821ae7bdee6621edf11f400f8aee456ae9e5b649.jpg" }, { "user_id": 3784711, "full_name": "Isaac Grossman", "title": "Founder", "founder_bio": "Co-founder and CTO at Verdict Machine (YC S26). Previously VP Engineering at Fhenix, where he led development of an FHE-enabled L2, and at SCRT Labs, where he helped scale Secret Network to a top-100 crypto asset. Co-founded keyTango, an MPC-powered crypto clearing house.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/itzik-grossman", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/729b4a4e5f449d069ff7dde45b6a9d7af5cb6e7c.jpg" }, { "user_id": 3784793, "full_name": "Liran Kogan", "title": "Founder/CPO", "founder_bio": "Co-founder and CPO at Verdict Machine (YC S26). Previously launched and led blockchain-security products at Check Point (NASDAQ: CHKP), and led payments and FX products at Payoneer (NASDAQ: PAYO). NYU + INSEAD.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/liran-kogan/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b8ffca19f9687957470301ec575fb6f9cab05b65.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 110493, "title": "Verdict Machine: AI cybersecurity for financial institutions’ digital assets", "tagline": "AI that understands each institution's complete on-chain environment, assesses its cyber risk, and generates tailored controls to prevent hacks", "body": "Hey all! We are Dan, Liran, and Isaac. Before Verdict Machine, we launched blockchain security at Check Point (NASDAQ: CHKP).\n\n**TL;DR:** Blockchain is becoming critical infra for all finance. More than $3.4B in digital assets was stolen in 2025. Verdict Machine is AI cybersecurity for financial institutions' digital assets. We use AI to understand each institution's environment, assess cyber risk and generate tailored controls that prevent hacks.\n\n**Building for:** banks, asset managers, DeFi protocols and infra, companies that use stablecoins or RWAs. If that’s you, email us at [founders@verdictmachine.com](mailto:founders@verdictmachine.com).\n\n\n\n### Signed is not safe\n\nSophisticated hackers don’t need to compromise a wallet to steal funds. They only need to trick an authorized operator into approving one malicious transaction.\n\nOn-chain, settlement is final. There is no chargeback and no reversal. The security decision has to happen before the transaction executes.\n\nAttackers are sophisticated and see the entire institution, while existing security tools see fragments:\n\n* Hidden dependencies. Vendors, protocols, bridges and infrastructure are assessed separately or not at all.\n* Limited context. Controls check a transaction, not the institution behind it.\n* Stale controls. Rules are written once and reviews run once, while the institution and its risk keep changing.\n\n \n\n### How Verdict Machine works\n\nVerdict Machine uses AI to secure each client end to end.\n\n**Inventory.** It builds the complete inventory of a client’s on-chain environment: assets, wallets, smart contracts, users, vendors, counterparties, and transaction patterns.\n\n**Posture.** It quantifies cyber risk and recommends tailored controls to minimize exposure.\n\n**Enforce controls.** Before execution, it evaluates each proposed transaction to prevent attacks in real time.\n\nThe same live model powers every workflow:\n\n**Real time prevention.** Security and compliance teams secure their most critical transactions.\n\n**Continuous cyber diligence.** Asset managers and risk teams underwrite the cyber risk of protocols, vendors, and counterparties before and after capital is deployed.\n\n**Wallet screening.** Payments and stablecoin teams screen for fraud, unauthorized transactions, and risky wallets.\n\n### Why now\n\nInstitutions are racing to launch stablecoin and tokenized-asset products. MiCA and DORA are in force, so the people who own this risk now have to show their work. Attackers punish under-protected organizations.\n\nFireblocks and Chainalysis reached $8B valuations for digital asset custody and compliance. Cybersecurity for on-chain finance is a bigger opportunity. Every financial institution is going to use digital assets and therefore will require digital-asset cybersecurity.\n\n### Traction\n\nWe left Check Point the day before Y Combinator started. We already have POCs with asset managers and digital-asset infrastructure providers moving billions of dollars weekly for financial institutions, and we are in active evaluations with a digital-asset team at one of the world's largest banks.\n\n### Why us\n\nWe previously launched and led blockchain security at Check Point (NASDAQ: CHKP). Our CTO Isaac is a cyber veteran from Matzov, Israel’s cryptography unit. We are crypto natives with many years building infra for crypto and fintech. We built Verdict Machine to bring AI-native, institution-specific security to on-chain finance.\n\nManaging or deploying crypto, stablecoins, or tokenized assets? Talk to us.\n\n[verdictmachine.com](http://verdictmachine.com) · [founders@verdictmachine.com](mailto:founders@verdictmachine.com)", "url": "https://www.ycombinator.com/launches/Sk9-verdict-machine-ai-cybersecurity-for-financial-institutions-digital-assets", "votes": 24, "created_at": "2026-08-17T15:00:01.008Z" } ] }, { "id": 35126, "name": "Armorer Labs", "slug": "armorer-labs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9fd9c58c48b1017644c81d6d495140aab28b5782.png", "website": "https://armorerlabs.com", "all_locations": "San Francisco, CA, USA", "long_description": "Armorer helps companies in regulated industries ship their own AI agents faster and keep them secure in production.\n\nMost security tools flag an issue and file a ticket. Armorer assesses your agent and simulates attacks to find the real issues. Then it creates a verified fix that stops the attack without breaking the business, ready for your approval in about 4 hours.\n\nIn production, Armorer checks every agent action in milliseconds, with no GPU needed. It detects malicious behavior such as prompt injection, goal hijacking and data leaks, then allows, holds or denies the action.\n\nArmorer's detection models beat every other detector we tested on six public benchmarks. Armorer is 22% more accurate than JEV while being 88x faster, so users won't feel the delay.\n\nWe spent years building and evaluating AI security systems together at AWS, including its first customer-facing AI security agent, which scaled to 100k+ customers. Armorer is backed by Paul Vixie, Internet Hall of Fame inductee and former AWS Deputy CISO.", "one_liner": "Continuous security verification for AI agents in regulated industries", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1792423718, "tags": [ "Developer Tools", "DevSecOps", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/armorer-labs", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2026/armorer-labs.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/armorer-labs/", "x_url": "https://x.com/Armorer_Labs", "fb_url": null, "cb_url": null, "github_url": "https://github.com/ArmorerLabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9fd9c58c48b1017644c81d6d495140aab28b5782.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Kulveer Taggar", "url": null }, "founders": [ { "user_id": 3565232, "full_name": "Daniel Begimher", "title": "Founder/CEO", "founder_bio": "Co-founder of Armorer Labs. Previously led the global Application Security technical field community at AWS, where he led development of AWS Security Incident Response's AI-powered investigative agent from early development through public launch. Author of SIR-Bench - evaluation method for security agents; author of ASH code scanner (200K+ monthly clones); co-created ThreatForest, selected for Black Hat USA 2026 briefing. Led incident response for Fortune 500 breaches and red-team operations.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/begimher", "x_url": "https://x.com/begimher", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/65ec4b4f705715309b8e611b94be913d1dd8b4bb.jpg" }, { "user_id": 2650696, "full_name": "Cristian Leo", "title": "Founder/CTO", "founder_bio": "Co-Founder of Armorer Labs (YC F26). Led AI security science at AWS, building and evaluating AI systems for security.\n\nHe is the creator of ThreatForest, the first open source automated threat modeling agent, and a co-author of SIR-Bench, a benchmark for evaluating AI security investigations. He is a Black Hat and re:Invent speaker.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/cristian-leo", "x_url": "https://x.com/cristian_le0", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4915942599f3bc8c2903c0737b6be6746b2d15a9.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 36347, "name": "Latent", "slug": "trylatent", "former_names": [ "latent" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/21bc57f59a4d430a3377808350ec1df0915386dd.png", "website": "http://runlatent.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "Latent catches wrong or unsupported LLM answers before they reach your users. Instead of running a second model to check every output, it reads the model's own internal state as it generates, so every request is verified with no added latency, no extra inference cost, and nothing leaving your deployment. Teams running LLMs in production, in finance, legal, healthcare and customer support, get a review queue of the answers most likely to be wrong, calibrated to their own model and traffic, with a plain explanation of why each one was flagged.", "one_liner": "Catch wrong LLM answers before your customers do", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1791243197, "tags": [ "Fraud Detection", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/trylatent", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2026/trylatent.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/runlatent", "x_url": "https://x.com/runlatentai", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/21bc57f59a4d430a3377808350ec1df0915386dd.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/c1b0002c0ecf5d467cc3f45b070da5afc1a5ae12.png" ], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [], "jobs": [], "news": [], "launches": [] }, { "id": 37864, "name": "OpenHack", "slug": "openhack", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3665e2fbd95736778f3748429060face49d74d6d.png", "website": "https://openhack.com", "all_locations": "San Francisco, CA, USA", "long_description": "OpenHack is an always on AI Security Engineer. OpenHack understands your business, system design and developer intent like a real security engineer. It ingests all this context to find the hardest vulnerabilities through AI codebase scanning, AI pentesting and Supply Chain Security. It verifies and prioritizes vulnerabilities automatically, and filters out false positives like a real security engineer drastically reducing overhead.", "one_liner": "Always-on AI security engineer", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1790387763, "tags": [ "DevSecOps", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/openhack", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2026/openhack.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/openhackai", "x_url": "https://twitter.com/openhack", "fb_url": "https://www.facebook.com/openhackai", "cb_url": null, "github_url": "https://github.com/openhackai", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3665e2fbd95736778f3748429060face49d74d6d.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Max Kolysh", "url": null }, "founders": [ { "user_id": 318539, "full_name": "Ananay Arora", "title": "Founder/CEO", "founder_bio": "Founder/CEO at OpenHack (YC F26). \n\nHacking for over 12 years, with bug bounties from Meta, Apple, Perplexity, YC, Department of Homeland Security and more. Author of CVE-2026-36755. \n\nPreviously SWE @ Apple and Cybersecurity @ ASU.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ananay", "x_url": "https://twitter.com/ananayarora", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d72b9a8183ee048345720aed35bf764c7239d713.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 38127, "name": "DeepMark", "slug": "deepmark", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4dfcb45ad1cf6b4da58c1a44a770eb98ac4ec79b.png", "website": "https://www.deepmark.me", "all_locations": "San Francisco, CA, USA", "long_description": "DeepMark is the authentication layer for AI voice. When an AI agent speaks, we embed a compact, machine-readable ID directly into the audio, not in metadata, which gets stripped the moment a file is touched. The ID resolves to a trust record, so a bank, a call center, or the person on the line can verify in real time who the agent is.", "one_liner": "A live watermark inside AI voice that survives phone calls", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1789029188, "tags": [ "B2B", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/deepmark", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2026/deepmark.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/deepmark-me/", "x_url": "https://x.com/deepmark_me", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/deepmark-inc", "github_url": "https://github.com/deepmark", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4dfcb45ad1cf6b4da58c1a44a770eb98ac4ec79b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Max Kolysh", "url": null }, "founders": [ { "user_id": 2023960, "full_name": "Slavko Kovačević", "title": "Founder/CEO", "founder_bio": "Founder/CEO at DeepMark (YC F26). PhD candidate in Computer Science. Cited by Meta, Microsoft, Sony, and Adobe.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/slavkokovacevic/", "x_url": "https://x.com/realslavko", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/de19c1d8562fd357c3a264bee57209047824e480.jpg" }, { "user_id": 2547276, "full_name": "Kosta Pavlović", "title": "Founder/CSO", "founder_bio": "Founder/CSO at DeepMark (YC F26). PhD in Computer Science. Pioneer of learning-based digital audio watermarking.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/kosta-pavlovic", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/283edba47bb01fec63f8e445013165464636ab64.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 116233, "title": "DeepMark - Reinventing Trust in Voice", "tagline": "A live watermark inside AI voice that survives phone calls", "body": "\n\nHey, we are Slavko and Kosta 👋\n\nWe have been working together for six years, first as two researchers at the University of Montenegro, now as founders. Somewhere along the way, we became best friends. Kosta is our CSO, and I am the CEO.\n\n**The problem**\n\nVoice is uniquely vulnerable to impersonation. A few seconds of audio is enough to clone anyone, and the same voice agents that answer a bank's phone can be turned around and pointed at the bank's customers. People have started to hesitate before picking up. Good technology scales good outcomes, and it scales bad ones just as well. Our job is simple. Restore trust in voice.\n\n**What we built**\n\nDeepMark is real-time audio watermarking for AI voice. When an AI agent speaks, we put a certificate inside the sound itself, on the voice company's side, as the voice is being generated. Not metadata, which gets stripped the moment a file is touched. The certificate becomes part of the voice.\n\n![uploaded image](/media/?type=post&id=116233&key=user_uploads/2023960/b3239118-82c1-4fb4-82c2-f4363685a0be)\n\nThen the voice goes out into the real world, and the real world is rough on audio. Compression, codecs, a bad connection, a cheap speaker, a worse microphone. Think about how flat a human voice sounds over the phone. Our certificate survives the trip. On the other end, a phone, a call center, or an API reads it and shows who is speaking, who issued the certificate, and whether this agent is allowed to be on the line. Detectors ask whether audio is fake. We answer who is authorized to speak.\n\n![uploaded image](/media/?type=post&id=116233&key=user_uploads/2023960/171abdf5-efb9-442b-a153-dbbb1ba981d4)\n\n**Why this is hard**\n\nFour things have to hold at the same time. It has to be real time, or a phone call makes no sense, and voice companies already fight for every millisecond. It has to leave the audio quality alone, nobody trades a worse voice for a safer one. It has to survive the phone line. And the ID has to be long enough, because the longer the ID, the more certificates we can issue. A watermark that works beautifully in the lab falls apart the moment audio meets a phone line. And a live call has no file to sign. Nothing survives the trip except the sound itself, so the identity has to live inside the sound. We spent years hitting that wall. Then we built a tool that measures all four at once and published it, so anyone can check our work, and everyone else's.\n\n![uploaded image](/media/?type=post&id=116233&key=user_uploads/2023960/a9930538-1deb-4609-8938-4bdbcf8c88ce)\n\n**How we got here**\n\nOur mentor, who did his PhD in digital watermarking, told us not to bother. The field was saturated, nothing left to contribute. We were too stubborn to listen, and our learning-based approach turned out to be one of the first of its kind.\n\nKosta wrote his PhD on watermarking along the way. I am still writing mine! We published some of the earliest work in deep audio watermarking, cited by teams at Meta, Microsoft, Sony, and Adobe. This year our robustness benchmark landed in IEEE Access, and our AWARE paper was accepted at EUSIPCO. Before YC, we signed our first platform license with a leading voice AI provider, and it is now in production.\n\n**Our ask**\n\nWe want to meet voice AI companies. If you build voice models, book 20 minutes with us and we will run DeepMark on your own audio, so you can see the mark survive your calls. The EU AI Act's marking rules already apply and the 2 December deadline for systems on the market is close, so this is a good month to talk. If you know someone at a voice AI platform, an intro means a lot to us.\n\n[slavko@deepmark.me](mailto:slavko@deepmark.me), or book a demo at [deepmark.me](http://deepmark.me). Thanks for reading. 🇲🇪 → 🌉", "url": "https://www.ycombinator.com/launches/UEj-deepmark-reinventing-trust-in-voice", "votes": 29, "created_at": "2026-09-22T16:00:00.415Z" } ] } ]