[ { "id": 9, "name": "WireOver", "slug": "wireover", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://wireover.com", "all_locations": "Boston, MA, USA; Cambridge, MA, USA", "long_description": "WireOver is a desktop application that leverages peer-to-peer technology for sending files privately. It's free and unlimited, solving an unmet need for sending large files easily. Pro accounts get incredibly strong security, with end-to-end encryption.", "one_liner": "Really secure file sending for big files.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Productivity", "launched_at": 1322045564, "tags": [ "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2012", "status": "Inactive", "industries": [ "B2B", "Productivity" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/wireover", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2012/wireover.json", "year_founded": null, "city": "Boston", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/wireover", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 53900, "full_name": "Amit Bansil", "title": "Founder/CPO", "founder_bio": "Amit is a Boston-based computer programmer who started out writing interactive chemistry simulation tools in the late ‘90s. Since then, he has worked on software for everything from dispatching trucks to preventing adolescent substance abuse. If you’ve read this far, he would love to grab a coffee with you.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/amitbansil/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d4f6343c33358afa6da471cc3da96335ec9a950c.jpg" }, { "user_id": 27026, "full_name": "Trenton Ashburn", "title": "Founder", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/pub/trenton-ashburn/1/199/807", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/08b2dea08c95abd2f575e53bebc99ab7f829f2d0.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 49, "name": "Authy", "slug": "authy", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/ff56b0d3df7e01477d520a86db8ab9169a0839bb.png", "website": "http://authy.com", "all_locations": "San Francisco, CA, USA", "long_description": "Authy provides strong authentication for the connected world, protecting people and the enterprise against malicious attacks. Our two-factor authentication (2FA) security solution enables organizations to minimize risk while enhancing the user experience.\r\n\r\nAuthy 2FA provides a fast-to-implement, highly scalable and proven 99.999 % reliable alternative to passwords. Used by 11,000+ websites serving 2 million consumers worldwide, it's designed to give users the ability to self-service or easily manage their own 2FA experience. Coinbase, CloudFlare, Humble Bundle and Twitch.tv are just some Authy clients. \r\n\r\nAuthy is a Twilio company. Follow us on:\r\nTwitter at @Authy\r\nFacebook at https://www.facebook.com/authysec\r\nGoogle+ at https://plus.google.com/+Authy\r\nGitHub at https://github.com/authy", "one_liner": "Authy is a Two-Factor Authentication platform for developers", "team_size": 201, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1322045942, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2012", "status": "Acquired", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/authy", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2012/authy.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/authy-inc", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/ff56b0d3df7e01477d520a86db8ab9169a0839bb.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 14658, "full_name": "Daniel Palacio", "title": "Founder/CEO", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/danielpalacio", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/98526929da1002e4c7074884b14d6be35f6a4dae.jpg" }, { "user_id": 51890, "full_name": "Gleb Chuvpilo", "title": "Founder", "founder_bio": "Founder @ Thor & Thundermark | ex Thiel Macro, Palantir, Goldman Sachs | Founded Authy (Y Combinator), Ride, Pager | MS in CS @ MIT & MBA @ Wharton", "is_active": false, "linkedin_url": "http://www.linkedin.com/in/chuvpilo", "x_url": "https://twitter.com/chuvpilo", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/82d119cf52ea46882489ef13d997f80fbaa89be2.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 55, "name": "Documents.Me", "slug": "documents-me", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://documents.me", "all_locations": "San Francisco, CA, USA; Santa Clara, CA, USA", "long_description": "Nouvou offers mobile file sharing and encryption solutions for enterprises. The company was founded in 2011 and is based in Santa Clara, California", "one_liner": "Client-side encryption for your devices and the cloud.", "team_size": 0, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1322046002, "tags": [ "Security", "Privacy" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2012", "status": "Inactive", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/documents-me", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2012/documents-me.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/nouvou-inc", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 601, "full_name": "Sai Thumuluru", "title": "Founder/CEO", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/saithumuluru/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7309ab2cc39af716555fe8a10b08c12a202f5c6f.jpg" }, { "user_id": 45269, "full_name": "Anirudh Ramachandran", "title": "Founder/CTO", "founder_bio": "", "is_active": false, "linkedin_url": "", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0aaa662631332d451bb779eb7f006fa32983bb86.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 183, "name": "AeroFS", "slug": "aerofs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/26b425639c740c8e014304e1ad6412f83c2d1dba.png", "website": "http://aerofs.com", "all_locations": "San Francisco, CA, USA", "long_description": "AeroFS enterprise file sync and share & collaboration solution deploys on your infrastructure. Your files remain secured by your own security protocols, removing the risk associated with relying on your vendors to secure your data.\r\n\r\nThe service has a Dropbox like user experience. Now, both the end user and the IT team can both get what they are looking for out of a file sharing tool.\r\n\r\nWe are funded by some of Silicon Valley's best investors and entrepreneurs:\r\n\r\nAvalon Ventures\r\nA16Z Seed\r\nYCombinator\r\nSVAngel\r\nChris Sacca (Lowercase Capital)\r\nMaynard Webb (COO eBay)\r\nJerry Yang (Founder Yahoo!)\r\nPaul Buchheit (Founder FriendFeed)\r\n\r\nWe're hiring! https://aerofs.com/company/careers\r\nYou will have the opportunity to work as part of a small team. This means that you will be \"CEO\" of whatever you create. Our size gives us agility in ways that large companies do not have: We push out code almost daily (on a desktop platform!) to thousands of users.\r\n\r\nWe're not just building a company; we're building a family. Many of us are new to the area, so company trips, get togethers, and BBQs are par for the course!", "one_liner": "Secure Enterprise Collaboration.", "team_size": 40, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1326790113, "tags": [ "Collaboration", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2010", "status": "Acquired", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/aerofs", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2010/aerofs.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/aerofs", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/aerofs", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/26b425639c740c8e014304e1ad6412f83c2d1dba.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 469, "full_name": "Yuri Sagalov", "title": "Founder/CEO", "founder_bio": "Engineer, founder (YC S10), former YC partner (2014-2019) and now investor. \n\nI run early stage investing at General Catalyst (investors in Stripe, Anthropic, Airbnb, Legora, and many more). Previously I was the founder and Managing Partner of Wayfinder (seed investor in Supabase, Browserbase, Decagon, Legora, and many others). \n\nYC is my home. ", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/yurisagalov/", "x_url": "https://twitter.com/yuris", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/29688e169a7ea7eeaaf5f34f0c45956b6af33b9d.jpg" }, { "user_id": 21920, "full_name": "Weihan Wang", "title": "Founder/CTO", "founder_bio": null, "is_active": false, "linkedin_url": "https://linkedin.com/in/weihan", "x_url": null, "avatar_thumb_url": "/avatars/thumb/missing.png" } ], "jobs": [], "news": [], "launches": [] }, { "id": 407, "name": "Mattermost", "slug": "mattermost", "former_names": [ "SpinPunch" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1828c07e7e0127350a2a1ce95943239d48691aaa.png", "website": "http://mattermost.com", "all_locations": "San Francisco, CA, USA; Palo Alto, CA, USA; Remote", "long_description": "Mattermost provides secure collaboration for technical and operational teams that work in environments with complex nation-state level security and trust requirements. We serve technology, public sector, national defense and financial services industries with customers ranging from tech giants, to the world’s largest banks, to the U.S. Department of Defense and governmental agencies around the world. \r\n\r\nOur self-hosted and cloud offerings provide team messaging, file sharing, integrations, audio and screen share, workflow automation and project management on an open source platform deployed by the world’s most secure and mission critical organizations. We co-build the future of collaboration with over 4,000 open source project contributors who’ve provided over 30,000 code improvements towards our shared product vision, which is translated into 20 languages. ", "one_liner": "Secure Collaboration for Technical Teams", "team_size": 120, "industry": "B2B", "subindustry": "B2B -> Productivity", "launched_at": 1695156681, "tags": [ "DevSecOps", "Collaboration", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2012", "status": "Active", "industries": [ "B2B", "Productivity" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/mattermost", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2012/mattermost.json", "year_founded": 2016, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/mattermost", "x_url": "https://twitter.com/Mattermost", "fb_url": "https://www.facebook.com/MattermostHQ/", "cb_url": "https://www.crunchbase.com/organization/mattermost", "github_url": "https://github.com/mattermost", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1828c07e7e0127350a2a1ce95943239d48691aaa.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 33972, "full_name": "Ian Tien", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/iantien/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3228a1b9415374bd3d95e62fad598d0be9c3c526.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 494, "name": "Meldium", "slug": "meldium", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e01b3234d6048fe3e9f02ccbc928599dc7005921.png", "website": "http://meldium.com", "all_locations": "San Francisco, CA, USA", "long_description": "The easiest way for companies to connect their empoyees to the apps they need.\r\n\r\nMeldium is a YC-backed startup helping teams & companies manage accounts & passwords for cloud apps. From shared passwords to user provisioning, Meldium is a central dashboard that connects to every cloud app and makes it simple to create, edit and remove user accounts across all of them. All without IT.", "one_liner": "Simple password & identity management for teams. Acquired by LogMeIn…", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Productivity", "launched_at": 1354492800, "tags": [ "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2013", "status": "Acquired", "industries": [ "B2B", "Productivity" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/meldium", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2013/meldium.json", "year_founded": 2012, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/meldium", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/e01b3234d6048fe3e9f02ccbc928599dc7005921.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 8445, "full_name": "Boris Jabes", "title": "Founder/CEO", "founder_bio": "Visiting Partner @ YC. \n\nPreviously co-founder/CEO at Census, which built data activation for data warehouses (acquired by Fivetran) and co-founder/CEO of Meldium (YC W13) that built one of the first password managers for teams. Before that, worked on Visual Studio (Code) at Microsoft.", "is_active": true, "linkedin_url": "https://linkedin.com/in/borisjabes", "x_url": "https://twitter.com/borisjabes", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1303565480b01a656e156d80407b991ca62ae8c1.jpg" }, { "user_id": 14164, "full_name": "Brad Buda", "title": "Founder", "founder_bio": "Co-Founder of Census: https://getcensus.com\n\nFormerly Meldium (YC W13), TrackSimple, AWS CloudWatch\n", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/bradleybuda/", "x_url": "https://twitter.com/bradleybuda", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0e7d5dc0567b7dac9949fac72ed96a5064d3bb52.jpg" }, { "user_id": 32250, "full_name": "Anton Vaynshtok", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/avaynshtok/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9166078690b36c5e8175f4e79a397c9d945980f4.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 599, "name": "Kuna Systems", "slug": "kuna-systems", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://getkuna.com", "all_locations": "San Francisco, CA, USA; Burlingame, CA, USA", "long_description": "Stop break-ins before they happen. Kuna is the first effective break-in prevention solution for home security. Kuna is a smart Wi-Fi camera and video intercom built into an elegant outdoor light. It detects people at your door and lets you see and interact with them through your smartphone. Think of it as a digital doorman. And the best part, it's super easy to install. No need to run power wires or drill holes. Just replace your old light fixture.\n\nCheck us out at www.getkuna.com, spread the word and help us bring Kuna to the world. Thanks.", "one_liner": "We're making a smart, front door camera with intercom that lets you…", "team_size": 11, "industry": "Consumer", "subindustry": "Consumer -> Consumer Electronics", "launched_at": 1384978780, "tags": [ "Smart Home Assistants", "IoT", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2014", "status": "Acquired", "industries": [ "Consumer", "Consumer Electronics" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/kuna-systems", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2014/kuna-systems.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/kuna-systems-corp", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 28249, "full_name": "Haomiao Huang", "title": "Founder/CTO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/haomiao-huang-87988222", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/38babf6a81d00fa82dc28d2f2033886e532efee8.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 654, "name": "Bannerman", "slug": "bannerman", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b608533ba4dfdf9610d953d7d6faf8b3a2d29638.png", "website": "https://www.bannerman.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Bannerman helps businesses hire and manage security guard services. Our technology eliminates busywork and human errors so we can provide a more reliable security experience. Our customers have total transparency into the guard schedules, attendance, and incident reporting. We’re the only place where you can instantly book security guard services in all 50 states. ", "one_liner": "Security Guard Company Marketplace", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Office Management", "launched_at": 1398907598, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2014", "status": "Inactive", "industries": [ "B2B", "Office Management" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/bannerman", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2014/bannerman.json", "year_founded": 2013, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/getbannerman", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b608533ba4dfdf9610d953d7d6faf8b3a2d29638.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 40405, "full_name": "Johnny Chin", "title": "Founder/CEO", "founder_bio": "S14", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/jonathanpchin/", "x_url": "https://x.com/samclamdisco", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d41ce902e6dc2ecaa00859464d33968097797976.jpg" }, { "user_id": 1382, "full_name": "Antoine de Chevigné", "title": "Founder/CTO", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/adechevigne/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3ee275a6ff7925ed2f333bffb94e0575dd02cb7a.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 743, "name": "Final", "slug": "final", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a9f9365e5ac7dcefbab5bfab9129637279050427.png", "website": "http://getfinal.com", "all_locations": "San Francisco, CA, USA; Oakland, CA, USA", "long_description": "At Final, we are re-building the credit card from the ground up. \r\n\r\nFinal is issuing a credit card that gives consumers total control over their merchant relationships, transparency in their spending, and piece of mind across all payment experiences. Rather than a single, 16-digit card number, Final generates multiple card numbers and manages them automatically.\r\n\r\nIt works everywhere you buy; online, and offline, and integrates with digital wallets like Google Wallet and ApplePay with zero updates to the payment infrastructure. Bottom line - with Final, you’ll never lose access to your spending ability from a breach, fraud, cancelled or stolen card ever again.", "one_liner": "A credit card that drastically reduces payment fraud and gives…", "team_size": 11, "industry": "Fintech", "subindustry": "Fintech -> Payments", "launched_at": 1415700217, "tags": [ "Payments", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Acquired", "industries": [ "Fintech", "Payments" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/final", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2015/final.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/final", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a9f9365e5ac7dcefbab5bfab9129637279050427.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 18520, "full_name": "Matt Rothstein", "title": "Founder/CTO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/marothstein", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ea57d822aab0ddf8cdf46ce0aded1745d7de95f6.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 750, "name": "Smyte", "slug": "smyte", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://smyte.com", "all_locations": "San Francisco, CA, USA", "long_description": "Smyte stops spam, scams, harassment and credit card fraud for marketplaces and social networks. We automatically classify your website and mobile app's event data and stop bad actors at scale.", "one_liner": "Smyte stops bad actors on social networks and marketplaces.", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1416218728, "tags": [ "Security", "Fraud Detection" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/smyte", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2015/smyte.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/smyte", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 4251, "full_name": "Pete Hunt", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/profile/view?id=21952666", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7c3090b2a38b82916117ac3322340892e643ffc1.jpg" }, { "user_id": 11182, "full_name": "Julian Tempelsman", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/profile/view?id=130147198", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/dbbe11997e34b99304fbb5cb16c0efd3310c4e12.jpg" }, { "user_id": 8547, "full_name": "Josh Yudaken", "title": "Founder/Lead Infrastructure Engineer", "founder_bio": null, "is_active": true, "linkedin_url": "http://za.linkedin.com/pub/josh-yudaken/5/ba8/958", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fcdc8b6f69e2d5fc0e43265fc1487d054aca9e53.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 828, "name": "Rescue Forensics", "slug": "rescue-forensics", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://rescueforensics.com", "all_locations": "Nashville, TN, USA", "long_description": "Rescue Ops is a digital forensic that archives massive quantities of data from classified advertisement websites specializing in commercial sex ads for law enforcement agencies to use in anti-trafficking investigations.", "one_liner": "Actionable human trafficking intelligence", "team_size": 0, "industry": "Government", "subindustry": "Government", "launched_at": 1416310126, "tags": [ "Analytics", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Inactive", "industries": [ "Government" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/rescue-forensics", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2015/rescue-forensics.json", "year_founded": null, "city": "Nashville", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/rescue-forensics", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 73310, "full_name": "Ryan Dalton", "title": "Founder/CEO", "founder_bio": "I am an experienced intelligence and security leader who loves using cutting-edge technologies to solve hard problems with\nambitious teams to make life better for other people.", "is_active": false, "linkedin_url": "https://linkedin.com/in/charles-ryan-dalton", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0e7ce1e05237675cb62c9c750a8c6ec5febc35a4.jpg" }, { "user_id": 15028, "full_name": "Brandon Hamric", "title": "Founder/CTO", "founder_bio": "", "is_active": false, "linkedin_url": "http://www.linkedin.com/pub/brandon-hamric/28/70a/722/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8f5c3ff2599ecd1e0febe5f4fb60d052f360abb1.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 909, "name": "Appcanary", "slug": "appcanary", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/812e3473cee76ddf3c226c05edc2883848c5fb14.png", "website": "http://appcanary.com", "all_locations": "Toronto, ON, Canada", "long_description": "Never run vulnerable software again.\r\nWe monitor your servers, and notify you when you need to update. \r\n\r\nTry us for free: https://appcanary.com", "one_liner": "Appcanary tracks the dependencies you use in your apps and servers…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1430156121, "tags": [ "Security", "Monitoring" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/appcanary", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2015/appcanary.json", "year_founded": null, "city": "Toronto", "country": "CA", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/appcanary", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/812e3473cee76ddf3c226c05edc2883848c5fb14.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 73179, "full_name": "Filipa Mendonça-Vieira", "title": "Founder", "founder_bio": "perfect and upright, eschews evil. S15, acquired by GitHub.\n\npragmatic & empathetic engineering leader with a professional focus on security tooling and development at \"web-scale\".", "is_active": false, "linkedin_url": "https://ca.linkedin.com/in/phillmv", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f583e7e461ab8fcde91bdd6b4487fb8df6671f0b.jpg" }, { "user_id": 68370, "full_name": "Max Veytsman", "title": "Founder", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/profile/view?id=116004429", "x_url": "https://twitter.com/mveytsman", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c6819c0380fc97447df5f9c8d9f8a07925cdc8cf.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1032, "name": "Castle", "slug": "castle-2", "former_names": [ "Castle.io", "Castle", "Castle Intelligence" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8d7fdbafd7f8ab52a136ccd6f568c251351c96b8.png", "website": "https://castle.io", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Instantly stop automated and human-originated account takeovers, fake accounts, and any behavior that violates your platform policies.", "one_liner": "Block bots & bad behavior", "team_size": 20, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447566615, "tags": [ "Developer Tools", "SaaS", "Security", "Fraud Detection" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/castle-2", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/castle-2.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/castle-intelligence", "x_url": "https://twitter.com/Castle_IO", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/castle-2", "github_url": "https://github.com/castle", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8d7fdbafd7f8ab52a136ccd6f568c251351c96b8.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 40815, "full_name": "Johan Brissmyr", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/brissmyr", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7b325a5454671a0c325a49b2f9b6940c8af0b4c0.jpg" }, { "user_id": 40816, "full_name": "Sebastian Wallin", "title": "Founder/CTO", "founder_bio": "", "is_active": true, "linkedin_url": "http://se.linkedin.com/in/sebwal/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/113e2eb5b57b288539628814d18c16361bc14ca9.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1040, "name": "Patchwork Security", "slug": "patchwork-security", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://patchworksecurity.com", "all_locations": "San Francisco, CA, USA; Oakland, CA, USA", "long_description": "We’re taking everything we know as security engineers, automating it, and making it easy for everyone to use.", "one_liner": "Security patch notifications for servers. Build it, deploy it, and…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447568415, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/patchwork-security", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/patchwork-security.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": null, "x_url": null, "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/patchwork-security", "github_url": null, "logo_url": null, "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 66437, "full_name": "Shamiq Islam", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/shamiqislam", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/54117b8d4d2edb3535be398f6da9fb7782efbc35.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1214, "name": "AmberBox Gunshot Detection", "slug": "amberbox-gunshot-detection", "former_names": [ "Sinclair Fire", "AmberBox" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4520c6bfa42649fe08afe6ca716089765076d7c3.png", "website": "https://amberbox.com", "all_locations": "New York City, NY, USA", "long_description": "AmberBox is the most advanced indoor gunshot detection and response system used in the US today. AmberBox automates emergency processes to significantly reduce response time and remove human error.\r\n\r\nAmberBox detectors utilise a patented gunshot detection algorithm to respond immediately following a firearm discharge. With tri-factor authentication (percussion, audio and infrared), detectors are able to instantly determine a firearm signature with a near-zero false alarm rate. Upon activation, detectors alert first responders through our reporting network, and can integrate with other security systems, such as cameras, access control systems and mass notification to initiate.", "one_liner": "Detect Gunshots | Inform Law Enforcement | Empower First Responders", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1588692019, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/amberbox-gunshot-detection", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2016/amberbox-gunshot-detection.json", "year_founded": 2015, "city": "New York City", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/amberbox", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4520c6bfa42649fe08afe6ca716089765076d7c3.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [], "jobs": [], "news": [], "launches": [] }, { "id": 1487, "name": "Ambient.ai", "slug": "ambient-ai", "former_names": [ "Ambient" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/624d0ce6f387431048bed692cfded210ffc7d139.png", "website": "https://ambient.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Ambient.ai is a computer vision intelligence company transforming enterprise security operations to prevent security incidents before they happen. The Ambient.ai platform applies AI and computer vision intelligence to existing sensor and camera infrastructure to deliver continuous physical security monitoring and automate the immediate dispatch of human resources. Ambient.ai is the first platform that goes beyond basic motion detection and image recognition to achieve near-human perception with automated situational context. \r\n\r\nWith physical security incidents on the rise and physical security organizations left under-resourced, Ambient.ai’s computer intelligence platform comes at a time of critical need, which is why the company has raised over $50 million from venture capital investors led by a16z. Today, large enterprises, schools and organizations – including many of the largest US tech companies and other Fortune 500 companies – use Ambient.ai to secure property, people, and assets from the most harrowing physical security threats.\r\n\r\nThe company was founded in 2017 by experts in artificial intelligence from Stanford who previously built iconic products at Apple, Google, Microsoft and Dropbox. We are backed by Andreessen Horowitz (a16z), SV Angel, Y Combinator, and visionary angels like Jyoti Bansal, Mark Leslie and Elad Gil.", "one_liner": "AI company transforming enterprise physical security to prevent…", "team_size": 150, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1478224835, "tags": [ "Computer Vision", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/ambient-ai", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2017/ambient-ai.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/ambient-ai/?viewAsMember=true", "x_url": "https://twitter.com/ambientai?lang=en", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/ambient-ai", "github_url": "https://github.com/AmbientAI", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/624d0ce6f387431048bed692cfded210ffc7d139.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jared Friedman", "url": "https://www.ycombinator.com/people/jared-friedman" }, "founders": [ { "user_id": 88122, "full_name": "Shikhar Shrestha", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/shikharshrestha", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8bdadb754a12475d36800d17aecd97ea76c73801.jpg" }, { "user_id": 156767, "full_name": "Vikesh Khanna", "title": "Founder", "founder_bio": "I am passionate about AI and the transformative influence it'll have on our lives. I founded Ambient AI in 2017 to bring AI to enterprise physical security; with a mission to prevent security incidents. As the CTO and co-founder of Ambient, I am responsible for everything engineering, product and technology at the company. Before founding Ambient, I was building software at Dropbox and Microsoft.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vikesh-khanna-27184722", "x_url": "https://twitter.com/vikeshkhanna", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/389c92d81697addb8545b57a51107996183c5fc2.jpg" } ], "jobs": [ { "id": 75246, "title": "Regional Sales Manager, Strategic Accounts", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/WARD3EV-regional-sales-manager-strategic-accounts", "location": "Florida", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75247, "title": "Technical Account Manager", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/yX2E1PJ-technical-account-manager", "location": "Missouri", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75250, "title": "Software Engineer - Product", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/g46lKp3-software-engineer-product", "location": "Bengaluru", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75252, "title": "Software Engineer - Full Stack", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/nSa9eVd-software-engineer-full-stack", "location": "Bengaluru", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "", "equity_range": "", "experience": "", "visa": "US citizen/visa only", "skills": [] }, { "id": 75253, "title": "Staff Software Engineer - Data Platform", "url": "https://www.ycombinator.com/companies/ambient-ai/jobs/hO1gob2-staff-software-engineer-data-platform", "location": "SF Bay Area / Redwood City, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$188K - $235K", "equity_range": "", "experience": "6+ years", "visa": "Will sponsor", "skills": [] } ], "news": [ { "title": "This Startup Is Using AI to Turn Video Security On Its Head | Inc.com", "url": "https://www.inc.com/christine-lagorio-chafkin/security-artificial-intelligence-ambient.html", "date": "Sep 19, 2022" }, { "title": "Ambient.ai aims to provide AI-powered building security, minus bias and privacy pitfalls – TechCrunch", "url": "https://techcrunch.com/2022/01/19/ambient-ai-security-without-facial-recognition/", "date": "Jan 19, 2022" } ], "launches": [] }, { "id": 1521, "name": "Apozy", "slug": "apozy", "former_names": [ "Apozy" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2234c64915e488afac0fff43bf91257681089931.png", "website": "https://www.apozy.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Apozy is a browser defense platform powered by \"Native Browser Isolation\" technology. It neutralizes phishing, malware, and impersonation attacks in real-time by sandboxing dangerous websites at the time of click. This creates a safe \"read-only\" environment for browsing, even if the original website is malicious. Businesses use Apozy Airlock to protect their employees from online threats and prevent data breaches.\r\n", "one_liner": "Apozy makes every website safe to browse", "team_size": 9, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1478663435, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/apozy", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2017/apozy.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/2234c64915e488afac0fff43bf91257681089931.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 163535, "full_name": "Erhan Justice", "title": "Founder/CTO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/erhan-justice", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ccbe2839b0f6667a58f1145c810b560219e034f1.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1630, "name": "Upfort", "slug": "upfort", "former_names": [ "Paladin Cyber" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/00594b41a6ca6cb9abcc26aadf60196e866c0990.png", "website": "https://www.upfort.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Upfort is a leading platform for cyber security and insurance that provides holistic protection from evolving cyber threats. Founded in 2017 to expand global access to cyber resilience, Upfort makes cyber risk easy to manage and simple to insure. Upfort delivers turnkey security proven to proactively mitigate risk and comprehensive cyber insurance from leading insurers. With proprietary data and intelligent automation, Upfort’s AI anticipates risk and streamlines mitigation for hassle-free underwriting. Insurers, brokers, and risk advisors partner with Upfort to offer clients resilience and peace of mind against cyber threats.", "one_liner": "Turnkey security & hassle-free cyber insurance from leading insurers", "team_size": 38, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1493398718, "tags": [ "Next-gen Network Security", "Security", "Insurance", "Cyber Insurance" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/upfort", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2017/upfort.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/upfort/", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/paladin-cyber", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/00594b41a6ca6cb9abcc26aadf60196e866c0990.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 183801, "full_name": "Han Wang", "title": "Founder/CTO", "founder_bio": "US Army Officer turned startup founder, with an expertise in browser use, embeddings, cybersecurity and computational mathematics.", "is_active": false, "linkedin_url": "http://www.linkedin.com/in/hanwangcyber", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bbe02674927badf59fcf96f103ee4af74ae089e5.jpg" }, { "user_id": 194783, "full_name": "Daniel Bilbao", "title": "Founder", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/danielbilbao/", "x_url": "https://twitter.com/ddbilbao", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/11dff57bb80d685d42f7dfeb8e14a2f475e92d03.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1691, "name": "Templarbit", "slug": "templarbit", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/388bf404240294f2fa8cff1b093bc8030dcd540c.png", "website": "https://www.templarbit.com", "all_locations": "San Francisco, CA, USA", "long_description": "Developer-oriented security platform, helping small and large companies protect their software from malicious activityDeveloper-oriented security platform, helping small and large companies protect their software from malicious activity", "one_liner": "Protecting applications from malicious activity", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1495673434, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2017", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/templarbit", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2017/templarbit.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/templarbit", "x_url": "https://twitter.com/templarbit", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/templarbit", "github_url": "https://github.com/templarbit", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/388bf404240294f2fa8cff1b093bc8030dcd540c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 50864, "full_name": "Bjoern Zinssmeister", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/zinssmeister/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e153b0461b6fe080e7334c46c2e75c553d8ae468.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1727, "name": "Quantstamp", "slug": "quantstamp", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2dc377e8276c3eddb8f99613f0b90ed45fea6ee7.png", "website": "https://quantstamp.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Quantstamp has protected billions in digital assets from hackers on our mission to secure web3. As a global team of security professionals, we have honed our technology and expertise through hundreds of audits and gained the trust of our clients to keep their innovative products safe.\r\n\r\nIn addition to providing an array of security services, we facilitate the growth and longevity of the web3 space through strategic investments and acting as a trusted advisor to help projects scale. Quantstamp is honored to have worked with some of the top projects in the industry including Aave, Compound, Maker, OpenSea, Polygon and many more.\r\n\r\nAs the leading blockchain security company in this emerging industry, we are always looking for team members that love taking initiative and solving challenging problems. Join the team and help us secure the future of web3.\r\n", "one_liner": "Security auditing for Web3", "team_size": 80, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1509562863, "tags": [ "Crypto / Web3", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/quantstamp", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/quantstamp.json", "year_founded": 2017, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://twitter.com/quantstamp", "fb_url": "https://facebook.com/Quantstamp", "cb_url": "https://www.crunchbase.com/organization/quantstamp-technologies", "github_url": "https://github.com/quantstamp", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/2dc377e8276c3eddb8f99613f0b90ed45fea6ee7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/314be89a5027233d1a5cc3e0b708663c9c151e25.png" ], "primary_partner": null, "founders": [ { "user_id": 214519, "full_name": "Richard Ma", "title": "Founder/CEO", "founder_bio": "Founder and CEO of Quantstamp, the leader in cybersecurity for web3 and AI", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/rtmtd/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4f8f6b3b5d4d9269a54c9a84be2c0b5e8a53f4f5.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1781, "name": "Vanta", "slug": "vanta", "former_names": [ "Vanta" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0660fb546ece5e50a895e790c299dcaaeeefad32.png", "website": "https://vanta.com", "all_locations": "San Francisco, CA, USA", "long_description": "Vanta: the trust infrastructure for YC companies. \r\nThe definitive leader in security and compliance, trusted by 16,000+ companies, including 1,000+ YC startups.\r\n\r\nThe fastest path to your first enterprise deal\r\nReach bigger logos, more revenue, and a stronger story by Demo Day with Vanta.\r\n\r\nAs agents and automation accelerate your path to compliance, buyers get the proof they need to trust you now—not months from now. Your Trust Center launches immediately, giving prospects a live view of your security posture while audit prep is still underway. With 6,000+ Trust Centers across the Vanta network, you enter critical deals with real-time proof and credibility that would otherwise take years to build.\r\n\r\n\"Choosing Vanta early unlocked $1.5M in deals and accelerated our growth by six months. Vanta is the fastest path to doing compliance right—when you're selling SaaS, buyers know the name.\" – Hyperbound (YC S23)\r\n\r\nVanta gives you the fastest, most credible path to compliance across SOC 2, ISO 27001, and more\r\nLet the Vanta Agent handle the bulk of your compliance requirements, from guidance to audit-ready drafts\r\nLaunch your Trust Center and Letter of Engagement on day one\r\nStart faster with pre-scoped requirements informed by 26,000+ audits\r\nAutomate evidence collection across 400+ integrations\r\nValidate posture hourly with 1,400+ tests\r\nFind and fix gaps before they become audit findings\r\nRun your audit fully in-platform with startup-friendly, AICPA peer-reviewed firms\r\n\r\nAgentic compliance that runs itself\r\nCompliance shouldn’t become your CTO’s second job. The Vanta Agent acts as your compliance co-founder, handling the heavy lifting while your team stays focused on building. \r\n\r\nGrounded in 26,000+ audits and Vanta’s in-house GRC expertise, the Vanta Agent produces audit-ready drafts of policies, risk registers, vendor reviews, cloud security measures, and other core requirements. It also surfaces what needs attention, so your team can review, approve, and keep moving without slowing product development or adding compliance to the roadmap.\r\n\r\nEvery output is tailored to your business and grounded in continuously validated data from The Trust Graph, the market’s deepest data and intelligence layer, rather than generic templates or disconnected AI responses.\r\n\r\nVanta is also built for the way YC teams work. Through Vanta’s remote MCP server, full REST API, and native integrations with Claude, Codex, Cursor, and more, compliance moves forward directly inside the tools your team already uses to build, ship, and operate.\r\n\r\n“Vanta has saved us hundreds of hours and well over six figures in potential lost deals or added headcount. If you’re serious about security, start early.” – Clay\r\n\r\nThe Vanta Agent can: \r\nGenerate first-to-final drafts of core compliance requirements\r\nTailor policies, risk registers, and vendor reviews to your business\r\nCollect and evaluate evidence continuously\r\nScope controls and map requirements automatically\r\nSurface gaps, explain their impact, and recommend fixes, including code-level remediation guidance\r\nCut security review time by 81% and vendor reviews by 50%\r\n\r\nThe trusted standard\r\nYour first audit becomes part of your company’s reputation. It needs to hold up under enterprise scrutiny, from the platform and evidence to the auditor behind the report.\r\n\r\nVanta is the platform your prospects already know, trust, and run on. Backed by 16,000+ customers, 26,000+ completed audits, AICPA peer-reviewed auditors, and in-house security and compliance experts, Vanta turns your first audit into your strongest sales asset.\r\n\r\n“We chose Vanta because of its reputation with enterprise buyers - when they see the Vanta logo on your Trust Center, you walk in with credibility that usually takes years to build. That matters when you're week four of your company.” – HiLoop (YC S26)\r\n\r\nVanta gives you:\r\nStartup-friendly, AICPA peer-reviewed audit firms\r\nIn-house former auditors and GRC practitioners who understand startup constraints and enterprise expectations\r\nA dedicated Auditor Portal\r\nA Trust Center enterprise buyers already recognize\r\n\r\nTwo-thirds of the Forbes AI 50 run on Vanta, including Cursor, Lovable, Clay, Replit, and Sierra. When prospects see Vanta behind your security program, you enter critical deals with credibility already on your side.\r\n\r\nThe platform you won’t outgrow\r\nThe platform you choose for your first audit should still work when you add frameworks, close larger customers, and hire your first security leader.\r\n\r\nVanta provides mature trust infrastructure from day one, right-sized for your first audit and built to support rapid growth without rework, replatforming, or waiting on a vendor’s roadmap. From one connected platform, you can establish the security foundations customers expect today and add more advanced capabilities as your business, risk, and compliance requirements grow.\r\n\r\n“With Vanta, we’ve been able to simplify the heavy lifting, gain real-time visibility into our security posture, and confidently maintain compliance as we scale.” – Cursor \r\n\r\nWhy early teams start (and stay) with Vanta:\r\nRight-sized security foundations: \r\nInfrastructure and systems: cloud monitoring, endpoint protection, and access management\r\nVendors and third parties: risk visibility and vendor reviews\r\nSecurity assessments: risk assessments and cyber insurance options\r\nEnterprise-ready capabilities: Third-Party Risk Management, 35+ frameworks, AI-powered Questionnaire Automation, and more\r\nContinuous innovation: 300+ product features shipped in 2025\r\nCategory-leading customers: Lovable, Ramp, Cursor, Instacart, Duolingo, Fin, GitHub, and more\r\nLong-term backing: Sequoia, Y Combinator, JPMorgan, Goldman Sachs, Wellington Management, and other leading investors\r\n\r\n\r\nSupport you don’t have to fight for\r\nVanta makes first-time compliance straightforward and predictable. You won’t have to wait on a consultant, ticket queue, or another founder’s calendar to understand what comes next. The Vanta Agent guides you through each requirement, drafts core compliance work, and surfaces exactly what needs attention so your program keeps moving.\r\n\r\nOur commitment to you: \r\nAgentic audit readiness with instant answers and real-time guidance\r\nIn-house expertise from former auditors and GRC practitioners\r\nCommunity support through the Vanta Community and Slack onboarding\r\nInstructor-led training and on-demand learning\r\n24/7 live chat and Help Center support\r\nHands-on vCISO and implementation support\r\nStartup-friendly auditors ready to move at your speed\r\n\r\nWe’re so confident in our support that we publish our performance metrics and G2 reviews—so you can hold us to it.\r\n\r\nTransparent pricing and YC-exclusive discounts\r\nYC companies get exclusive, discounted first-year pricing based on ARR or headcount:\r\n\r\nEssentials Package:\r\nEverything you need and nothing you don’t for first-time compliance\r\nOne framework with pre-scoped controls \r\nThe VantaI Agent: policy generation, evidence evaluation, and program Q&A, control mapping, policy change summaries, SLA tracking \r\nAI test remediation \r\nTrust Center & Letter of Engagement \r\nPersonalized compliance roadmap \r\nContinuous controls monitoring\r\nDevice monitoring, security awareness training, employee onboarding/offboarding\r\nCore Pricing: \r\n<$1M ARR (or <20 headcount): $7,200\r\n$1M ARR (or >20 headcount): $9,000\r\n\r\nPlus Package: \r\nFastest path to compliance AND security foundations to build a trustworthy posture early.\r\nEverything in Essentials, plus: \r\nQuestionnaire Automation \r\n(25 per year)\r\nAccess Management\r\n\r\nPlus Pricing:\r\n<$1M ARR (or <20 headcount): $9,600\r\n$1M ARR (or >20 headcount): $12,000\r\n\r\n\r\nOptional add-ons include:\r\nAdditional frameworks: $5,000 each\r\n144 questionnaires/year: $9,000\r\nCyber insurance, powered by Vouch \r\nBackground checks, powered by Certn", "one_liner": "Vanta—the proven leader in automated compliance helping startups…", "team_size": 700, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1509678272, "tags": [ "B2B", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/vanta", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/vanta.json", "year_founded": 2018, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/vanta-security/", "x_url": "https://twitter.com/trustvanta", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/vanta", "github_url": "https://github.com/VantaInc", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0660fb546ece5e50a895e790c299dcaaeeefad32.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jared Friedman", "url": "https://www.ycombinator.com/people/jared-friedman" }, "founders": [ { "user_id": 16226, "full_name": "Christina Cacioppo", "title": "Founder/CEO", "founder_bio": ".", "is_active": true, "linkedin_url": "http://linkedin.com/in/ccacioppo", "x_url": "https://twitter.com/christinacaci", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1a2bfa978eb234d0623925edeecaf501e3660f63.jpg" } ], "jobs": [ { "id": 63705, "title": "Senior Product Designer", "url": "https://www.ycombinator.com/companies/vanta/jobs/rXM5qLJ-senior-product-designer", "location": "Remote US / Remote (US)", "type": "Full-time", "role": "Design", "role_type": "Web design", "salary_range": "$150K - $170K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 64998, "title": "Senior Software Engineer", "url": "https://www.ycombinator.com/companies/vanta/jobs/6RZQ1cg-senior-software-engineer", "location": "Remote US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$163K - $223K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Exclusive: Vanta hits $300 million ARR as ‘shadow AI’ explodes across corporate America | Fortune", "url": "https://fortune.com/2026/04/29/exclusive-vanta-arr-300-million-sequoia-shadow-ai-claude-cursor/", "date": "Apr 29, 2026" }, { "title": "Helping businesses earn and prove trust: Announcing Vanta’s $150 million Series D", "url": "https://www.vanta.com/resources/vanta-announces-series-d", "date": "Jul 23, 2025" }, { "title": "Announcing Vanta’s $150 million Series C funding", "url": "https://www.vanta.com/resources/vanta-announces-series-c", "date": "Jul 24, 2024" }, { "title": "Vanta continues to revolutionize trust management with latest AI release", "url": "https://venturebeat.com/security/vanta-continues-to-revolutionize-trust-management-with-latest-ai-release/", "date": "Oct 10, 2023" }, { "title": "How Christina Cacioppo Built Startup Vanta Into A $1.6 Billion Unicorn To Automate Complicated Security Compliance Issues", "url": "https://www.forbes.com/sites/phoebeliu/2023/06/25/how-christina-cacioppo-built-startup-vanta-into-a-16-billion-unicorn-to-automate-complicated-security-compliance-issues/", "date": "Jun 25, 2023" } ], "launches": [] }, { "id": 1786, "name": "EnvKey", "slug": "envkey", "former_names": [ "EnvKey", "Plandex" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1e132ca0e6ddbcae5090360eedff8684f41d05ef.png", "website": "https://envkey.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "EnvKey is a developer-friendly, cross-platform, end-to-end encrypted configuration and secrets manager. It can be used to store API keys, database credentials, and other application config securely. \r\n\r\nEnvKey makes it easy to grant least-privilege access to the developers and servers that need it from a user-friendly UI. Integration takes minutes.\r\n\r\nUsing EnvKey ensures that no 3rd party, including EnvKey itself, ever has access to your secrets. \r\n\r\nIt takes a part of your system that used to be error-prone and insecure and makes it just work.", "one_liner": "End-to-end encrypted configuration and secrets management", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1509724938, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Inactive", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/envkey", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/envkey.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://twitter.com/EnvKeyConfig", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/envkey", "github_url": "https://github.com/envkey", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1e132ca0e6ddbcae5090360eedff8684f41d05ef.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 179648, "full_name": "Dane Schneider", "title": "Founder", "founder_bio": "Developer and startup guy.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/daneschneider/", "x_url": "https://twitter.com/Danenania", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ba562eb997a46ebeffbff368b6df2b45dd8da700.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1793, "name": "Sqreen", "slug": "sqreen", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d891f44fe59b3c6d5bbb6ce15c0d60af544b9b8.png", "website": "https://www.sqreen.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Sqreen is the application security platform for the modern enterprise. More than 800 organizations trust Sqreen to protect, observe and test their applications, APIs and microservices. As opposed to pattern-based approaches, Sqreen analyses in-app execution in real time to deliver more robust security without compromising performance.", "one_liner": "Sqreen is the application security platform for the modern enterprise", "team_size": 120, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1510027359, "tags": [ "DevSecOps", "B2B", "Security" ], "tags_highlighted": [], "top_company": true, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/sqreen", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/sqreen.json", "year_founded": 2015, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/sqreen/", "x_url": "https://twitter.com/SqreenIO", "fb_url": "https://www.facebook.com/SqreenIO/", "cb_url": "https://www.crunchbase.com/organization/sqreen", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d891f44fe59b3c6d5bbb6ce15c0d60af544b9b8.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/721571cf15116af13ac57a9703c7ef084c33cf75.png" ], "primary_partner": null, "founders": [ { "user_id": 207041, "full_name": "Pierre Betouin", "title": "Founder/CEO", "founder_bio": "Pierre was leading security products at Datadog following the acquisition of Sqreen (W18) - a cybersecurity company providing a comprehensive security monitoring for cloud and web apps protecting over 800 customers in production.\n\nPierre previously spent 9 years at Apple, where he led the team in charge of security assessments for the Internet Services department, hacking products and designing protection.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/pbetouin/", "x_url": "https://twitter.com/pbetouin", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d773913accb3577e364f48d8247e9689aceedade.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1863, "name": "Anjuna", "slug": "anjuna", "former_names": [ "Anjuna Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b5b0d847ce1f2270b7fa71e371516e2163c704ac.png", "website": "https://www.anjuna.io", "all_locations": "San Francisco, CA, USA; Palo Alto, CA, USA", "long_description": "Anjuna makes hardware-grade application and data protection simple, fast and enterprise-ready. Anjuna software enables IT to “lift and shift” applications and data into the hardware-encrypted confines of a secure enclave, protecting them from malicious software, insiders, and bad actors. Available from every major chip, cloud, and system vendor, secure enclaves are the data security gold standard. Unlike point memory-only enclave solutions that require expensive and complicated software rewrites, Anjuna enables enterprises to achieve managed enterprise-class enclave protection that span memory, storage, networks, and clouds in minutes--without recoding. Anjuna is based in Palo Alto, California.", "one_liner": "Anjuna enabled organizations to trust any infrastructure", "team_size": 55, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1512586952, "tags": [ "Cloud Workload Protection", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/anjuna", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2018/anjuna.json", "year_founded": 2018, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/anjuna-security/", "x_url": "https://twitter.com/anjuna_security", "fb_url": "https://www.facebook.com/anjuna.io/", "cb_url": "https://www.crunchbase.com/organization/anjuna", "github_url": "https://github.com/anjuna-security", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b5b0d847ce1f2270b7fa71e371516e2163c704ac.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 221739, "full_name": "Ayal Yogev", "title": "Founder/CEO", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ayalyogev/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/34b627117dd8b637b7f3428a2ec220baa3b79e9c.jpg" } ], "jobs": [], "news": [ { "title": "Why Israel's Ministry of Defense is moving to the public cloud | ZDNet", "url": "https://www.zdnet.com/article/why-israels-ministry-of-defense-is-moving-to-the-public-cloud/", "date": "Mar 23, 2022" } ], "launches": [] }, { "id": 1903, "name": "Federacy", "slug": "federacy", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/92f7e4043272afb2d32ff9d60730c4894c817ea3.png", "website": "http://www.federacy.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Penetration testing and bug bounty platform.", "one_liner": "Penetration testing and bug bounty platform.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1524625566, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2018", "status": "Inactive", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/federacy", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2018/federacy.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://twitter.com/_federacy", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/federacy", "github_url": "https://github.com/federacy", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/92f7e4043272afb2d32ff9d60730c4894c817ea3.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 38989, "full_name": "William Lovely", "title": "Founder", "founder_bio": "Prev Underdog, Federacy (YC S18)", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/williamlovely/", "x_url": "https://twitter.com/wsul", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/74953e677ab4c5ae20cdb054b73697339bfa3573.jpg" }, { "user_id": 172612, "full_name": "James Sulinski", "title": "Founder", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/jamessulinski/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/56ed863ab0394cf66624b874c373aa16c8228f19.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 1942, "name": "Tall Poppy", "slug": "tall-poppy", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/dea1b3e7cb043f7da1f6f8f5cf22b81184391a3d.png", "website": "https://tallpoppy.com", "all_locations": "Ottawa, ON, Canada", "long_description": "Tall Poppy is building tools and services to make personal digital safety accessible to everyone. Founded in 2018, we work both proactively to help prevent harassment from escalating, and also provide expert incident response services when people come under attack.", "one_liner": "Protecting your employees against online harassment", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Human Resources", "launched_at": 1525143912, "tags": [ "Security", "HR Tech" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2018", "status": "Active", "industries": [ "B2B", "Human Resources" ], "regions": [ "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tall-poppy", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2018/tall-poppy.json", "year_founded": 2018, "city": "Ottawa", "country": "CA", "linkedin_url": "https://www.linkedin.com/company/tallpoppysecurity/", "x_url": "https://twitter.com/tallpoppyhq", "fb_url": "https://facebook.com/tallpoppyhq", "cb_url": "https://www.crunchbase.com/organization/tall-poppy", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/dea1b3e7cb043f7da1f6f8f5cf22b81184391a3d.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 83820, "full_name": "Leigh Honeywell", "title": "Founder/CEO", "founder_bio": "Leigh is the founder and CEO of Tall Poppy, where she helps companies protect their employees from online harassment. She was previously a Technology Fellow at the ACLU, and before that worked at a bunch of tech companies including Slack and Microsoft.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/hypatia/", "x_url": "https://twitter.com/hypatiadotca", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7ee36d4fc5d6e53b8aa03e9748ed58867aa48b7b.jpg" }, { "user_id": 261751, "full_name": "Logan Dean", "title": "Founder/CTO", "founder_bio": "", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/logan-dean-41b0192", "x_url": "https://twitter.com/lgdean", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b1f935bacfbd0dfa5a71299416f493d01d1b79ed.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 11921, "name": "Fuzzbuzz", "slug": "fuzzbuzz", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8e18fbf6ea3daeba8a461bb43e6d3c1a33db734b.png", "website": "", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "Fuzzing as a Service", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1540951464, "tags": [ "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2019", "status": "Acquired", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/fuzzbuzz", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2019/fuzzbuzz.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/fuzzbuzz", "x_url": "https://twitter.com/fuzzbuzz", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/fuzzbuzz", "github_url": "https://github.com/fuzzbuzz", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8e18fbf6ea3daeba8a461bb43e6d3c1a33db734b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 301926, "full_name": "Sabera Hussain", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sabera-hussain", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4283d2050bd5e0bdb2ea2e2d886775cee60fb5ff.jpg" }, { "user_id": 284225, "full_name": "Everest Munro-Zeisberger", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/everestmz/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/efe048cd023aa1efa963d7af13f197f0d1df8ebf.jpg" }, { "user_id": 292805, "full_name": "Andrei Serban", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/andrei-serban/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/990ac42853223eac6d2ffb88b462c813b264f2b1.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 11962, "name": "Dyneti Technologies", "slug": "dyneti-technologies", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5968cca6e04e884fd577a2dfa8625bff7bd3a262.png", "website": "http://www.dyneti.com", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "Reduce payment fraud", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1541124184, "tags": [ "Payments", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/dyneti-technologies", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2019/dyneti-technologies.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/dyneti-technologies", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5968cca6e04e884fd577a2dfa8625bff7bd3a262.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 270646, "full_name": "Julia Zheng", "title": "Founder/CEO", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/julia-zheng-30073529/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a220b1c42299b6fd994c43d9df7dbc940c38e7ee.jpg" } ], "jobs": [ { "id": 80506, "title": "Marketing Intern", "url": "https://www.ycombinator.com/companies/dyneti-technologies/jobs/YFHVUaK-marketing-intern", "location": "San Mateo, CA, US", "type": "Internship", "role": "Marketing", "role_type": null, "salary_range": "$5K - $8.25K / monthly", "equity_range": "", "experience": null, "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [] }, { "id": 12070, "name": "Doppler", "slug": "doppler", "former_names": [ "Doppler Technologies", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/66a107c5c83003596991722f8d3d73d13a0b6da2.png", "website": "https://doppler.com", "all_locations": "Austin, TX, USA; Remote", "long_description": "Your central source of truth from local development to production for every language, stack, and infrastructure. Doppler simplifies secrets management so you can automate security, eliminate config drift, and deliver reliable software fast.", "one_liner": "Secure secrets. Prevent breaches. Keep teams moving.", "team_size": 25, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1592193583, "tags": [ "Developer Tools", "DevSecOps", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2019", "status": "Acquired", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/doppler", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2019/doppler.json", "year_founded": 2018, "city": "Austin", "country": "US", "linkedin_url": "https://www.linkedin.com/company/dopplerhq", "x_url": "https://twitter.com/doppler", "fb_url": "https://www.facebook.com/dopplerhq", "cb_url": "https://www.crunchbase.com/organization/doppler", "github_url": "https://github.com/DopplerHQ", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/66a107c5c83003596991722f8d3d73d13a0b6da2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 3551, "full_name": "Brian Vallelunga", "title": "Chairman & Founder", "founder_bio": "Founder of Vantheon & Doppler", "is_active": true, "linkedin_url": "http://linkedin.com/in/vallelungabrian", "x_url": "https://twitter.com/vallelungabrian", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/542fa0fe2325458ae290de4f78c7a18d8fe69ae8.jpg" } ], "jobs": [], "news": [ { "title": "Doppler lands $20M to help companies manage their app secrets – TechCrunch", "url": "https://techcrunch.com/2022/04/27/doppler-lands-20m-to-help-companies-manage-their-app-secrets/", "date": "Apr 27, 2022" } ], "launches": [] }, { "id": 12615, "name": "LunaSec", "slug": "lunasec", "former_names": [ "Refinery Labs" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/acc3150187be7fce01784994ec62525354b915cd.png", "website": "https://www.lunasec.io", "all_locations": "Seattle, WA, USA; Remote", "long_description": "LunaSec is dead, fyi. Please email me personally to get in touch!\r\n\r\n-----\r\n\r\nLunaTrace isn't just another security scanner that blasts you with vulnerabilities. LunaSec has developed a hosted Open Source dependency security tool that is smarter, faster, and quieter than any other. It's backed by a team of security experts who monitor the latest attacks, write remediation guides, and help you patch in hours instead of weeks.\r\n\r\nIn under 2 minutes, for free, you can generate your own vulnerability report to gain insight into the security + compliance of your software by clicking here: https://lunatrace.lunasec.io/\r\n\r\nEmail us at: contact@lunasec.io\r\nOur GitHub: https://github.com/lunasec-io/lunasec", "one_liner": "An Open Source dependency security tool that is smarter than the rest", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1556642382, "tags": [ "Developer Tools", "DevSecOps", "Security Orchestration, Automation and Response (SOAR)", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2019", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/lunasec", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2019/lunasec.json", "year_founded": 2019, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/74743886", "x_url": "https://twitter.com/LunaSecIO", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/lunasec", "github_url": "https://github.com/lunasec-io", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/acc3150187be7fce01784994ec62525354b915cd.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 348018, "full_name": "Free Wortley", "title": "Founder/CEO", "founder_bio": "Background as a Security Engineer with a specific focus on AI Security and AppSec (code and infrastructure security).\n\nFeel free to shoot me an email if you need any security advise. I always love to help other founders figure that stuff out!", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/freewortley/", "x_url": "https://twitter.com/freeqaz", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fa284e485c7d571a86bd9e96d2e0a00ea4b72eea.jpg" }, { "user_id": 325453, "full_name": "Matthew Bryant", "title": "Founder", "founder_bio": null, "is_active": false, "linkedin_url": "https://www.linkedin.com/in/matthew-bryant-a9403289/", "x_url": null, "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3429b946bb099039812d40fc97b84d8cbe41811c.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 13177, "name": "Visual One", "slug": "visual-one", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6a78220f8f6def3c3319ea972ceaee2aae0b7150.png", "website": "https://www.visualone.tech", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "AI for security cameras", "team_size": 4, "industry": "Consumer", "subindustry": "Consumer -> Consumer Electronics", "launched_at": 1583965888, "tags": [ "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2020", "status": "Inactive", "industries": [ "Consumer", "Consumer Electronics" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/visual-one", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2020/visual-one.json", "year_founded": null, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://twitter.com/VisualOneTech", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/6a78220f8f6def3c3319ea972ceaee2aae0b7150.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 594946, "full_name": "Ehsan Kamalinejad", "title": "Founder", "founder_bio": "Ehsan Kamalinejad (EK) is an experienced ML scientist with leading roles at Apple and Amazon. ", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/ehsan-kamalinejad/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e9c343456dc823d1c71bb3ff848d574865f81f58.jpg" }, { "user_id": 87821, "full_name": "Mo Rafiee", "title": "Founder", "founder_bio": "", "is_active": false, "linkedin_url": "https://linkedin.com/in/mo-rafiee", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/aa070f4f2029feb49774daadf6951e33f2ec018c.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 13311, "name": "Riot", "slug": "riot", "former_names": [ "Riot Security Inc.", "Riot Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/36131ce5d03d467ffcb131f3d5407fb52c9be6d9.png", "website": "https://tryriot.com/", "all_locations": "Paris, Île-de-France, France", "long_description": "Riot is a SaaS platform to easily set up a cybersecurity awareness program for teams. We're making tools to protect your employees, and therefore protecting your company.", "one_liner": "Cybersecurity awareness for fast growing companies", "team_size": 160, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1584494110, "tags": [ "SaaS", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/riot", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2020/riot.json", "year_founded": 2020, "city": "Paris", "country": "FR", "linkedin_url": "https://www.linkedin.com/company/tryriot", "x_url": "https://twitter.com/tryriotdotcom", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/36131ce5d03d467ffcb131f3d5407fb52c9be6d9.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 413626, "full_name": "Benjamin Netter", "title": "Founder", "founder_bio": "Highly curious coder, I've been creating products for the past 15 years.\n\n1. At 19, I created a Facebook app that grew from 0 to 500,000 users in a week. That's how my first web server died.\n2. At 20, I won Foursquare Global Hackathon, creating an automatic trip planner.\n3. At 25, I co-founded October, financing European SMBs online. Now 110 employees, 5 offices, raised $60m.\n4. At 30, I founded Riot, a cybersecurity training SaaS. Protecting your company by protecting your employees.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/b-netter/", "x_url": "https://twitter.com/benjaminnetter", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/37e15fe908afb26d24ed4e8a9699eb170046c94b.jpg" } ], "jobs": [ { "id": 51330, "title": "Software Engineer", "url": "https://www.ycombinator.com/companies/riot/jobs/SNOYobE-software-engineer", "location": "Paris", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$45K - $100K", "equity_range": "0.10% - 1.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [ "Elixir", "Node.js", "TypeScript", "SQL" ] }, { "id": 59605, "title": "Account executive", "url": "https://www.ycombinator.com/companies/riot/jobs/Wvs7kgW-account-executive", "location": "Paris, IDF, FR", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$40K - $80K", "equity_range": "0.10% - 0.20%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 95169, "title": "Head of US", "url": "https://www.ycombinator.com/companies/riot/jobs/YLl7jQn-head-of-us", "location": "New-York", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Riot raises $30 million for its cybersecurity product suite focused on employees | TechCrunch", "url": "https://techcrunch.com/2025/02/03/riot-raises-30-million-for-its-cybersecurity-product-suite-focused-on-employees/", "date": "Feb 03, 2025" }, { "title": "Riot prepares your team against highly sophisticated cyberattacks • TechCrunch", "url": "https://techcrunch.com/2023/02/07/riot-prepares-your-team-against-highly-sophisticated-cyberattacks/", "date": "Feb 07, 2023" } ], "launches": [] }, { "id": 21885, "name": "Swif.ai", "slug": "swif-ai", "former_names": [ "BlaBla EdTech", "BlaBla Live", "Swifteam", "Inc.", "Swifteam", "Swif" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f00f6931229f64701cd737b9839f92f72e20005.png", "website": "https://www.swif.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Swif.ai is the Unified Agent & Endpoint Management (UAEM)\r\n\r\nManage every device. Govern every AI agent.\r\n\r\nOne control plane for device management, AI-agent governance, continuous enforcement, and autonomous remediation.", "one_liner": "Manage every device. Govern every AI agent.", "team_size": 20, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597360094, "tags": [ "SaaS", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": [ { "question": "How did your company get started? (i.e., How did the founders meet? How did you come up with the idea? How did you decide to be a founder?)", "answer": "We have 10 people on the team. I was the co-founder of LeadIQ, the leading sales intelligence platform. I managed a fast-growing team of 50 remote employees and onboarded everyone while creating a platform that handled millions of dollars every year. Mert is the CTO and he has over 10 years of experience building device security. Mert and I have both experienced issues of device security and Mert has been building a similar solution for the past 5 years. Jeremy is our sales. He was a former YC founder and recently joined us to drive our sales. He used to host virtual YC demo days." }, { "question": "How did you decide to apply to Y Combinator? What was your experience applying, going through the batch, and fundraising at demo day?", "answer": "Our batch mentor guided us on product iteration and helped us with pitch practices. We genuinely appreciate Tim, Aaron, and Kevin’s mentorship to help us grow!" }, { "question": "How have you kept in touch with the YC community and continued to use YC resources & programs since the batch ended?", "answer": "We worked with many YC companies to help with their device management and compliance needs. We also launched our own YC deal to help new YC batch companies can quickly ramp up their remote device management." }, { "question": "What's the history of your company from getting started until the present day? What were the big inflection points?", "answer": "In 2022, we discovered the power of ChatGPT and realized that we can leverage its platform to simplify device management and remote employee management. This was the pivot point of our product." }, { "question": "What is the core problem you are solving? Why is this a big problem? What made you decide to work on it?", "answer": "Swif is revolutionizing device security with AI, 
we are the first to eliminate the Shadow IT problem—empowering businesses with complete control, visibility, and security." }, { "question": "What is your long-term vision? If you truly succeed, what will be different about the world?", "answer": "Revolutionizing device security with AI, we are the first to eliminate the Shadow IT problem—empowering businesses with complete control, visibility, and security." } ], "url": "https://www.ycombinator.com/companies/swif-ai", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/swif-ai.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://linkedin.com/company/swifai", "x_url": "https://twitter.com/swif_ai", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f00f6931229f64701cd737b9839f92f72e20005.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/3839e1d62757afb3dd90cb7cf0063aa8fa3b4023.png" ], "primary_partner": null, "founders": [ { "user_id": 28055, "full_name": "Angelo (KC) Huang", "title": "Founder", "founder_bio": "Swif.ai is the Security & Compliance UEM.\n\nEvery other MDM is great if you have basic requirements, but if you have security concerns and real compliance requirements, you need something more sophisticated that can handle that.\n\nSwif UEM for when you have real security and compliance concerns.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/angelokh", "x_url": "https://twitter.com/angeloh", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ec27dd6866a09d79b48f7388daef8f230c28296f.jpg" } ], "jobs": [ { "id": 45031, "title": "Backend Developer (Scala/Java)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/VoDI7UY-backend-developer-scala-java", "location": "Taiwan / United States / Canada / Singapore / VN / ID / Remote (Taiwan; United States; Canada; Singapore; VN; ID)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$40K - $70K", "equity_range": "0.10% - 1.00%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Java", "MongoDB", "Python", "Redis", "Scala", "Docker" ] }, { "id": 49868, "title": "DevOps Engineer", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/094hpfh-devops-engineer", "location": "Taiwan / VN / ID / TR / Remote (Taiwan; VN; ID; TR)", "type": "Contract", "role": "Engineering", "role_type": "Devops", "salary_range": "$30K - $50K", "equity_range": "0.10% - 0.50%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "Git", "Google Cloud", "Kubernetes", "Docker" ] }, { "id": 50579, "title": "Frontend Engineer (Vue, Browser Extensions, AI Agent)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/aDnRu3L-frontend-engineer-vue-browser-extensions-ai-agent", "location": "TW / CA / VN / JP / KR / ID / Remote (TW; CA; VN; JP; KR; ID)", "type": "Full-time", "role": "Engineering", "role_type": "Frontend", "salary_range": "$40K - $60K", "equity_range": "0.10% - 0.50%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [ "CSS", "HTML", "JavaScript", "React", "Vue.js" ] }, { "id": 53124, "title": "Backend Engineer (Golang)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/bAPaF28-backend-engineer-golang", "location": "TW / US / CA / SG / ID / VN / MY / TR / Remote (TW; US; CA; SG; ID; VN; MY; TR)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$40K - $70K", "equity_range": "0.10% - 0.25%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Go", "Distributed Systems" ] }, { "id": 55001, "title": "Software Testing Engineer (QA)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/rm6wwJu-software-testing-engineer-qa", "location": "TW / VN / Remote (TW; VN)", "type": "Full-time", "role": "Engineering", "role_type": "QA engineer", "salary_range": "$30K - $50K", "equity_range": "0.10% - 0.50%", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [ "GraphQL", "Linux", "Windows", "MacOS" ] }, { "id": 55966, "title": "Full-Cycle Sales AE", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/9H1KM0B-full-cycle-sales-ae", "location": "Sunnyvale, CA, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$30K - $60K", "equity_range": "0.50% - 1.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 61955, "title": "Sales Intern [Summer 2026]", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/iz7AKOn-sales-intern-summer-2026", "location": "US / Remote (US)", "type": "Internship", "role": "Sales", "role_type": null, "salary_range": "$300 - $1K", "equity_range": "0.01%", "experience": null, "visa": "US citizen/visa only", "skills": [] }, { "id": 62132, "title": "Full Stack Software Engineer Intern [Summer 2026]", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/dcyipuS-full-stack-software-engineer-intern-summer-2026", "location": "US / TW / Remote (US; TW)", "type": "Internship", "role": "Operations", "role_type": null, "salary_range": "$500 - $2K / monthly", "equity_range": "0.01%", "experience": null, "visa": "US citizen/visa only", "skills": [ "Linux", "Windows", "MacOS" ] }, { "id": 77904, "title": "Sales Development Representative (SDR)", "url": "https://www.ycombinator.com/companies/swif-ai/jobs/lbbQXJj-sales-development-representative-sdr", "location": "US / CA / Remote (US; CA)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$40K - $80K", "equity_range": "0.01%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "What's New: TrustClaw Consumer Onboarding", "url": "https://feedback.swif.ai/changelog/whats-new-trustclaw-consumer-onboarding", "date": "Jun 23, 2026" }, { "title": "TrustClaw Enterprise Onboarding", "url": "https://feedback.swif.ai/changelog/trustclaw-enterprise-onboarding", "date": "Jun 23, 2026" }, { "title": "Founder Note: Swif.ai Statement on Stryker's Microsoft Intune MDM Attacks Wiping 200,000 devices", "url": "https://news.swif.ai/p/founder-note-swif-statement-on-the-stryker-intune-attacks-wiping-200-000-devices", "date": "Mar 22, 2026" }, { "title": "Swif.ai Is Now Live in the EU 🇪🇺 — EU Data Residency Is Here", "url": "https://news.swif.ai/p/swif-ai-is-now-live-in-the-eu-eu-data-residency-is-here", "date": "Mar 16, 2026" }, { "title": "The Stryker Wipe: What 200,000 Lost Devices Teach Us About MDM Blast Radius Protection | Swif", "url": "https://www.swif.ai/blog/stryker-wipe-lessons-about-mdm-blast-radius-protection", "date": "Mar 13, 2026" } ], "launches": [ { "id": 84069, "title": "Swif: Solve Shadow IT with our Chrome extension", "tagline": "Gain full control over Shadow IT—track, secure, and manage unauthorized apps with ease using Swif's Chrome Extension.", "body": "![uploaded image](/media/?type=post&id=84069&key=user_uploads/28055/554bc23e-0c52-44e5-b8e5-d956361fc467)\n\nHey, YC community! We’re the team at [Swif](https://www.swif.ai?utm_source=yclaunch), and we're excited to introduce our **Swif Chrome Extension**, designed to solve the growing issue of Shadow IT in organizations. As businesses scale, it's easy for employees to start using unauthorized SaaS apps, creating security and compliance risks that IT teams struggle to monitor.\n\n**What’s the problem?** Shadow IT refers to apps and services used by employees without IT’s knowledge or approval. This often leads to unmonitored data access, increasing the risk of breaches, non-compliance, and lost productivity. Even well-managed IT teams find it hard to track all software being used across departments.\n\n**How does Swif’s Chrome Extension fix this?** Our Chrome Extension helps you automatically identify and monitor employee access to unauthorized SaaS apps. With **real-time visibility**, Swif detects email and password sign-ups to unapproved apps, enabling IT teams to track usage, ensure compliance, and take action quickly—before a security risk escalates. The extension fits seamlessly into your existing IT workflow, providing a single dashboard for comprehensive oversight.\n\nSwif’s strength lies in its automation. Instead of manually hunting down unapproved apps, our extension monitors usage, generates compliance reports, and offers automated solutions for securing access. This gives you control without adding complexity, saving both time and resources.\n\n![uploaded image](/media/?type=post&id=84069&key=user_uploads/28055/13b44543-ebbc-4d61-ad14-5dd5150a1dd1)\n\n**Why did we build it?** The idea came from our experience working with companies overwhelmed by Shadow IT problems. We saw firsthand how much of a challenge it is to maintain visibility over what employees are using, especially in remote and hybrid work environments. Our mission was to create a tool that does the heavy lifting for IT departments, making it easier to manage without sacrificing security or efficiency.\n\n**What’s next?** We’re excited to offer early access to the Swif Chrome Extension! If you’re managing a fleet of devices or overseeing IT security, sign up to be among the first to try our solution and take control of Shadow IT.\n\n**Call to Action**: Ready to tackle Shadow IT? [Create a Swif account](https://app.swif.ai/chromeextension?utm_source=yclaunch), download the extension, and start managing your apps with ease!", "url": "https://www.ycombinator.com/launches/Lrx-swif-solve-shadow-it-with-our-chrome-extension", "votes": 6, "created_at": "2024-09-17T02:14:17.061Z" }, { "id": 70930, "title": "Swif.ai - Compliance-First Device Security", "tagline": "The YC's Get Start Package for MDM & Compliance Automation", "body": "### **⛔️The problem**\n\n1. Fragmented device management across multiple operating systems and locations.\n2. Time-consuming manual compliance checks and reporting for various regulatory standards.\n3. Inefficient onboarding and offboarding processes for remote and global teams.\n4. Lack of visibility into shadow IT and unauthorized SaaS application usage.\n\n### **🚀The solution**\n\n[Swif.ai](http://Swif.ai) offers a comprehensive solution for device security, compliance management, and IT administration across Linux, Windows, and macOS. It automates patch management for various compliance frameworks, provides real-time compliance status reports, and enables remote device control. Swif's all-in-one platform integrates with HR systems, simplifying employee onboarding and offboarding processes while offering cost-effective access management compared to traditional SSO solutions.\n\n**Customer Benefits**\n\n1. Unified visibility and control over all organizational devices, regardless of operating system or location.\n2. Significant time savings through automated compliance readiness checks and real-time reporting.\n3. Enhanced security posture with the ability to instantly lock or wipe compromised devices remotely.\n4. Reduced IT overhead by consolidating device management, access control, and compliance tools into a single platform.\n\n### **🛠️How it works**\n\nThe setup is extremely easy. Here is 1 min get started video.\n\n![uploaded image](/media/?type=post&id=70930&key=user_uploads/28055/12d9aeea-cdbe-4734-a6d9-441a31135956)\n\n### **✅Our asks**\n\n* Check out our [**website**](https://www.swif.ai) – play around with our **interactive demo**\n* [**Sign up**](https://app.swif.ai/) and use Swif — it’s free.\n* [**Reach out**](https://www.swif.ai/) if you’re interested in a live demo", "url": "https://www.ycombinator.com/launches/IS2-swif-ai-compliance-first-device-security", "votes": 17, "created_at": "2023-04-13T00:24:25.556Z" }, { "id": 66625, "title": "Swif - One-stop device management and security", "tagline": "Order, equip, manage your devices for your distributed teams", "body": "Hello, everyone! This is [Angelo](https://www.linkedin.com/in/angelokh/) here to introduce [Swif](https://www.swif.ai?utm_source=yc&utm_medium=launch&utm_campaign=yc_launch)!\n\n❌ **The Problem**\n\nIn my last startup LeadIQ, I managed 2 remote teams in the US and Singapore. It was really painful to manage devices and cloud app access for employees in different locations. We wanted a better understanding of company devices and employee’s cloud app access, and we used a giant Excel sheet to solve this problem, only to find that the solution can not scale. We took time to find solutions to set up, configure, and then discover that the capabilities of each solution were incomplete or buggy. Companies were wasting money and time. The challenges were real, painful and increased company risks. Employee onboarding and offboarding were a nightmare.\n\n✨ **Our Solution**\n\nSwif helps distributed teams manage their devices, purchase new ones, and retrieve them when employees leave the company. \n\n![uploaded image](/media/?type=post&id=66625&key=user_uploads/28055/4b87f21a-cf0d-4381-b7ba-286c4c293b40)\n\nWhy do we need a new solution for device management?\n\nYou might work in California but have team members distributed in Texas, New York, Paris, and Singapore. Things like these might occur to you:\n\n1. Sending, retrieving, and storing devices for remote teams is painful. \n2. Losing data for security risks could keep you up at night.\n3. Employee data is across multiple platforms, eg. Gusto and Deel, and have no audit trails of who owns which devices.\n\n👉 **Next steps**\n\n1. Sign up for [Swif](https://www.swif.ai?utm_source=yc&utm_medium=launch&utm_campaign=yc_launch) and subscribe with promo code ‘ycdeal’ to enjoy one-year free premium features.\n2. Import your employees from your HRIS. We currently support 30 HRIS connections!\n3. Follow the Quick Start to set up your system to enroll devices and link us to your Apple business manager.\n\nWant to start taking control of your remote fleet? \n\nVisit us at or reach out to us at [support@swif.ai](https://mailto:support@swif.ai).", "url": "https://www.ycombinator.com/launches/HKb-swif-one-stop-device-management-and-security", "votes": 32, "created_at": "2022-10-11T17:09:59.715Z" } ] }, { "id": 21917, "name": "Vectrix", "slug": "vectrix", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9315542ed06d8a722e5739c5365aceb689b1d937.png", "website": "https://www.vectrix.io", "all_locations": "San Francisco, CA, USA", "long_description": "As organizations around the world continue to rapidly adopt SaaS applications as the way they run their businesses, many are left without a way to manage the security of those same applications.\r\n\r\nCorporate IT and security teams are left asking questions like:\r\n- How will I know if someone shares a sensitive Google Doc publicly?\r\n- What if one of our employees doesn't have two-factor authentication enabled in Zoom?\r\n- Will I know when a new user is added to Slack?\r\n- What happens if our Salesforce minimum password setting isn't strong enough?\r\n\r\nWith Vectrix's easy-to-use SaaS security scanning, organizations everywhere can quickly identify security issues and risks like these across their entire suite of SaaS apps, including Google Workspace, Microsoft 365, Slack, Zoom, GitHub, and more.\r\n\r\nWhen new issues arise, IT and security teams can be alerted in real-time so that further action can be taken right away.\r\n\r\nFounded by former security professionals from Autodesk, Vimeo, and PlanGrid, Vectrix is committed to providing teams of all sizes an efficient and reliable way to stay secure in the public cloud.\r\n\r\nGet started at https://www.vectrix.io", "one_liner": "Scan your SaaS apps and instantly identify security issues", "team_size": 7, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597513135, "tags": [ "SaaS", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2020", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/vectrix", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2020/vectrix.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/vectrixsecurity", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/vectrix-d281", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9315542ed06d8a722e5739c5365aceb689b1d937.png", "app_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/bf-public_profile/21951/app_video.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAQC4NIECANGNRRAJW%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022650Z&X-Amz-Expires=60&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEHEaCXVzLXdlc3QtMiJHMEUCIQC3G81IFSUZtThVVLqv%2FNP8JAonBeKueJ3nqFDE3FxXUwIgKp6ifAPW9xtNk4cHGnVzE9T5oK7HksFpS9B%2BDm%2FLIOQq5QMIOhAAGgwwMDYyMDE4MTEwNzIiDMiErSqdA9fZ5I2ahyrCAyhI4VxFZU5tGwj2zBKwzP3YopALEsVr%2F%2BZE%2BqKG5ExbN%2FLTC2qWrBSqlDY2M5sbNAwfqQqFkcx31kz1vOn4FSuJMRYW%2BkzTF0sHdYK6D3qvReS29sXOai4xEgytMpWv0HHodzBVtqmM6lhZul7EdriU1r3NMgn6kwrys472GaamCoy9cButcMuxdA6JAW7AePBgk0hcnFGzaY5aao9TXEqqqLDlP1z95aeQK0rFfjBuVVTlW6dspQwwAJwsuJjoI9t1YkL4Lit4gUGj1QI7PUIH70gMRgnlfqNLB7jJcwv%2BI4Rfgnv%2FfKmc5%2BoYexcBkjZu9myZq6QOA6uBoHrB0oTKfDnTUxCfp3Zyd%2BYXd%2BRBrzgSL0LnII%2Fr1P71gX8BqFIaJIcILi5J6qUg2doC6qXH8L6zz0Tim2049E5pbQ072LSzepYlZMqQ983uJSL3eUXk86ehR9Lyldz67yIvyCRilZUgb11jcjrMydu%2Fj2RI4J5upBB3IYDl1jhGlV%2FvgsHTaVujKGAhe3lEnUZs9YdCRwpmLb5XcbpM70m15Z8MQhDcr6si85gNENVvPMk4eUw4FkmyLz2%2FrGX%2BhkiQHEAiUzDJ%2FdrWBjqlAa1FguiGB0WcOcaP9Dwwt66PPG2naOQP7x5F5wwTg7gWx2PYYqZ05ZF%2F2dhdA4HJKOntgl0neDqra19sFySGeXNdHt7tNNndMpVniacUOziehXVxpr49zgL%2FhWtvSxfqv2mUAjPVCs%2FBJs6SqN3WzVfiA2RUodOJqzLA7KluY8D8t3zxMbqsQdARPCP3FgqSkJ8A8HTGWYo9w0rLlT%2Fugv6qZCfQcg%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=b45173bdade0dd82582e960a1d9299ce2fabc1bbfcbd5a2d3074506fb59f23a3", "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 481356, "full_name": "Corey Mahan", "title": "Founder", "founder_bio": "Co-founder of Vectrix. Former Director of Security at Vimeo.\n\nCybersecurity leader for over 10 years, working with financial services, video, and energy organizations in both the United States and Australia. Technical, yet personable, leader who prioritizes a people-first approach to achieve secure solutions. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/coreymahan/", "x_url": "https://twitter.com/coreymahan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2b2f7120040797402fdfe9bb5ff8176122058281.jpg" }, { "user_id": 478622, "full_name": "Alex Dunbrack", "title": "Founder", "founder_bio": "Co-founder of Vectrix. Former Security Analyst at PlanGrid and Autodesk.\n\nExperienced security and compliance professional, building compliance and privacy programs at startups and Fortune 100 companies with a focus on automating manual processes.\n\nhttps://www.dunbrack.com/", "is_active": true, "linkedin_url": "https://linkedin.com/in/alexdunbrack", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/112dd175184bc9734e6d9977bb8d2d1f5b7e3cfb.jpg" }, { "user_id": 476147, "full_name": "Matthew Lewis", "title": "Founder", "founder_bio": "My career is focused on improving cybersecurity at scale. \n\nI started in offensive security finding vulnerabilities, moved into security engineering to prevent them through architecture, and now I build security products that security teams across the industry can rely on.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/matthew-lewis-8043a316b/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e419ba135856cf73a84dd125eaef5672ab05f97b.jpg" } ], "jobs": [], "news": [ { "title": "Vectrix has been acquired by Cloudflare! | Vectrix Blog", "url": "https://www.vectrix.io/blog/cloudflare-acquires-vectrix", "date": "Feb 10, 2022" }, { "title": "Vectrix is developing cloud security marketplace built for and by security pros – TechCrunch", "url": "https://techcrunch.com/2020/08/04/vectrix-is-developing-cloud-security-marketplace-built-for-and-by-security-pros/", "date": "Aug 04, 2020" } ], "launches": [] }, { "id": 22632, "name": "authzed", "slug": "authzed", "former_names": [ "Petricorp", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/ee578b781cb190a51362b9fda6dc57b36d74972d.png", "website": "https://authzed.com", "all_locations": "New York City, NY, USA; Remote", "long_description": "We build the tools companies need to provide performant and scalable authorization for their applications.\r\n\r\nWe’re founded by 3 successful entrepreneurs with expertise in enterprise software, most recently as leaders at Red Hat. Jake and Joey met on the APIs team at Google in 2010. They went on to found Quay, where Jimmy joined as their first hire. Over the past decade, they’ve changed the landscape for building and deploying software.", "one_liner": "Authorization Infrastructure securing AI at OpenAI, Zoom, & more", "team_size": 31, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1624982412, "tags": [ "Developer Tools", "Security", "Open Source", "Data Engineering", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/authzed", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/authzed.json", "year_founded": 2020, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/authzed", "x_url": "https://twitter.com/authzed", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/authzed", "github_url": "https://github.com/authzed", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/ee578b781cb190a51362b9fda6dc57b36d74972d.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 589803, "full_name": "Jake Moshenko", "title": "Founder", "founder_bio": "Jake Moshenko is an engineering leader that has been building infrastructure tools and services for over 15 years for large companies and startups alike. Having previously struggled to keep up with customer permissions demands on products such as CoreOS’s Quay and Tectonic, he was searching for a better way to do application permissions.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jacob-moshenko-381161b/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6d2259a372f5d31495f85d518256341fa0a490be.jpg" }, { "user_id": 597541, "full_name": "Jimmy Zelinskie", "title": "Founder", "founder_bio": "Jimmy Zelinskie is a software engineer and product leader with the goal of empowering the world through the democratization of software via open source development. He's currently the CPO and cofounder of authzed where he's focused on bringing hyperscaler best-practices in authorization software to the industry at large.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jzelinskie", "x_url": "https://twitter.com/jimmyzelinskie", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/432dc805c3a6c9f1ac4f0759f6258f3dda97d5af.jpg" }, { "user_id": 30633, "full_name": "Joseph Schorr", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/joseph-s-4324904/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a17d41b27fc6e7329ab963268732cdb742fa09d8.jpg" } ], "jobs": [ { "id": 88935, "title": "Sr. Developer Advocate (US-Based)", "url": "https://www.ycombinator.com/companies/authzed/jobs/NoHR6wW-sr-developer-advocate-us-based", "location": "US / Remote (US)", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$140K - $170K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 109442, "title": "Sr. Site Reliability Engineer", "url": "https://www.ycombinator.com/companies/authzed/jobs/yWu2MKf-sr-site-reliability-engineer", "location": "Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $195K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 109443, "title": "Senior Software Engineer", "url": "https://www.ycombinator.com/companies/authzed/jobs/M49hhUO-senior-software-engineer", "location": "Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $190K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 111196, "title": "Senior Site Reliability Engineer, Security", "url": "https://www.ycombinator.com/companies/authzed/jobs/KSV1i4b-senior-site-reliability-engineer-security", "location": "US / CA / Remote (US; CA)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $195K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 111560, "title": "Solutions Engineer - U.S. and Canada", "url": "https://www.ycombinator.com/companies/authzed/jobs/ena6RKJ-solutions-engineer-u-s-and-canada", "location": "US / CA / Remote (US; CA)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$130K - $160K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Permissions management startup AuthZed raises $12M to accelerate its strategic expansion - SiliconANGLE", "url": "https://siliconangle.com/2024/06/27/permissions-management-startup-authzed-raises-12m-accelerate-strategic-expansion/", "date": "Jun 27, 2024" }, { "title": "Cockroach Labs, Authzed stress the importance of distributed SQL - SiliconANGLE", "url": "https://siliconangle.com/2023/02/08/qa-cockroach-labs-authzed-stress-importance-distributed-sql-databases-kubecon/", "date": "Feb 08, 2023" }, { "title": "Google Zanzibar Through Our Eyes - Hacker News", "url": "https://news.ycombinator.com/item?id=33910685", "date": "Jan 14, 2023" }, { "title": "SpiceDB Is Open Source - Hacker News", "url": "https://news.ycombinator.com/item?id=28709886", "date": "Jan 14, 2023" }, { "title": "Zanzibar Implementation SpiceDB Is Open Source - The New Stack", "url": "https://thenewstack.io/zanzibar-implementation-spicedb-is-open-source/", "date": "Oct 05, 2021" } ], "launches": [] }, { "id": 22696, "name": "SlashAuth", "slug": "slashauth", "former_names": [ "Debrief LLC", "Debrief", "Slashauth" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/55dabb2d8e44ccdfc31cc1dc05a399fd89a0cfc9.png", "website": "https://www.slashauth.com", "all_locations": "San Francisco, CA, USA", "long_description": "Slashauth builds a developer platform for web3 enabled apps. Slashauth’s platform provides login functionality, role based access control, data storage, and more to any web3 enabled application.", "one_liner": "The solution for fine-grained access control in web3", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1615518240, "tags": [ "Crypto / Web3", "B2B", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Inactive", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/slashauth", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/slashauth.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "https://www.twitter.com/slashauth", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/55dabb2d8e44ccdfc31cc1dc05a399fd89a0cfc9.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 109342, "full_name": "Ned Rockson", "title": "Founder", "founder_bio": null, "is_active": true, "linkedin_url": "https://www.linkedin.com/in/nedrocks", "x_url": "https://www.twitter.com/nedrockson", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2bf1566531bd64ec9c76e945f6013fa194082549.jpg" }, { "user_id": 569496, "full_name": "Nicolas Salhuana", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/nicolas-salhuana/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6623ee4d5a0580d32dae8b5960859cf66204c4e0.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 22698, "name": "Observa", "slug": "observa", "former_names": [ "21 Ravens", "Crucial Detection", "Observa Intel" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8638f021fb4b288aa57f3981a3a65637300055bc.png", "website": "https://www.observa.com", "all_locations": "Remote", "long_description": "", "one_liner": "Catch accidental database exposures before the bad guys", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1621265976, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/observa", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/observa.json", "year_founded": 2020, "city": null, "country": null, "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8638f021fb4b288aa57f3981a3a65637300055bc.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 8570, "full_name": "Rob Picard", "title": "Founder", "founder_bio": "Teleport and Pioneer Fund", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/rob-picard/", "x_url": "https://twitter.com/itsRobPicard", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/28031210a85b5d92639f8da559e926f5d591ec75.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 22781, "name": "Cyble", "slug": "cyble", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f1559fe73a2c1a1b683d40299a231a3a0becfe24.png", "website": "https://cyble.com/", "all_locations": "San Francisco, CA, USA", "long_description": "To reimagine cybersecurity with an AI-native platform that unifies detection, protection and remediation across the digital attack surface\r\n\r\nHeadquartered in Alpharetta, Georgia, and with offices in Australia, Malaysia, Singapore, Dubai, Saudi Arabia and India, Cyble has a global presence. To learn more about Cyble, visit www.cyble.com.  ", "one_liner": "Cyble - World’s First Intelligence-Driven, AI-Native Security…", "team_size": 197, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1613603669, "tags": [ "SaaS", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cyble", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/cyble.json", "year_founded": 2019, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/14707748/", "x_url": "https://twitter.com/cybleglobal", "fb_url": "https://www.facebook.com/cybleau", "cb_url": "https://www.crunchbase.com/organization/cyble", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f1559fe73a2c1a1b683d40299a231a3a0becfe24.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/f0c02392950d43a192dcf370fc8adeb4c2e68680.png", "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/50e6d233b6388c1054148eabb75b51804cc4f024.png" ], "primary_partner": null, "founders": [ { "user_id": 599690, "full_name": "Beenu Arora", "title": "Founder", "founder_bio": "As the co-founder and CEO of Cyble, Inc., I lead a global team of experts and innovators who leverage AI-powered actionable threat intelligence to help our clients manage cyber risks. We specialize in gathering intelligence from the Deepweb, Darkweb, and Surface Web, and delivering timely and relevant insights and solutions to our customers. Our vision is to make the digital world safer and more secure for everyone.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/beenu-arora-b5068412/", "x_url": "https://twitter.com/beenuar", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d32d72c6bca2aa6945215d5d16675e362ba57d2e.jpg" }, { "user_id": 601018, "full_name": "Manish Chachada", "title": "Founder", "founder_bio": "Seasoned finance professional with over 15+ years multinational experience in finance/accounting, business management, international corporate structuring, global tax strategies, fund raising. (Consulting experience - KNAV P.A. (member Allinial Global firms), Controller (Mitchell Group USA, LLC, Executive finance - IT Service - Rolta International", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/manish-r-chachada/", "x_url": "https://twitter.com/manishchachada", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/794e1877a1d0d0aaeb5dad00546051927ebb2063.jpg" } ], "jobs": [ { "id": 63387, "title": "CTO- Cyber Security ", "url": "https://www.ycombinator.com/companies/cyble/jobs/nd6SoAb-cto-cyber-security", "location": "Remote", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$200K - $250K", "equity_range": "", "experience": "11+ years", "visa": "Will sponsor", "skills": [] }, { "id": 64051, "title": "Senior Engineer - ML & AI", "url": "https://www.ycombinator.com/companies/cyble/jobs/kdQ44Xs-senior-engineer-ml-ai", "location": "Bengaluru, KA, IN / Remote (Bengaluru, KA, IN)", "type": "Full-time", "role": "Engineering", "role_type": "Machine learning", "salary_range": "$70K - $120K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Machine Learning", "Natural Language Processing" ] }, { "id": 87439, "title": "Windows Agent Developer", "url": "https://www.ycombinator.com/companies/cyble/jobs/Vzqcjsi-windows-agent-developer", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Embedded systems", "salary_range": "₹4M - ₹6M INR", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "C", "C++", "Windows" ] }, { "id": 87440, "title": "Senior Software Engineer – AI ", "url": "https://www.ycombinator.com/companies/cyble/jobs/oMpfMAl-senior-software-engineer-ai", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "₹4M - ₹6M INR", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Go", "Node.js", "Python" ] }, { "id": 89228, "title": "Sales Engineer - META", "url": "https://www.ycombinator.com/companies/cyble/jobs/iaW40iW-sales-engineer-meta", "location": "Dubai, Dubai, AE / Remote (Dubai, Dubai, AE)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$130K - $180K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 90304, "title": "Backend Engineer / Architect", "url": "https://www.ycombinator.com/companies/cyble/jobs/KnLt3go-backend-engineer-architect", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "₹6M - ₹10M INR", "equity_range": "", "experience": "11+ years", "visa": "US citizen/visa only", "skills": [ "Java", "MySQL", "PostgreSQL", "RabbitMQ", "Spring Framework" ] }, { "id": 92943, "title": "AI SOC Lead", "url": "https://www.ycombinator.com/companies/cyble/jobs/CDhmyAG-ai-soc-lead", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$18K - $25K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "Information Security" ] }, { "id": 96077, "title": "Sales Engineer - Philippines", "url": "https://www.ycombinator.com/companies/cyble/jobs/4G67k4K-sales-engineer-philippines", "location": "PH / Remote (PH)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$50K - $65K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97113, "title": "Senior Researcher - Dark Web & Threat Intelligence", "url": "https://www.ycombinator.com/companies/cyble/jobs/idYynR5-senior-researcher-dark-web-threat-intelligence", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$15K - $35K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97114, "title": "Bug Hunter - Dark Web & Threat Intelligence", "url": "https://www.ycombinator.com/companies/cyble/jobs/BZMt0u5-bug-hunter-dark-web-threat-intelligence", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$10K - $18K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97760, "title": "Regional Sales Manager - US Central", "url": "https://www.ycombinator.com/companies/cyble/jobs/uIMRS0E-regional-sales-manager-us-central", "location": "Chicago, IL, US / TX, US / IL, US / LA, US / KS, US / Remote (Chicago, IL, US; TX, US; IL, US; LA, US; KS, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$120K - $150K", "equity_range": "", "experience": "11+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 98490, "title": "Brand Monitoring Specialist - Bangalore (Hybrid)", "url": "https://www.ycombinator.com/companies/cyble/jobs/niyJoHX-brand-monitoring-specialist-bangalore-hybrid", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$8K - $10K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 99224, "title": "Account Executive - Big 4, Strategic Advisory & Consulting", "url": "https://www.ycombinator.com/companies/cyble/jobs/pfbIcW0-account-executive-big-4-strategic-advisory-consulting", "location": "US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$100K - $150K", "equity_range": "", "experience": "11+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 99707, "title": "Forward-Deployed Engineer (FDE) - Bangalore/Delhi", "url": "https://www.ycombinator.com/companies/cyble/jobs/XloGjT2-forward-deployed-engineer-fde-bangalore-delhi", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN / Remote (DL, IN; Delhi, IN)", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$18K - $35K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 102363, "title": "DevOps Engineer", "url": "https://www.ycombinator.com/companies/cyble/jobs/murTsCP-devops-engineer", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Devops", "salary_range": "$15K - $25K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 106571, "title": "Data Protection Officer (DPO)", "url": "https://www.ycombinator.com/companies/cyble/jobs/r9nhaKE-data-protection-officer-dpo", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Legal", "role_type": null, "salary_range": "$20K - $40K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 106708, "title": "Principal Product Architect", "url": "https://www.ycombinator.com/companies/cyble/jobs/hJ0oibW-principal-product-architect", "location": "US / TX, US / Remote (US; TX, US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $200K", "equity_range": "", "experience": "11+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 110598, "title": "Technical Support Lead", "url": "https://www.ycombinator.com/companies/cyble/jobs/88jXu8s-technical-support-lead", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$25K - $40K", "equity_range": "", "experience": "11+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 110762, "title": "QA Engineer", "url": "https://www.ycombinator.com/companies/cyble/jobs/4Vsfqmq-qa-engineer", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$15K - $25K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 110828, "title": "Customer Success Manager (Associate)", "url": "https://www.ycombinator.com/companies/cyble/jobs/PIjWfjW-customer-success-manager-associate", "location": "AU / Remote (AU)", "type": "Full-time", "role": "Support", "role_type": null, "salary_range": "$80K - $100K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Threat intelligence startup Cyble lands $24M investment | TechCrunch", "url": "https://techcrunch.com/2023/07/31/threat-intelligence-startup-cyble-lands-24m-investment/", "date": "Jul 31, 2023" }, { "title": "Darkweb And Cybercrime Monitoring Startup Cyble Announces US $10 Million in Series A Funding | Business Wire", "url": "https://www.businesswire.com/news/home/20220215006151/en/Darkweb-And-Cybercrime-Monitoring-Startup-Cyble-Announces-US-10-Million-in-Series-A-Funding", "date": "Feb 22, 2022" } ], "launches": [ { "id": 112785, "title": "MalwareAnalyzer: Static scanning, real detonation, an interactive live VM, and a threat graph you can pivot through", "tagline": "We just crossed 500K samples analyzed - free for anyone here.", "body": "Hey all - Cyble (YC W21) here. We've been heads-down on MalwareAnalyzer (): a public malware analysis and threat intelligence platform. Submit a file, a URL, or a hash and get a verdict backed by real evidence. Public analysis is free and unlimited, and no account is required.\n\nWe just crossed 500,000 samples analyzed, which felt like a reasonable excuse to finally post here.\n\n**What's actually in it**\n\n**Multi-engine static scanning.** Free and open engines (ClamAV, YARA, hash feeds, static tooling) run locally; third-party AV engines run on an isolated in-VPC Windows scanner. The report shows only the engines that actually ran — no padded vendor list.\n\n**Real sandbox detonation.** We execute the sample, not just scan it. Full behavior capture across process, file, registry and network activity.\n\n**Interactive live-VM analysis.** Take the wheel mid-detonation: click through installers, dismiss dialogs, trigger the behavior that only fires on user interaction. Choose your guest OS, network mode and engine — and diff two builds side by side.\n\n**URL and phishing analysis.** Paste a link and get the redirect chain, hosting and verdict without touching it yourself.\n\n**Queryable threat-intelligence graph.** Pivot from a sample out to infrastructure, families and related samples. Search the whole corpus by content, indicator, MITRE technique or family — then save it as a standing hunt and get notified when something new matches.\n\n**ATT&CK mapping with receipts.** Every technique is attributed to its source (static capa rule vs. observed at runtime) with confidence weights, plus rule-set hashes so a report is reproducible.\n\n**Reports that admit what they don't know.** If an analysis tier fails to complete, the report is marked degraded and queued for re-analysis rather than presented as clean coverage. A report with no findings _and_ no degradation notice is a real negative result.\n\n**An API with no key required.**\n\n\\`\\`\\`\n\ncurl -X POST \\\\\n\n -H 'content-type: application/json' \\\\\n\n -d \"{\\\\\"fileName\\\\\":\\\\\"sample.bin\\\\\",\\\\\"fileBase64\\\\\":\\\\\"$(base64 < sample.bin | tr -d '\\\\n')\\\\\"}\"\n\n\\`\\`\\`\n\nReturns a task id and a report URL. Submissions are unlimited; lookups are capped at 1,000/day per IP.\n\n**Why this might matter even if you're not a security company**\n\nSomeone on your team is eventually going to get a strange attachment, an unsigned installer from a vendor, or a \"recruiter\" link that smells wrong. Drop it in and get an answer in about a minute - better than a Slack thread of guesses.\n\nFree covers submissions and full reports. Premium compute (private analysis, deep URL scans, the AI assistant) runs on credits, and every account starts with a free grant.\n\nHappy to go deep on any of this - the interactive sandbox was by far the hardest part to get right. Feedback, bug reports and \"your report was wrong about my file\" all very welcome.", "url": "https://www.ycombinator.com/launches/TL7-malwareanalyzer-static-scanning-real-detonation-an-interactive-live-vm-and-a-threat-graph-you-can-pivot-through", "votes": 2, "created_at": "2026-08-31T15:04:07.208Z" }, { "id": 80316, "title": "AmIBreached.com by Cyble: The ultimate data breach monitoring solution 🔒", "tagline": "Your AI-powered sentinel against data breaches.", "body": "👋 We're thrilled to announce the launch of AmIBreached.com, the most advanced and comprehensive data breach detection and monitoring platform on the market.\n\nAs data breaches continue to rise, we've been working tirelessly to develop a solution that empowers individuals and businesses to safeguard their sensitive information. With AmIBreached.com, you can now have peace of mind knowing that your data is secure.\n\n🔍 Key Features of AmIBreached.com:\n\n* Advanced breach detection algorithms that continuously scan the web for compromised data 🚨\n* Intuitive dashboard for easy monitoring and management of your data security 📊\n* Real-time alerts to keep you informed of any potential breaches 📩⚡\n* Seamless integration with popular tools and platforms for a streamlined workflow 🔧🤝\n* Customizable security settings to fit your unique needs 🎚️🔐\n\n👨‍💻👩‍💻 Whether you're an individual looking to protect your personal information or a business aiming to secure your organization's data, AmIBreached has got you covered.\n\n🌍 Join the thousands of satisfied users who trust AmIBreached to keep their data safe and secure. Our cutting-edge technology and dedicated support team are here to ensure your peace of mind in the digital world.\n\n[**Try it out today**](http://amibreached.com/)**. We'd love to hear your thoughts and feedback! Don't hesitate to reach out to our team with any questions or suggestions.**", "url": "https://www.ycombinator.com/launches/KtQ-amibreached-com-by-cyble-the-ultimate-data-breach-monitoring-solution", "votes": 92, "created_at": "2024-04-22T15:23:29.341Z" }, { "id": 73802, "title": "Odin - Attack surface monitoring and internet scanning for everyone", "tagline": "Proactively uncover security risks in your public-facing infrastructure before cybercriminals can exploit them.", "body": "We're excited to share that we launched [Odin](https://getodin.com), our new attack surface monitoring capability!🎉 It's available to try out now at [**getodin.com**](http://getodin.com).\n\n**About**: With its ability to scan the entire IPv4 space, Odin delivers unprecedented visibility into your external attack surface. 🕵️‍♂️\n\n**Key benefits:**\n\n✔️ Catalogs over 100+ internet-facing services to reveal your complete digital footprint\n\n✔️ Builds a comprehensive inventory of hosts, domains, subdomains, certificates, images and more\n\n✔️ Enables easy discovery of unknown assets, misconfigurations, risks\n\n✔️ Provides continuous monitoring for any changes\n\n✔️ Identifies vulnerabilities before attackers can exploit them ⚠️\n\nBy leveraging Odin's unmatched coverage, organizations gain total visibility and control over their attack surface. 💪\n\nOdin represents a significant breakthrough in empowering teams to proactively secure external assets before threats emerge. 🔒\n\nBy signing up, you can:\n\n✅ Test drive the capabilities\n\n✅ Provide key insights to improve the product\n\n✅ Help shape Odin's future\n\n✅ Access SDK: [**https://github.com/cybledev/odin-sdk-go**](https://github.com/cybledev/odin-sdk-go)\\\n[**https://github.com/cybledev/odin-sdk-python**](https://github.com/cybledev/odin-sdk-python)\n\nWe can't wait for you to be among the first to kick the tires on Odin, and let us know your thoughts. Please sign up and play around with the product. 🙏\n\nAnd if you find Odin useful, we'd really appreciate you sharing it with your network as we gear up for the official launch.🚀\n\nLet us know if you have any questions! Excited to hear what you think.\n\nThank you!\n\nCyble Team ([www.cyble.com](http://www.cyble.com))", "url": "https://www.ycombinator.com/launches/JCM-odin-attack-surface-monitoring-and-internet-scanning-for-everyone", "votes": 90, "created_at": "2023-08-04T03:35:23.921Z" } ] }, { "id": 23174, "name": "Feroot Security", "slug": "feroot-security", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1070c02900596bd056caf454feb7a0bd8add2715.png", "website": "https://www.feroot.com", "all_locations": "Toronto, ON, Canada", "long_description": "Feroot (YC W21) is the leading compliance and security platform for b2b websites that helps you easily achieve and maintain compliance with PCI DSS 4.0.1, CCPA, CIPA, HIPAA and 50+ data privacy regulations.", "one_liner": "AI-powered Compliance Platform for PCI 4, CCPA, HIPAA, CIPA, 50+ laws", "team_size": 24, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1630247607, "tags": [ "Compliance", "Security", "Privacy" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/feroot-security", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2021/feroot-security.json", "year_founded": 2017, "city": "Toronto", "country": "CA", "linkedin_url": "https://www.linkedin.com/company/feroot/", "x_url": "https://x.com/FerootSecurity", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/feroot", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1070c02900596bd056caf454feb7a0bd8add2715.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Aaron Epstein", "url": "https://www.ycombinator.com/people/aaron-epstein" }, "founders": [ { "user_id": 482024, "full_name": "Ivan Tsarynny", "title": "Founder", "founder_bio": "Ivan is the CEO and Co-Founder of Feroot Security. An Intelligent and automated security testing and run-time protection of the client-side of web applications. It provides an early warning, detection and management of data assets and risks. Feroot Security was awarded a number the NextAI Top Venture Award by NextCanada, 2019 Comet TOP 5 Cybersecurity Startups in Canada by Ingram Micro and Microsoft.\n", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ivantsarynny/", "x_url": "https://twitter.com/Ivan_tsarynny", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/caa3c3b12a14548bb40a0e88544ce625ddd4c950.jpg" }, { "user_id": 486368, "full_name": "Vitaliy Lim", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://linkedin.com/in/vitaliylim", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b326d05d029e522a52dd9fdc9e1fa648d9c81ca2.jpg" } ], "jobs": [], "news": [ { "title": "Cybersecurity Startup Using AI Agents Raises $14M: Feroot Pitch Deck - Business Insider", "url": "https://www.businessinsider.com/cybersecurity-startup-feroot-ai-agents-tiktok-series-a-pitch-deck-2025-11", "date": "Nov 19, 2025" } ], "launches": [] }, { "id": 23978, "name": "Rootly", "slug": "rootly", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/458bec513b681478458c39da4795bf6502d09edb.png", "website": "https://rootly.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Rootly is a modern on-call and incident management platform used by top YC companies like Dropbox, Lattice, Webflow, Faire, but also Figma, LinkedIn, NVIDIA and 100s more.", "one_liner": "AI-native on-call and incident response carefully crafted to help…", "team_size": 75, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1625761934, "tags": [ "AIOps", "Developer Tools", "SaaS", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/rootly", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/rootly.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/rootlyHQ", "x_url": "https://twitter.com/rootlyHQ", "fb_url": "https://www.facebook.com/rootlyhq", "cb_url": "https://www.crunchbase.com/organization/rootly", "github_url": "https://github.com/rootlyhq", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/458bec513b681478458c39da4795bf6502d09edb.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 253182, "full_name": "Quentin Rousseau", "title": "Founder and CTO (YC S21)", "founder_bio": "- Early Site Reliability Engineer (SRE) at Instacart and built resilient systems now handling millions of orders.\n- 2x Co-Founder at Rootly (YC S21) and PopSQL (YC S19).\n- Originally from France, loves rock climbing, and unsurprisingly great wine! ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/quentinrousseau/", "x_url": "https://twitter.com/quentinrousseau", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/536c75bad5843062fa9c976c9275d2c92bb929bf.jpg" }, { "user_id": 642689, "full_name": "JJ Tang", "title": "Founder", "founder_bio": "Building Rootly - a modern on-call and incident management platform used by top YC companies like Dropbox, Lattice, Webflow, Faire, but also Figma, LinkedIn, and 100s more.\n\nOther than making Rootly my personality, I love cycling and my adorable dog, Nova.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jjrichardtang/", "x_url": "https://twitter.com/jjrichardtang", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/eea6e0e2123efec212779e52790c7ffccb20491a.jpg" } ], "jobs": [], "news": [ { "title": "Incident response management platform Rootly secures $12M | TechCrunch", "url": "https://techcrunch.com/2023/08/10/incident-response-management-platform-rootly-secures-12m/", "date": "Aug 10, 2023" }, { "title": "Rootly nabs $3.2M seed to build SRE incident management solution inside Slack – TechCrunch", "url": "https://techcrunch.com/2021/07/08/rootly-nabs-3-2m-seed-to-build-sre-incident-management-solution-inside-slack/", "date": "Jul 08, 2021" } ], "launches": [ { "id": 66512, "title": "🚒 Rootly - AI SRE, On-Call, Status Pages", "tagline": "Top YC companies like DoorDash, Webflow, Dropbox, Replit, and 100s more all trust Rootly.", "body": "## **TL;DR**\n\nRootly is the AI-native on-call and incident management platform that helps teams detect, manage, learn from, and resolve incidents faster—without leaving Slack or MS Teams. It brings Incident Response, On-Call, AI SRE agents, Status Pages, and Retrospectives into one purpose-built, end-to-end platform.\n\n![uploaded image](/media/?type=post&id=66512&key=user_uploads/642689/d1b534a4-b1f0-444d-b767-aab1d221e1cb)\n\n## **Problem**\n\nWe met at Instacart 🥕—where Quentin was the first SRE and JJ was leading product management efforts. As Instacart grew from a $1B to a $40B company, everything had to scale with it: infrastructure, teams, and the processes that keep the business running when things go wrong. With millions of orders flowing through the platform, incidents weren’t rare edge cases—they were an inevitable part of operating at that level. Checkout issues, platform outages, weird cascading failures at the worst possible times… we saw it all.\n\nWhat surprised us wasn’t that incidents happened. It was how quickly the _process_ broke down under pressure. Our manual way of responding—jumping between Slack, PagerDuty, Datadog, and a dozen dashboards—just wasn’t enough. Every incident started with the same scramble: spinning up channels, pulling people in, figuring out who’s running point, trying to keep comms coherent, and stitching together context from different tools and threads. It worked when the team was small and the system was simpler. At scale, it turned chaotic and inconsistent.\n\nAnd the hardest part wasn’t even the debugging. It was the inconsistency. You’d rely on runbook checklists and tribal knowledge, hoping someone remembered what to do next—who to page, which workflow to follow, how to communicate internally and externally, what steps to capture for the retrospective. In the moment, that’s a lot to ask. Afterward, it meant retros were slow (or skipped), action items drifted, and the same classes of incidents kept coming back because learning didn’t keep pace with growth.\n\n## **Solution**\n\nRootly gives you an end-to-end incident lifecycle—from first page to resolution to post-incident learning—built where teams actually operate (Slack & MS Teams), and it’s all powered by AI.\n\n\n\n**Incident Response**\n\nRootly helps you declare incidents, spin up the right Slack channels and roles, coordinate responders, track tasks, and keep communication structured—while automating the operational “busywork” that normally slows teams down.\n\n**On-Call**\n\nRootly On-Call is built to notify the right person the first time, with scheduling and escalation that scales from a small team to a global org. It’s designed to be reliable and easy to use, with a beautiful mobile experience that makes getting paged somewhat enjoyable.\n\n**AI SRE Agents**\n\nRootly’s AI SRE agents help teams move faster during incidents by connecting the dots across signals like recent code changes, telemetry, and past incidents. Instead of starting from scratch every time, responders can quickly narrow in on probable causes, understand what changed, and get suggestions for fixes and next steps—along with the reasoning behind them.\n\n**Status Pages**\n\nRootly makes it easy to keep customers and stakeholders updated with public and private status pages, so incident comms don’t become another manual process during a high-stress event.\n\n**Retrospectives**\n\nRootly helps you turn incidents into learning. Create collaborative retros that teams can edit together, draft timelines and summaries faster, and track action items so the work actually gets done—not just written down.\n\n**AI everywhere responders actually feel it**\n\nDuring incidents, the biggest tax is cognitive load: listening, typing, summarizing, updating, and repeating yourself. Rootly uses AI to take that off the responder:\n\n* **AI Meeting Bot scribing:** Rootly can join your incident bridge, transcribe in real time, and capture key context so nothing gets lost.\n* **Instant catch-up:** Tag **@Rootly** in the incident channel to get a private, personalized summary of what’s happened so far, what’s been tried, and what’s next.\n* **Draft updates that match the audience:** Generate incident updates tailored to the recipient—customer-friendly language for external comms, crisp executive summaries for leadership, or detailed handoffs for engineering—so you’re not rewriting the same update five different ways.\n* **AI-generated retros:** Auto-draft retrospectives with timelines and context, then collaboratively refine and track action items to completion.\n* **Automated RCA:** Alerts, code changes, past incidents all analyzed at the speed of AI to determine probable root cause in minutes.\n\n**A full platform, or just what you need**\n\nUse Rootly as a complete incident management platform—or adopt products individually based on where you are today (Incident Response, On-Call, AI SRE, Status Pages, Retrospectives).\n\n## **Offer & Ask**\n\n* If you want to see how Rootly modernizes incident management end-to-end, book a demo and we’ll tailor it to your current stack and workflows.\n* If you’re a team with **<25 employees**, we also offer **Pay What You Can** so you can get world-class incident management without the “enterprise price tag.”", "url": "https://www.ycombinator.com/launches/HIm-rootly-ai-sre-on-call-status-pages", "votes": 86, "created_at": "2022-10-05T05:45:37.027Z" } ] }, { "id": 24207, "name": "Keyri", "slug": "keyri", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d204b37489e1bf0407fdab24bd4c6ec609fffd5.png", "website": "https://keyri.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Keyri helps companies implement simple, secure anti-fraud and authentication solutions to delight users and keep bad actors off their platform. Keyri's mobile application and browser fingerprinting suite ties user identities to trusted devices, preventing fraudulent activity such as account opening, account takeovers, bot attacks, and referral/promo abuse. Keyri is able to establish an immutable device fingerprint for every device, alerting companies of any suspicious devices during sign up, log in, or subsequent authentication events.\r\n\r\nKeyri also offers a passwordless authentication suite that leverages Passkeys, WebAuthn, and QR codes to enable biometric authentication on all platforms and devices, providing a seamless user experience, strengthening multi-factor account security, and reducing reliance on other tedious and unsecure authentication methods.", "one_liner": "Secure fraud prevention and authentication platform for developers", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1627569946, "tags": [ "SaaS", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/keyri", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/keyri.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/keyri-auth", "x_url": "https://twitter.com/KeyriAuth", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/keyri", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d204b37489e1bf0407fdab24bd4c6ec609fffd5.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 586106, "full_name": "Zain Azeem", "title": "Founder", "founder_bio": "Founder of Keyri (S21), an identity and security company. Exited to Signifyd, currently leading several anti-fraud analytics and engineering efforts there. Playing with drones, lasers, and local AI in my spare time. Previously worked in investment banking.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/zain-azeem/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/24299256722f10a5cfa0d45f40d01bb4ca229864.jpg" }, { "user_id": 740730, "full_name": "Saif Malik", "title": "Founder", "founder_bio": "Saif has 14 years of experience in technology and finance globally, including over 10 years in strategic advisory focused on cybersecurity and infrastructure software. Prior to GCA, Saif built and ran multiple startups, and currently is an active investor and advisor to a number of companies in the security and fintech space. Saif received his BSc in Electrical Engineering, BA in Economics, and BA in Applied Mathematics from the University of Pennsylvania.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/saif-malik-929b961a", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/99c7e3c71606548ba03fa9033cf32d1a147a3ef8.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 66336, "title": "Keyri: QR login", "tagline": "Launching Keyri self-service - Add QR login to your webpage in as little as a day.", "body": "After over a year developing an enterprise-grade authentication system, we are excited to launch our self-service platform aimed at making developer lives easier. Our solution allows you to add QR authentication to your webpage in a few simple steps. With this, you can add a QR code next to your existing login methods or go full passwordless with biometric authentication for mobile and web.\n\n### **The Problem**\n\nMobile authentication is perfect because biometrics exist on all mobile devices. Simply open an app, pass biometrics, and you’re in, yet the lack of biometric availability on many computers makes web authentication an incredible pain. It’s tedious and unsecure. \n\nWhether login entails remembering a password, entering a code, clicking an email link, or using an authenticator app, each of these solutions creates more friction than biometrics while also leaving users with reduced security. \n\nI always have my phone with me, it’s next to my computer, why can’t I extend the trust that exists on mobile biometrics to web?\n\n### **Our Solution**\n\nExtend the trust that exists with mobile biometrics to web with Keyri QR authentication. Users simply scan a QR code on your login page with their smartphone, are automatically redirected to your mobile app, and pass biometrics within your app to log into your webpage. \n\nIt’s incredibly simple biometric-based authentication paired with our advanced device intelligence and risk analytics to create the most robust phishing-resistant MFA.\n\n\n\n### **Asks**\n\nCheck it out. We would love to get your feedback at [grant@keyri.com](mailto:grant@keyri.com) or [founders@keyri.com](mailto:founders@keyri.com). We have both free and paid plans available so you can get started right away.", "url": "https://www.ycombinator.com/launches/HFw-keyri-qr-login", "votes": 18, "created_at": "2022-09-27T14:28:14.880Z" } ] }, { "id": 24275, "name": "Cloudanix", "slug": "cloudanix", "former_names": [ "Cloudanix Inc" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1209d6739765a764083573c7a354abcbce2fe009.png", "website": "https://www.cloudanix.com", "all_locations": "San Francisco, CA, USA; Sunnyvale, CA, USA", "long_description": "We help DevOps teams to improve the security of their Cloud infrastructure. Our solution value increases for companies using multi-cloud (like GCP, Azure, AWS) or have multi-accounts (like Dev, Test, Prod)", "one_liner": "Cloud and Container Security Platform", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1625633604, "tags": [ "Cloud Workload Protection", "DevSecOps", "Identity", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cloudanix", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/cloudanix.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/cloudanix", "x_url": "https://twitter.com/cloudanix", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/cloudanix", "github_url": "https://github.com/cloudanix", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1209d6739765a764083573c7a354abcbce2fe009.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 78632, "full_name": "Sujay Maheshwari", "title": "Founder", "founder_bio": "Product + Technology; Making Cloud secure, one AWS/ Azure/ GCP account at a time! ", "is_active": true, "linkedin_url": "http://www.linkedin.com/in/sujaymaheshwari/", "x_url": "https://www.twitter.com/taurusismysign", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6a6cf2d3e2dba0c8ecacc30ab82eef7db9a97657.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 24604, "name": "Telivy", "slug": "telivy", "former_names": [ "Telivy", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c2b737c315b075b967ccb0e8aa0683e1b37cef2.png", "website": "https://www.telivy.com", "all_locations": "San Francisco, CA, USA", "long_description": "Telivy helps small and medium businesses purchase the best cyber insurance coverage. Our proprietary ML-based risk platform assesses insurability gaps, offers remediation plans and brokers insurance quotes from A+ rated carriers. ", "one_liner": "Automate your cyber security risk assessments", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1629349306, "tags": [ "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/telivy", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/telivy.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/telivy/", "x_url": "https://twitter.com/TelivyInsurance", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c2b737c315b075b967ccb0e8aa0683e1b37cef2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 162837, "full_name": "Naren Sathiya", "title": "Founder", "founder_bio": "Naren is interested in the intersection of finance and technology, and views the insurance industry as a data science problem to be optimized on. He joined Hippo Insurance as an early engineer and led its embedded distribution channel with homebuilders, which became over 20% of its revenue within 1.5 years. He hopes to build similar workflows and user experience for the commercial industry, starting with cyber and compliance companies. In his free time, he likes to mountain bike, swim and hike. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/naren-sathiya-01197a19", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/af2fb864fbbb5250ab04f3075019229a9c85eb04.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 24679, "name": "idemeum", "slug": "idemeum", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/114a9a76a8ee453baff49fa40d74bd24651c0907.png", "website": "https://www.idemeum.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "AI agents analyze every application execution on Windows and macOS. You decide what is allowed to run. ", "one_liner": "AI-powered Application Control", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626910054, "tags": [ "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/idemeum", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/idemeum.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/idemeum/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/114a9a76a8ee453baff49fa40d74bd24651c0907.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 657538, "full_name": "Nik Poturnak", "title": "Founder", "founder_bio": "Passionate about building security products. Led product teams at VMware, Facebook, FireEye, and Cisco. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/npoturnak/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b9c3e7cb698fe9407bbbd50e43dc0136bf6b9a49.jpg" }, { "user_id": 695344, "full_name": "Jagjit Sethi", "title": "Founder", "founder_bio": "Jagjit Sethi is the co-founder and CTO of Idemeum, a passwordless Identity Provider for small and medium businesses. Prior to Idemeum, Jagjit was a Director of Engineering at VMware where he was responsible for building Cloud-First distributed scalable system, global engineering teams and driving architectural responsibilities. Before joining VMware, Jagjit worked at Concept Tapistry, Flexera, i2 technologies and a startup company.", "is_active": true, "linkedin_url": "http://www.linkedin.com/in/jagjit-sethi-aa012b4", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/fdda1d18d40bda9323984a73b989dc670a27f4e7.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 24725, "name": "ContraForce", "slug": "contraforce", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/432a4f78b4ff1733ad967eccea1a465f5a83c959.png", "website": "https://www.contraforce.com", "all_locations": "McKinney, TX, USA; Remote", "long_description": "ContraForce delivers a first-of-its-kind Security Delivery Platform that automates security engineering, AI-operator workflows, and multi-tenant incident response for Service Providers and Teams. Our platform orchestrates supervised or autonomous AI agents to run triage, investigation, response, and documentation at scale.", "one_liner": "Security Delivery Platform to orchestrate AI agents for Service…", "team_size": 15, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626391321, "tags": [ "SaaS", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/contraforce", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/contraforce.json", "year_founded": 2021, "city": "McKinney", "country": "US", "linkedin_url": "https://www.linkedin.com/company/contraforce", "x_url": "", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/contraforce", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/432a4f78b4ff1733ad967eccea1a465f5a83c959.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 416762, "full_name": "Stanislav Golubchik", "title": "Founder/CEO", "founder_bio": "Stan Golubchik is CEO and Co-Founder of ContraForce. He has been in the IT and Cybersecurity space for 15 years. Bringing extensive experience in executive roles at McAfee, and Armor Cloud Security. Stan started his career working in a NOC and found his footing in cybersecurity when joining Intel Security. He possess several certifications and is passionate of building future innovation and leaders within the space.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/stan-golubchik/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/817f0689afd7d5f0ad0e76daa4b3208b4b4985bd.jpg" } ], "jobs": [], "news": [ { "title": "ContraForce Announces $2M Seed Investment from DataTribe | Business Wire", "url": "https://www.businesswire.com/news/home/20211221005065/en/ContraForce-Announces-2M-Seed-Investment-from-DataTribe", "date": "Feb 09, 2022" }, { "title": "Security automation firm ContraForce inks $2m seed | FinTech Global", "url": "https://member.fintech.global/2021/12/23/security-automation-firm-contraforce-inks-2m-seed/", "date": "Dec 23, 2021" }, { "title": "No-Code Security Automation Funding: ContraForce Raises $2 Million - MSSP Alert", "url": "https://www.msspalert.com/investments/no-code-security-automation-company-contraforce-raises-2-million/", "date": "Dec 22, 2021" }, { "title": "Security-as-a-service startup ContraForce launches into general availability with $2M in funding - SiliconANGLE", "url": "https://siliconangle.com/2021/12/21/security-service-startup-contraforce-launches-general-availability-2m-funding/", "date": "Dec 21, 2021" } ], "launches": [] }, { "id": 24787, "name": "Squire.ai", "slug": "squire-ai", "former_names": [ "Codex", "CODEOWNERS", "CODEOWNERS (fka Codex)", "EchoLayer", "EchoLayer (fka Codex)", "Squire.ai (fka EchoLayer)" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8972703d81fdbb75413d24021353cf5ed0937ec2.png", "website": "https://squire.ai", "all_locations": "San Francisco, CA, USA; Canada", "long_description": "Squire is a devtool that works with you by writing pull request descriptions, reviewing PRs, and writing code to implement code review feedback.", "one_liner": "Never code alone.", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1627487920, "tags": [ "Developer Tools", "SaaS", "Compliance", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Inactive", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/squire-ai", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2021/squire-ai.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/squireai", "x_url": "https://twitter.com/squiredev", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8972703d81fdbb75413d24021353cf5ed0937ec2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 14550, "full_name": "Brandon Waselnuk", "title": "Founder", "founder_bio": "builder of things 🇨🇦 🏊🏻‍♂️🚴🏻‍♂️🏃🏻‍♂️\n", "is_active": false, "linkedin_url": "http://ca.linkedin.com/in/brandonwaselnuk/", "x_url": "https://twitter.com/BrandonWaselnuk", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/35856e1cff3f8ff7dd39eaefb1322489dfcd3709.jpg" }, { "user_id": 24543, "full_name": "Karl Clement", "title": "Founder", "founder_bio": "Co-Founder of Codex (https://usecodex.com). \"Fullstack\" kind of guy. Obsessed with startups, software and engineering, I mostly like to build stuff. As an engineer my focus is primarily on modern micro-service architectures, Javascript SPAs, REST/GraphQL APIs, high-traffic applications as well as DevOps (the whole stack). As an entrepreneur, I started building companies when I was 14 and never looked back.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/karlclement/", "x_url": "https://twitter.com/karlclement", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/653c3f711d92874b893826bb62b2169601e819eb.jpg" }, { "user_id": 330763, "full_name": "Saumil Patel", "title": "Founder", "founder_bio": "I am the co-founder and CEO of Squire AI. Squire AI helps engineering teams merge PRs quickly by providing reviews and implementing feedback.\n\nPreviously, as a Partner at Dignified, I helped build software at businesses ranging from startups to Fortune 250 enterprises.\n\nI have also contributed to numerous other organizations as a CTO, Software Engineer, Product Lead, and Engineering Lead.\n\nWhen I'm not working, I'm experimenting in the kitchen, reading a book, gaming, or walking with my dog Moch", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/saumilptl/", "x_url": "https://twitter.com/saumilp_", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/26fb09b55b48bb45d5cfc4e1f781e76d5ecc12bd.jpg" } ], "jobs": [], "news": [ { "title": "Codex aims to enable engineers to collaborate within an IDE | VentureBeat", "url": "https://venturebeat.com/2021/12/14/codex-aims-to-enable-engineers-to-collaborate-within-an-ide/", "date": "Dec 14, 2021" } ], "launches": [ { "id": 64458, "title": "Codex - Give new meaning to your code base", "tagline": "Discuss and understand your code base from within your IDE. Attach comments, questions, notes or any kind of content to specific lines of code.", "body": "### **What is Codex?**\n\n* [Website:](https://usecodex.com/) \n* [Extension: VS Code Marketplace](https://marketplace.visualstudio.com/items?itemName=CodexBuild.codex-build)\n* [Demo Video: Codex in a Nutshell](https://www.loom.com/share/5afda7be38aa459186cca73ed6b3738f)\n\nCodex is a VS Code extension that allows any engineer to attach comments, questions, notes or any kind of content to specific lines of code. This context follows your code as your team continues to build. Help your team understand your code base at a deeper level.\n\n### **Why us?**\n\n Karl Clement, Saumil Patel and Brandon Waselnuk have been working together for 8 years now shipping over 50 products across the VC fund they worked at, their own agency, and their own projects. They’ve seen this problem constantly and decided to do something about it.\n\n### **The problem:**\n\nThe problem space we’re working on is collaborating on code, passive documentation through code block level context, onboarding and offboarding engineers into a code base. We found this problem on pretty much every software team we’ve worked on - you open a file and don’t know how something runs and have to start asking in #devops chats which leads you on a goose chase to find the engineer that remembers how the monolith runs. It stinks, and when you’re done you move on and finish your work, you don’t really capture everything you learned in DMs and leave it for other team members to learn from.\n\n### **The solution:**\n\nWe’ve created an extension for VS Code to allow any engineer to attach their internal knowledge to specific files or lines of code and share it with the rest of the team.\n\n* Onboard or offboard engineers from your code base 10x faster.\n* Take notes while you code and help your team understand how it was built.\n* Ask the right person a question, without disturbing their flow.\n* Share a direct link to a code block in VS Code instead of sending screenshots.\n\n![uploaded image](/media/?type=post&id=64458&key=user_uploads/24543/e35a2b90-27fa-4279-97e9-24081fb02d92)\n\n### **How you can help:**\n\nYour support means the world to us. Here are some things we’d love:\n\n* Introductions to remote or hybrid engineering teams\n* Shoutouts on Twitter, Tiktok or whatever is cool these days.\n* Use [Codex](https://usecodex.com/?ref=launch-yc) today! We can use all the feedback we can get :)\n\nTHANK YOU!", "url": "https://www.ycombinator.com/launches/Gle-codex-give-new-meaning-to-your-code-base", "votes": 45, "created_at": "2022-07-08T13:20:54.800Z" } ] }, { "id": 25061, "name": "Optery", "slug": "optery", "former_names": [ "Optery", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/02ca984c664acd671be4123ea5824a7fbc55c95c.png", "website": "https://www.optery.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Optery is automated opt out software, and we serve individuals, families and businesses. With Optery, you can remove yourself from hundreds of data brokers that are posting and selling your home address, phone number, email and other private information on the internet. \r\n\r\nOptery received the “Editors’ Choice” award by PCMag as the most outstanding product in the personal data removal category in 2022, 2023, 2024, 2026 and 2026, the Cybersecurity Excellence Awards for Attack Surface Management, Digital Footprint Management, and Employee Privacy Protection in 2024 and 2025, Cyber Defense Magazine’s Top InfoSec Innovator and Best Attack Surface Management awards in 2024 and 2025, the 2025 Fortress Cybersecurity Award for Privacy Enhancing Technologies, and Fast Company’s Next Big Things in Tech award for security and privacy in 2023. In 2025, Optery was also listed by Business Insider as one of 30 early-stage startups most likely to become a unicorn.\r\n\r\nOptery prevents phishing and social engineering, identity theft and fraud, online stalking and harassment, ransomware, doxxing, and prevents people's private information from showing up in Google search results. \r\n\r\nAnyone can create a free account to receive a personalized Exposure Report with live screenshots summarizing where your information is being posted and sold online. Optery then provides free tools for self-service removals, or you can upgrade to a paid plan, and Optery will remove the profiles for you.\r\n\r\nOptery for Business serves enterprises removing personal information from the internet for their employees and executives, and offers an API enabling application developers to embed data broker scanning and removal technology into their applications.", "one_liner": "Opt out software that removes your private info from the internet", "team_size": 55, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1634074023, "tags": [ "SaaS", "Consumer", "Security", "Privacy", "Enterprise Software" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/optery", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/optery.json", "year_founded": 2020, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/optery/", "x_url": "https://twitter.com/Optery", "fb_url": "https://www.facebook.com/optery", "cb_url": "https://www.crunchbase.com/organization/optery", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/02ca984c664acd671be4123ea5824a7fbc55c95c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/6f927a2326d44d21ae5eaf48f06378ebcd0de7c7.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 73300, "full_name": "Lawrence Gentilello", "title": "Founder", "founder_bio": "As CEO and Founder, Lawrence grew Optery to $20M+ ARR, 1M+ users, and profitability prior to its acquisition by Surfshark. Lawrence also co-founded the remote collaboration company Screenleap and launched the first online facebook at Stanford in 1999. Lawrence is an alumnus of Stanford (BA), Duke (MBA), and Y Combinator (Optery (W22) and Screenleap (W12)).", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gentilello", "x_url": "https://twitter.com/gentilello", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d03c2c80fdbd7e671f17b1f557a9f3900d66ab5c.jpg" }, { "user_id": 44895, "full_name": "Chen Atlas", "title": "Founder", "founder_bio": "Chen is CTO and Founder at Optery. Prior to founding Optery, Chen was tech lead and architect for 50+ engineers at Runa HR. Prior to Runa HR he was Co-Founder and CTO of As You Stay, and Cleanly, the on-demand laundry service. Chen was recruited out of high school by the Israel Defense Forces (Mamram) to build logistics platforms and is an expert in building large scale complex systems with high availability. Chen is an alumnus of Bar-Ilan University (BA) and Y Combinator (Cleanly, W15).", "is_active": true, "linkedin_url": "http://www.linkedin.com/in/atlaschen", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e9eb8ccd2121e0b1121cbbbfa690198b0abc57e7.jpg" } ], "jobs": [], "news": [ { "title": "Best Data Removal Services of 2026: Reduce Your Online Presence | CNET", "url": "https://www.cnet.com/tech/services-and-software/best-data-removal-services/", "date": "Jul 02, 2026" }, { "title": "Optery Review: An Effective, but Expensive, Data Removal Service | CNET", "url": "https://www.cnet.com/tech/services-and-software/optery-review/", "date": "Jul 02, 2026" }, { "title": "How your personal data is being sold legally online - and used by hackers to steal millions, report warns | Daily Mail Online", "url": "https://www.dailymail.com/news/article-15878519/Personal-data-sold-online-hackers-steal-millions.html", "date": "Jun 05, 2026" }, { "title": "Optery's Rapid Growth Highlights Soaring Demand for Data Privacy | BriefGlance.com", "url": "https://briefglance.com/articles/opterys-rapid-growth-highlights-soaring-demand-for-data-privacy", "date": "Apr 01, 2026" }, { "title": "Meet 25 of San Francisco's High Growth Companies—And They're Not All in AI | Inc.com", "url": "https://www.inc.com/mariapaula-gonzalez/meet-25-of-san-francisco-fast-growing-companies-not-all-ai-startups/91322555", "date": "Mar 31, 2026" } ], "launches": [] }, { "id": 25275, "name": "Strac", "slug": "strac", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5810f2cdca1ab3fedc5a811643be13d5387e300c.png", "website": "https://www.strac.io/", "all_locations": "Seattle, WA, USA", "long_description": "Strac is an agentless Data Discovery (aka DSPM - Data Security Posture Management), Data Classification & DLP (Data Leak Prevention) that automatically discovers, classifies and remediates sensitive data (alert, label, redact, mask, block, delete). \r\n\r\nStrac protects SaaS, Cloud, Gen AI, Browsers, On-Prem and Endpoints like O365, Slack, GDrive, AWS, Salesforce, ChatGPT, Jira, Mac, Zendesk, Azure, On-Prem (On-Prem, MS SQL SAP) and 40+ integrations. \r\n\r\nStrac protects enterprise companies like UiPath, Databricks, thredUP, B Capital, Crypto (dot) com!", "one_liner": "Data Discovery, DLP, DSPM for SaaS, Cloud, Gen AI & Endpoints", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1641604614, "tags": [ "Generative AI", "SaaS", "Security", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/strac", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/strac.json", "year_founded": 2021, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/securewithstrac/", "x_url": "https://twitter.com/securewithstrac", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5810f2cdca1ab3fedc5a811643be13d5387e300c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 835087, "full_name": "Aatish M", "title": "Founder", "founder_bio": "Aatish is the Founder & CEO of Strac (YC W22), an AI-powered data security company helping enterprises secure sensitive data across AI, MCP, SaaS, cloud, endpoints, and browsers.\n\nBefore founding Strac, he spent 11 years at Amazon as a Principal Engineer, building and securing critical payments infrastructure, including systems protecting credit card data, bank accounts, and payment transactions at scale.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/aatishmandelecha/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e6ff8151c72e1f1782cfc46dc4e62850e1e12c70.jpg" } ], "jobs": [ { "id": 51085, "title": "Sales Development Representative (SDR)", "url": "https://www.ycombinator.com/companies/strac/jobs/y0Mopqu-sales-development-representative-sdr", "location": "US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$60K - $65K", "equity_range": "0.05% - 0.15%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 55289, "title": "Senior Software Engineer", "url": "https://www.ycombinator.com/companies/strac/jobs/aqRX4ow-senior-software-engineer", "location": "Redmond, WA, US / Seattle, WA, US / Bellevue, WA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$110K - $160K", "equity_range": "0.01% - 0.20%", "experience": "3+ years", "visa": "Will sponsor", "skills": [ "Amazon Web Services (AWS)", "Java", "JavaScript", "Node.js", "Python", "Elasticsearch", "Linux", "Machine Learning", "Serverless" ] }, { "id": 70821, "title": "Head of Marketing", "url": "https://www.ycombinator.com/companies/strac/jobs/8DFTfAp-head-of-marketing", "location": "US / Remote (US)", "type": "Full-time", "role": "Marketing", "role_type": null, "salary_range": "$100K - $150K", "equity_range": "0.05% - 0.20%", "experience": "6+ years", "visa": "Will sponsor", "skills": [] }, { "id": 83243, "title": "Account Executive", "url": "https://www.ycombinator.com/companies/strac/jobs/e5KNH2P-account-executive", "location": "Seattle, WA, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$75K - $150K", "equity_range": "", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 87272, "title": "Software Engineer (India)", "url": "https://www.ycombinator.com/companies/strac/jobs/owZm2hV-software-engineer-india", "location": "Bengaluru, KA, IN / Bengaluru, Karnataka, IN / Pune, MH, IN / Pune, Maharashtra, IN / Mumbai, MH, IN / Mumbai, Maharashtra, IN", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "₹2.5M - ₹5M INR", "equity_range": "0.01% - 0.10%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 88031, "title": "Senior Full Stack Software Engineer", "url": "https://www.ycombinator.com/companies/strac/jobs/LC8K6PL-senior-full-stack-software-engineer", "location": "Austin, TX, US / Seattle, WA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$140K - $210K", "equity_range": "0.01% - 0.20%", "experience": "6+ years", "visa": "Will sponsor", "skills": [ "Amazon Web Services (AWS)", "Java", "JavaScript", "Python", "Serverless" ] } ], "news": [ { "title": "Seattle-area cybersecurity startup led by former Amazon principal engineer lands $3.5M – GeekWire", "url": "https://www.geekwire.com/2022/seattle-area-cybersecurity-startup-led-by-former-principal-engineer-lands-3-5m/", "date": "Jul 21, 2022" }, { "title": "Strac plugs into Slack, OneDrive and more to automatically redact sensitive info – TechCrunch", "url": "https://techcrunch.com/2022/07/19/strac-plugs-into-slack-onedrive-and-more-to-automatically-redact-sensitive-info/", "date": "Jul 19, 2022" } ], "launches": [ { "id": 65668, "title": "🔒 Strac Zendesk Redactor", "tagline": "Protect Your Zendesk Account & Comply with Privacy Laws!", "body": "Hi YC!\n\nI'm [**Aatish**](https://www.linkedin.com/in/aatishmandelecha/) and today we're excited to launch **Strac’s Zendesk Redactor!**\n\n## **Problem 😠**\n\nCustomers post sensitive personal information (PII or PHI) on zendesk tickets for a given business function. Some of the burning reasons on why your Zendesk account needs to be protected:\n\n* **Data Leaks:** All organizations are subject to security attacks. Zendesk is also not immune. In 2016 Zendesk was subject to a [data breach exposing 10,000 Zendesk accounts](https://support.zendesk.com/hc/en-us/articles/4408824583578-Updated-FAQ-regarding-2016-Security-Incident-) where sensitive PII (Personally Identifiable Information) was accessed.\n* **Insider Attacks:** Between 2018 and 2020, there was a [47% increase in insider threat incidents](https://www.tessian.com/blog/insider-threat-statistics/). This includes malicious data exfiltration and accidental data loss.‍\n* **Compliance:** Every day government legislation is passing Consumer Privacy laws geared to protect consumer data from malicious entities. California and Illinois have been the latest to introduce these laws, including a Biometric Information Privacy Act. For many organizations, data can be spread across a wide range of systems, which can be challenging to keep up with Privacy law enactments. It is a nightmare for companies to do manual cleanup of those sensitive messages sitting within your employee's zendesk account as deep inspection is time consuming and error-prone. At the same time, you need to stay compliant and prevent exfiltration of sensitive data.\n\n## **Solution** 🚀\n\nStrac Zendesk App is a Data Loss Prevention (DLP) software. It masks (aka redacts) sensitive comments and attachments while still giving the opportunity to authorized users to view those zendesk tickets in Strac UI Vault. A business can configure a list of sensitive data elements (SSN, DoB, DL, Passport, CC#, Debit Card, API Keys, etc.) to redact. Compliance, Risk and Security officers will get audit reports of who accessed what messages.\n\nBelow is a sample list of sensitive data elements that will be detected & redacted:\n\n* PII: Name, Address, Email, Phone, DoB, Age, Gender, Ethnicity, etc.\n* Identification: Drivers License, Passport, SSN (Social Security Number), etc.\n* Payments: Credit Card, Debit Card, Bank Account, Routing Numbers, etc.\n* Credentials: API Keys, Passwords, Passphrases etc.\n* Crypto Secrets: Bitcoin, Ethereum, Litecoin Addresses, etc.\n* PHI: PII data, Medical Record Number (MRN), Medical Notes, etc.\n* Physical Network: IP Addresses, MAC Address, etc.\n* Custom: Create your own rules or use regex\n\nPlease checkout our demo: \n\n### **YC Offer 🎉**\n\n1. FREE Redaction for your entire Zendesk account\n2. Book a Demo on our website: ", "url": "https://www.ycombinator.com/launches/H5A-strac-zendesk-redactor", "votes": 15, "created_at": "2022-08-29T00:00:01.894Z" } ] }, { "id": 25433, "name": "JumpWire", "slug": "jumpwire", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/077148a8281f282d5a5d6825d93aedf0b71c08b4.png", "website": "https://jumpwire.io", "all_locations": "New York City, NY, USA; New York, NY, USA; Remote", "long_description": "JumpWire is a data protection platform that adds advanced data security controls between APIs, applications and databases. JumpWire automatically identifies sensitive properties inside large data sets and gives developers full control over which people and applications can access or update records containing sensitive info.\r\n\r\nExamples uses include restricting who can read customer PII to members of the customer service team, giving on-call engineers elevated access to production, or splitting user records between regions for GDPR purposes.\r\n\r\nJumpWire’s approach to securing data in-place minimizes the risk of data leaks exposing sensitive information or mishandling by other applications and vendors. The exact security scheme applied to data is defined by policies that align with an organization’s existing InfoSec program.\r\n\r\nJumpWire helps companies who maintain information security with compliance programs such as SOC or HIPAA. They are processing sensitive data, often from their own customers, and exceed security best practices as a competitive advantage. JumpWire provides defense at depth to data and sits alongside access controls and Layer 4 encryption to provide a comprehensive data security solution.\r\n\r\nJumpWire is unique from solutions such as data vaults by installing inside our customers’ own infrastructure and clouds. It is interoperable with existing applications and databases, which eliminates the need for large data migrations or code refactoring. Lower-level approaches to data security, such as encryption at rest, are too blunt and lack the ability to differentiate between properties in the data itself. Its scope is limited to physical storage, and security is lost as soon as an application or query loads the data.", "one_liner": "Dynamic access controls for all data and databases", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1644446688, "tags": [ "Security", "Data Labeling", "Databases" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/jumpwire", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/jumpwire.json", "year_founded": 2021, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/jumpwire", "x_url": "https://twitter.com/jumpwire_ai", "fb_url": null, "cb_url": null, "github_url": "https://github.com/extragoodlabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/077148a8281f282d5a5d6825d93aedf0b71c08b4.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 823026, "full_name": "Ryan Cooke", "title": "Founder", "founder_bio": "Ryan has spent his career working in startups, with a passion for creating innovative technology products. JumpWire participated in the YC W22 batched, and was acquired by WorkOS in 2024. Ryan has previously co-founded and led engineering teams at Docurated, N26 and Orum (acquired by Stripe). He's obsessed with running his own AI, and particularly enjoys building teams aside software.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ryancooke/", "x_url": "https://x.com/mapandfold", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/36cbdb63975aa38768f2c1241ebb5034d7c15861.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 25552, "name": "Firezone", "slug": "firezone", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b332f151ea2bb27aee388d55b28c0e973525f259.png", "website": "https://www.firezone.dev", "all_locations": "San Francisco, CA, USA", "long_description": "Firezone connects your workforce to the computing resources they need, wherever they are, securely. Unlike traditional VPNs, Firezone uses a least-privileged approach to access control known as Zero Trust Access.\r\n\r\nConnect your identity provider and define granular policies in minutes, then rejoice in the IT support requests you won't receive due to our lightweight, WireGuard-powered clients which work great on all platforms.", "one_liner": "Easiest way to set up Zero Trust Access for your team", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1646247402, "tags": [ "DevSecOps", "Next-gen Network Security", "B2B", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/firezone", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/firezone.json", "year_founded": 2021, "city": "San Francisco", "country": "US", "linkedin_url": "https://linkedin.com/company/firezonehq", "x_url": "https://twitter.com/firezonehq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/firezone", "github_url": "https://github.com/firezone", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b332f151ea2bb27aee388d55b28c0e973525f259.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 429817, "full_name": "Jamil Bou Kheir", "title": "Founder", "founder_bio": "\nPrevious:\n8 years at Cisco as a security engineer in various capacities.\n4 years as a fullstack contractor building web apps for startups.\n2 years building and traveling in my tiny hacker house (pics: https://imgur.com/a/ujsmGH7).\n\n\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/jamilbk", "x_url": "https://twitter.com/jamilbk", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f09e58ac5e096d9211eb3b5a0dd086f8699520e9.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 25583, "name": "Bunkyr", "slug": "bunkyr", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/bab71568a30f64680488b01543947e165355c6d6.png", "website": "https://bunkyr.com", "all_locations": "Denver, CO, USA", "long_description": "Bunkyr enables companies to protect their users’ data with a simple, hardware-secured API. When a user forgets their password, applications using Bunkyr can provide them a familiar, robust recovery method to restore access to encrypted data.\r\n\r\nZero-Knowledge architectures and end-to-end encryption are the only true safeguards against data breaches, but come with large user-experience burdens and engineering overhead. Bunkyr eliminates these obstacles in a way that is friendly to both developers and users, cost-effective, and extremely fast.\r\n\r\nUsers won’t even know Bunkyr exists, while their data stays protected against both breaches and lost passwords.", "one_liner": "Zero-Knowledge security without seed phrases or backup codes", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1646850303, "tags": [ "Developer Tools", "SaaS", "Crypto / Web3", "B2B", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/bunkyr", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/bunkyr.json", "year_founded": 2021, "city": "Denver", "country": "US", "linkedin_url": "https://linkedin.com/company/bunkyr", "x_url": "https://twitter.com/Bunkyr", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/bunkyr", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/bab71568a30f64680488b01543947e165355c6d6.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [], "jobs": [], "news": [ { "title": "Bunkyr raises over $1M to bring frictionless security to developers and end users • Bunkyr", "url": "https://bunkyr.com/blog/posts/2022/06/16-pre-seed-funding", "date": "Jun 16, 2022" } ], "launches": [] }, { "id": 25589, "name": "Palitronica Inc", "slug": "palitronica-inc", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f4754ff74fb207d2ef16e60bc4582800b2583251.png", "website": "https://palitronica.com", "all_locations": "Kitchener, ON, Canada; Remote", "long_description": "Palitronica builds and deploys cutting-edge solutions to defend critical physical infrastructure and its supply chain.\r\n\r\nBy using side-channel information from endpoints, Palitronica provides a safe attack detection capability retrofittable to critical systems.", "one_liner": "Detect cyber attacks on critical physical infrastructure", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1639062247, "tags": [ "Hard Tech", "Hardware", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/palitronica-inc", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/palitronica-inc.json", "year_founded": 2019, "city": "Kitchener", "country": "CA", "linkedin_url": "https://www.linkedin.com/company/76565236", "x_url": "https://twitter.com/palitronica", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/palitronica", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f4754ff74fb207d2ef16e60bc4582800b2583251.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 857302, "full_name": "Sebastian Fischmeister", "title": "Founder", "founder_bio": "Sebastian Fischmeister is the CEO and co-founder of Palitronica Inc, Professor at the University of Waterloo, and has over 20 years of R&D experience in safety and security of safety-critical embedded systems. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sebastian-fischmeister-3a07a86/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/969e2d8d9dd6a38e96f447f47135c6b1df9e3c35.jpg" }, { "user_id": 864134, "full_name": "Carlos Moreno", "title": "Founder", "founder_bio": "I am an electronics engineer with a passion for both analog and digital electronics. Originally, my passion for the analog side manifested as an audiophile and enthusiast about all electronics for high-end audio, whereas my passion for the digital side manifested as an embedded systems and later a computer security enthusiast. Fate had it that modern cybersecurity would leverage the analog-domain side of digital electronics — found my real passion in the world of embedded systems security!", "is_active": true, "linkedin_url": "https://ca.linkedin.com/in/carlos-moreno-76a0626", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/79d7f7a29f1098e6a94a72c92066853e531b97af.jpg" } ], "jobs": [], "news": [ { "title": "Palitronica Selected to Advance Aerospace Cyber Mission Assurance", "url": "https://www.palitronica.com/news/palitronica-selected-to-advance-aerospace-cyber-mission-assurance", "date": "Mar 13, 2022" }, { "title": "Newsroom | Palitronica Accepted into Y Combinator", "url": "https://www.palitronica.com/news/palitronica-accepted-into-the-prestigious-y-combinator-accelerator", "date": "Dec 09, 2021" } ], "launches": [] }, { "id": 25696, "name": "Agency", "slug": "agency", "former_names": [ "Achilleion" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0b9732a89bf577bd80a0c7d0b377bd35fcce86ce.png", "website": "https://GetAgency.com", "all_locations": "New York City, NY, USA", "long_description": "Agency replaces traditional security and compliance headcount with AI without replacing your existing tools.\r\n\r\nOur platform is operated by forward-deployed engineers who run your entire security and compliance program including full virtual CISO coverage on your behalf. All powered by our proprietary AI agents.\r\n\r\nAgency is a vertically integrated AI platform and services company that enables organizations to achieve and maintain SOC 2, ISO 27001, CMMC 2.0, HIPAA, GDPR, FedRAMP, HITRUST, ISO 42001, and more without building internal teams. We integrate with leading GRC platforms like Vanta and Drata and security tools like CrowdStrike.\r\n\r\nAt its core is our proprietary cybersecurity and GRC orchestration layer powering a suite of AI systems that execute end-to-end security and compliance operations: control implementation, evidence collection, monitoring, vendor risk, penetration testing, and audit coordination — across complex environments like BYODs, contractor fleets, and multi-party systems. Things that GRC automation platforms can't do.\r\n\r\nWe deliver this through two distinctly separate products:\r\n\r\nAgency Comply — forward-deployed engineers who operate the platform, implement controls, run compliance programs, and manage security end-to-end\r\n\r\nAuditsuisse Assurance — our US and Swiss licensed CPA firm, powered by Auditsuisse AI, delivering independent SOC and global audits with speed and rigor. (Auditsuisse does not audit Agency Comply customers).\r\n\r\nAgency serves startups through enterprises building in high-stakes environments — AI, defense, aerospace, fintech, and healthcare — replacing fragmented tools and large internal teams with a single AI-driven system of execution.", "one_liner": "Agency replaces traditional security and compliance headcount with AI.", "team_size": 50, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1641532353, "tags": [ "SaaS", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/agency", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/agency.json", "year_founded": 2020, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/getagency22", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0b9732a89bf577bd80a0c7d0b377bd35fcce86ce.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 617735, "full_name": "Amir Tarighat", "title": "Founder", "founder_bio": "Amir Tarighat is the cofounder and CEO of Agency. He's a developer, cybersecurity expert, and digital privacy advocate. Amir graduated from Harvard University, and studied Advanced Computer Security at Stanford. He lives in NYC.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/atarighat/", "x_url": "https://twitter.com/ATarighat", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/1d7a628aa15e2bfcaa1933cacc991e7b62589641.jpg" }, { "user_id": 860213, "full_name": "Tyler Carbone", "title": "Founder", "founder_bio": "Co-Founder at Agency, where we provide personal cybersecurity + coverage. Previous founder Terbium Labs (sold to Deloitte), Evenspring (sold to Timmons Group) and SRRN Games.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tylercarbone/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f2da9b5c5fc4f09cb374472f05b9828a31d4b7e0.jpg" } ], "jobs": [ { "id": 83758, "title": "Sales Development Representative / Business Development Rep", "url": "https://www.ycombinator.com/companies/agency/jobs/247LpHO-sales-development-representative-business-development-rep", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$65K - $75K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] } ], "news": [], "launches": [] }, { "id": 25697, "name": "Prembly (formerly Identitypass)", "slug": "prembly", "former_names": [ "Identitypass", "Prembly" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c11b529afd406376db5eecdb08ae765601c28526.png", "website": "https://prembly.com/", "all_locations": "Lagos, LA, Nigeria; Remote", "long_description": "We are making it possible for digital businesses to easily verify individuals and businesses within seconds across Emerging Markets.", "one_liner": "Identity Verification API for Emerging Markets", "team_size": 80, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1640573428, "tags": [ "B2B", "Identity", "Security", "API" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "Nigeria", "Africa", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/prembly", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/prembly.json", "year_founded": 2021, "city": "Lagos", "country": "NG", "linkedin_url": "https://www.linkedin.com/company/prembly/", "x_url": "https://twitter.com/prembly", "fb_url": "https://www.facebook.com/identitypass/", "cb_url": "https://www.crunchbase.com/organization/identitypass", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/c11b529afd406376db5eecdb08ae765601c28526.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Aaron Epstein", "url": "https://www.ycombinator.com/people/aaron-epstein" }, "founders": [ { "user_id": 567960, "full_name": "Lanre Ogungbe", "title": "Founder", "founder_bio": "I am always delighted to think about abstract ideas. Founding team member of two startups, one of which got acquired.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ogungbelanre/", "x_url": "https://twitter.com/lanreogungbe", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c2ea7bb79088a790cf5de22ecc43125b65b78413.jpg" }, { "user_id": 820920, "full_name": "Niyi Adegboye", "title": "Founder", "founder_bio": "Niyi is a passionate entrepreneur with grit and believes in innovations and using technology to improve lives. \nHe's a university graduate and holds a Mini_MBA certificate. \n\nHe has wealth of experience in blinding and scaling startups. Prior to Co-founding Identity Pass, he has led product development, business growth and partnership and fundraising for three startups in EdTech, FinTech and a food ordering and delivery startup.\nHe has both local and international recognition.\n", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/adegboyehenry/", "x_url": "http://twitter.com/adegboyehenry", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/df137d0375917016d830262558ce28f46c46c664.jpg" } ], "jobs": [ { "id": 55626, "title": "Data Analyst and Machine Learning Engineer", "url": "https://www.ycombinator.com/companies/prembly/jobs/gKkiuiJ-data-analyst-and-machine-learning-engineer", "location": "Remote", "type": "Full-time", "role": "Engineering", "role_type": "Machine learning", "salary_range": "", "equity_range": "", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] } ], "news": [ { "title": "Tunnel acquired by Prembly", "url": "https://technext24.com/2023/07/31/prembly-acquires-tunnel-to-expand/", "date": "Jul 26, 2023" }, { "title": "Nigeria’s Prembly is building security products for emerging markets businesses - Disrupt Africa", "url": "https://disrupt-africa.com/2023/06/16/nigerias-prembly-is-building-security-products-for-emerging-markets-businesses/", "date": "Jun 15, 2023" }, { "title": " Identitypass Introduces New Parent Brand 'Prembly' To Reflect Growth And Continued Expansion | Digital Times ", "url": "https://www.digitaltimes.africa/identitypass-introduces-new-parent-brand-prembly-to-reflect-growth-and-continued-expansion/", "date": "Dec 15, 2022" }, { "title": "Identitypass, an identity verification API for Africa, raises $2.8M seed funding – TechCrunch", "url": "https://techcrunch.com/2022/05/11/identitypass-an-identity-verification-api-for-africa-raises-2-8m-seed-funding/", "date": "May 11, 2022" }, { "title": "Nigerian startup, Identitypass, joins Y Combinator's Winter 2022 Batch", "url": "https://nairametrics.com/2021/12/27/identitypass-joins-y-combinators-winter-2022-batch/", "date": "Dec 27, 2021" } ], "launches": [] }, { "id": 25937, "name": "Argument Computer Corporation", "slug": "argument-computer-corporation", "former_names": [ "Yatima Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b018aec0c7e89471028397fc469f207047365435.png", "website": "https://argument.xyz", "all_locations": "Boston, MA, USA; Remote", "long_description": "Argument combines zero-knowledge cryptography, formal verification and distributed consensus technologies to build systems for unbreakable, scalable, private, decentralized software.", "one_liner": "Accelerate verifiable computing", "team_size": 8, "industry": "B2B", "subindustry": "B2B", "launched_at": 1648223638, "tags": [ "Crypto / Web3", "Security", "Cryptography" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/argument-computer-corporation", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/argument-computer-corporation.json", "year_founded": 2020, "city": "Boston", "country": "US", "linkedin_url": "", "x_url": "https://x.com/argumentxyz", "fb_url": null, "cb_url": null, "github_url": "https://github.com/argumentcomputer", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b018aec0c7e89471028397fc469f207047365435.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 45002, "full_name": "John Burnham", "title": "Founder", "founder_bio": "CEO @ Argument Computer Corporation", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/john-burnham-01190a32/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/707a17340d12b25a619e545cf8eec68d7e83b818.jpg" }, { "user_id": 800887, "full_name": "Gabriel Barreto", "title": "Founder", "founder_bio": "Co-Founder and Chief Architect at Yatima Inc.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/gabriel-aquino-barreto-2b512a197/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/22c528a19d49c7ab2dc98837997d92006e38a436.jpg" }, { "user_id": 433785, "full_name": "Samuel Burnham", "title": "Founder", "founder_bio": "Co-founder and Vice President at Argument", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/samuel-burnham/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/5b65f3b1d8db7cd3ce1105900bd461e6636e07f4.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 26296, "name": "Reality Defender", "slug": "reality-defender", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5de4d57756c747e087b70e720cbfdb09672b0cc7.png", "website": "http://www.realitydefender.com", "all_locations": "New York City, NY, USA", "long_description": "Reality Defender is the market leader in deepfake detection, protecting enterprises and governments from realtime deepfake and agentic fraud. Sign up for free access at https://www.realitydefender.com/api\r\n\r\nWebsite: www.realitydefender.com\r\nContact: ask@realitydefender.com\r\nYC AMA: https://news.ycombinator.com/item?id=30766050\r\n\r\nAwards:\r\n2025 - Gartner: Recognized as Market Leader in Deepfake Detection\r\n2025 - JPMorgan: Inducted into Hall of Innovation\r\n2025 - World Economic Forum: Named Technology Pioneer\r\n2025 - USA DIU + Japan MOD: 1st Place \"Global Innovation Challenge\"\r\n2024 - RSA Conference: 1st Place “Most Innovative Startup”\r\n2024 - SINET16 Innovator Award\r\n2023 - SXSW 1st Place \"Artificial Intelligence, Voice, & Robotics Technologies\"", "one_liner": "Enterprise Deepfake Detection", "team_size": 54, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1647888631, "tags": [ "SaaS", "Deepfake Detection", "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/reality-defender", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2022/reality-defender.json", "year_founded": 2021, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/reality-defender/", "x_url": "https://twitter.com/detectdeepfakes", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/reality-defender", "github_url": "https://github.com/Reality-Defender", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5de4d57756c747e087b70e720cbfdb09672b0cc7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/5964c6802789808a4a4b473d7214a50d97b4e447.png" ], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 868173, "full_name": "Ben Colman", "title": "Founder/CEO", "founder_bio": "Reality Defender is the market leader in deepfake detection, protecting enterprises and governments from realtime deepfake and agentic fraud.\n\nSign up for free access at realitydefender.com/api\n\nAwards:\n2026/2025 - Gartner: Market Leader in Deepfake Detection\n2025 - JPMorgan: Annual Innovation Award (Inducted into Hall of Innovation)\n2025 - World Economic Forum: Technology Pioneer\n2025 - USA DIU + Japan MOD: 1st Place Global Innovation Challenge\n2024 - RSA Conference: 1st Place", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/benpcolman/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/924b95d2c1dc709772405dca88c251725ee79247.jpg" } ], "jobs": [], "news": [ { "title": "KPMG announces partnership with Reality Defender for deepfake detection", "url": "https://kpmg.com/kpmg-us/content/dam/kpmg/pdf/2023/deepfakes-real-threat.pdf", "date": "Nov 21, 2023" }, { "title": "AI fake content detection tools | Deloitte Insights", "url": "https://www2.deloitte.com/uk/en/insights/focus/tech-trends/2024/reality-defender-helping-companies-with-ai-content-detection.html", "date": "Nov 10, 2023" }, { "title": "President Biden’s AI executive order has ‘dangerous limitations,’ says deepfake detection company CEO", "url": "https://www.foxbusiness.com/media/president-bidens-ai-executive-order-dangerous-limitations-deepfake-detection-ceo", "date": "Nov 08, 2023" }, { "title": "Google Image Search Will Now Show a Photo’s History. Can It Spot Fakes? | WIRED", "url": "https://www.wired.com/story/google-about-this-image-misinformation/", "date": "Oct 25, 2023" }, { "title": "Reality Defender raises $15M to detect text, video and image deepfakes | TechCrunch", "url": "https://techcrunch.com/2023/10/17/reality-defender-raises-15m-to-detect-text-video-and-image-deepfakes/", "date": "Oct 17, 2023" } ], "launches": [ { "id": 92611, "title": "🚀 Reality Defender: Deepfake Detection with Two Lines of Code", "tagline": "We just made deepfake detection incredibly simple — with two lines of code", "body": "It’s been a few years since our[ 2022 YC HackerNews launch](https://news.ycombinator.com/item?id=30766050). We’ve since deployed realtime deepfake detection for tier-one banks, media and governments.\n\nAnd one request kept coming: a **public API** to build deepfake detection into any stack.\n\n# 🙌 **We heard you!**\n\nWe’re psyched to announce our that enterprise-grade deepfake detection **API + SDKs** are now exclusively available to **every YC developer** ahead of our public launch. And we’re **including 50 free scans per month**!\n\n# **🎁 YC Early Access: [https://www.realitydefender.com/api](https://www.realitydefender.com/api)**\n\n![uploaded image](/media/?type=post&id=92611&key=user_uploads/868173/759df5fe-4e52-4f41-b197-7e87a97ca248)\n\n**If your product touches voice or image, our API + SDKs gives it instant protection against:**\n\n* 🎙️ AI-generated voice fraud\n* 👤 Fake identities in IDV/KYC \n* 🗣️ Synthetic identities and media across consumer platforms\n* 🚨 AI-manipulated images fueling disinformation\n\nWe **update and improve our models constantly** to stay ahead of emerging threats and built these API and SDKs with simplicity and transparency in mind.\n\n# **🔥 YC Launch Offer**\n\n* 50 free scans/month for YC Launch devs\n* First 5 devs who integrate get get $250 + RD swag\n* Email us at [hello@realitydefender.com](mailto:hello@realitydefender.com) for high volume access, or to connect with our infra/security leads\n\n# **🔥🔥 Free Access for All Devs:[ ](http://app.realitydefender.ai)[Link To Sign Up](https://www.realitydefender.com/api)**\n\n**API**\n\n* [GitHub](https://github.com/Reality-Defender/sample_scripts) /[ Quick Start Guide](https://docs.realitydefender.com/api-reference/quickstart)\n\n**SDKs**\n\n* Python:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-python) /[ PyPI](https://pypi.org/project/realitydefender/)\n* Rust:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-rust) /[ Crates](https://crates.io/crates/realitydefender)\n* Java:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-java) /[ Maven](https://central.sonatype.com/artifact/ai.realitydefender/realitydefender-sdk)\n* Typescript:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-typescript) /[ NPM](https://www.npmjs.com/package/@realitydefender/realitydefender)\n* Go:[ GitHub](https://github.com/Reality-Defender/realitydefender-sdk-go)", "url": "https://www.ycombinator.com/launches/O5j-reality-defender-deepfake-detection-with-two-lines-of-code", "votes": 8, "created_at": "2025-07-31T17:38:03.899Z" } ] }, { "id": 26654, "name": "Wolfia", "slug": "wolfia", "former_names": [ "Inbox Infinity" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6aca6b5b0b9f6220fccaff77654ee7c479236f62.png", "website": "https://wolfia.com", "all_locations": "Austin, TX, USA; Remote", "long_description": "We help security, legal and sales teams get answers in seconds without depending on subject-matter experts.\r\n\r\nOur AI agent connects to every source that already holds the truth (Google Drive, Notion, Slack, email, website, trust center, SOC 2 docs, etc.). It keeps that knowledge graph fresh on its own and drafts, validates, and formats responses to customer questions, security questionnaires, and RFPs, all in the background, so your team just reviews and ships.", "one_liner": "We help security, legal and sales teams answer customer questions", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Sales", "launched_at": 1658875414, "tags": [ "Generative AI", "Security", "Sales", "LegalTech" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Sales" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/wolfia", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2022/wolfia.json", "year_founded": 2022, "city": "Austin", "country": "US", "linkedin_url": "https://www.linkedin.com/company/wolfia-app", "x_url": "https://twitter.com/wolfia_app", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/6aca6b5b0b9f6220fccaff77654ee7c479236f62.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 1008965, "full_name": "Naren Manoharan", "title": "Founder", "founder_bio": "Cofounder and CEO of Wolfia. Prior to Wolfia, Naren led the infrastructure engineering teams at Wealthfront and has a Masters in CS (specializing in AI and Machine Learning)", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/narenkmanoharan/", "x_url": "https://twitter.com/narenmano", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/13625dc4138abef53aeb1529850d190c6dbc74e3.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 26847, "name": "Slauth.io", "slug": "slauth-io", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/004f2f17d69c6a7d9b09c060c1c5711e24251d97.png", "website": "https://slauth.io/", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Slauth.io generates and rightsizes IAM policies in order to save engineering time and secure the organization. We use PR's to suggest what good functional and secure IAM policies should look like and integrate with IaC (Terraform) to have a seamless end-to-end IAM policy creation and deployment. Save hundreds of DevOps engineering time each year and increase your security to scale faster. \r\n", "one_liner": "The IAM Policy Copilot", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1659357857, "tags": [ "Developer Tools", "DevSecOps", "Productivity", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2022", "status": "Inactive", "industries": [ "B2B", "Infrastructure" ], "regions": [ "Israel", "Middle East and North Africa", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/slauth-io", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2022/slauth-io.json", "year_founded": 2022, "city": "Tel Aviv-Yafo", "country": "IL", "linkedin_url": "https://www.linkedin.com/company/slauth-io", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/004f2f17d69c6a7d9b09c060c1c5711e24251d97.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 910442, "full_name": "Daniel Haven", "title": "Founder", "founder_bio": "Born and Raised in Amsterdam, Currently residing in Tel Aviv. Founded ProctorExam in 2014 and led it to become one of the biggest global online proctoring company. Sold it successfully to US leading EdTech company Turnitin. \nNow working on Slauth.io which is aiming to simplify and secure access management for the cloud infrastructure.", "is_active": false, "linkedin_url": "https://linkedin.com/in/danielhaven", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a9ee555871c3eb613458e57dfac83014194ae2ed.jpg" }, { "user_id": 1014400, "full_name": "Tal Auslander", "title": "Founder", "founder_bio": "TLV. Ex-8200. 1st CTO at ProctorExam (EdTech), acquired by TurnItIn. Chief Architect at SignifAI (AIOps), acquired by New Relic.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/talaus", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/00a6989a7a76f68bce48c107b9b3ff1b82757d54.jpg" }, { "user_id": 1047403, "full_name": "Moti Elkayam", "title": "Founder", "founder_bio": "Extensive SW engineering & Product background. \nGraduated computer science (B.Sc.) in the Technion (Israeli MIT). \nLeading product management in the last 10 years (inc MLNX switch software product -acquired by Nvidia).\nSlauth.io is our venture in the space of Identities and Access Management (IAM). \nWe secure and streamline organizations' multi-cloud human and machine identities' permissions.\nLove to hike and run.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/moti-elkayam-6a6a06/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4e6915a8e37882e206cd531e4e82ccd1a25a9c25.jpg" } ], "jobs": [], "news": [], "launches": [] }, { "id": 27162, "name": "Oneleet", "slug": "oneleet", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/35b93ab2671a1397037aa92e0703d5f6c2ec0fba.png", "website": "https://www.oneleet.com/?utm_source=yc&utm_medium=bookface", "all_locations": "Amsterdam, NH, Netherlands", "long_description": "Oneleet helps companies become secure and compliant through an all-in-one solution that combines automated tools and human expertise.\r\n\r\nOneleet has built the second generation of security compliance automation software, providing tools that go beyond what is classically provided for just compliance alone. Tools like a code security scanner, attack-surface management, access reviews and trust portal are all built in.\r\n\r\nAs the most popular, highest rated and most frequently used platform in the YC community, Oneleet has quickly established itself as the preferred and superior alternative to other incumbents.\r\n\r\nThe founder behind Oneleet has spent the past 10+ years helping companies become more secure by performing penetration tests.", "one_liner": "YC's most popular security compliance platform (SOC 2, ISO 27001,…", "team_size": 75, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1657281241, "tags": [ "SaaS", "B2B", "Compliance", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Netherlands", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/oneleet", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2022/oneleet.json", "year_founded": 2022, "city": "Amsterdam", "country": "NL", "linkedin_url": "https://linkedin.com/company/oneleet", "x_url": "https://x.com/oneleet", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/35b93ab2671a1397037aa92e0703d5f6c2ec0fba.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/2eb8754aa0adaf58ef29f06c353b4975a0c1291e.png", "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/9279569ea68c6a5ecb53edad2ba2b3ca96f8c467.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 233375, "full_name": "Bryan Onel", "title": "Founder", "founder_bio": "Penetration Tester with 10+ years of experience helping companies become more secure by simulating advanced attacks. Has experience leading security teams and architecting offensive and defensive security solutions.\n\nBefore pursuing a career in hacking, Bryan studied AI and Medicine.", "is_active": true, "linkedin_url": "https://nl.linkedin.com/in/bryan-onel/", "x_url": "https://twitter.com/bryanonel86", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9c0799c948a5d9d9a59974cd6427476817e4a497.jpg" }, { "user_id": 968809, "full_name": "Ora Onel", "title": "Founder", "founder_bio": "I have a background in medical genetics. I developed a passion for cybersecurity and decided to start a security company together with my husband.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/ora-touitou/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f2cc3ca2245b2980e81032f7787eb8e81ce60c8b.jpg" } ], "jobs": [ { "id": 91603, "title": "Senior Product Designer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/1vpHh5M-senior-product-designer", "location": "Remote (US)", "type": "Full-time", "role": "Product", "role_type": null, "salary_range": "$120K - $190K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 91970, "title": "Community Event & Engagement Manager - San Francisco, CA", "url": "https://www.ycombinator.com/companies/oneleet/jobs/CMtrf5F-community-event-engagement-manager-san-francisco-ca", "location": "San Francisco, CA, US / Remote (San Francisco, CA, US)", "type": "Full-time", "role": "Marketing", "role_type": null, "salary_range": "$100K - $150K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97504, "title": "Product Manager", "url": "https://www.ycombinator.com/companies/oneleet/jobs/YXCqogN-product-manager", "location": "Remote (US)", "type": "Full-time", "role": "Product", "role_type": null, "salary_range": "$130K - $180K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97508, "title": "Security Program Manager", "url": "https://www.ycombinator.com/companies/oneleet/jobs/umdbAFP-security-program-manager", "location": "Remote (US)", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$75K - $140K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97509, "title": "Senior Product Designer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/eJbx6wR-senior-product-designer", "location": "Remote (US)", "type": "Full-time", "role": "Design", "role_type": "Web design", "salary_range": "$130K - $165K", "equity_range": "", "experience": "5+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97510, "title": "Fullstack Engineer, AI Implementation", "url": "https://www.ycombinator.com/companies/oneleet/jobs/LIybTCA-fullstack-engineer-ai-implementation", "location": "Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$110K - $180K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97511, "title": "Application Security Engineer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/qKwsUvP-application-security-engineer", "location": "US / GB / NL / Remote (US; GB; NL)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$160K - $220K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 97512, "title": "Fullstack Engineer", "url": "https://www.ycombinator.com/companies/oneleet/jobs/oR8tXgm-fullstack-engineer", "location": "Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $180K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Oneleet raises $33M to shake up the world of security compliance | TechCrunch", "url": "https://techcrunch.com/2025/10/02/oneleet-raises-33m-to-shake-up-the-world-of-security-compliance/", "date": "Oct 02, 2025" } ], "launches": [ { "id": 84326, "title": "Oneleet - Compliance without Security Theater", "tagline": "The all-in-one Security and Compliance platform for SOC 2, ISO, HIPAA, and more.", "body": "![uploaded image](/media/?type=post&id=84326&key=user_uploads/233375/6e14f2e5-0ed9-4b12-98f8-e194071f08d4)\n\n# **What is Oneleet in a nutshell?**\n\n[Oneleet](https://www.oneleet.com/) helps companies build genuine security and achieve compliance without the usual security theater BS.\n\nWe provide a comprehensive all-in-one solution for SOC 2, ISO 27001, HIPAA, GDPR, & PCI compliance, including automation, penetration testing, audit support, and continuous monitoring.\n\nOur hands-on approach and in-house security expertise have quickly made us the #1 choice for compliance in the YC community.\n\n[Book a call with us if you’re in the market for compliance](https://calendly.com/d/cwr7-ztb-xxq/oneleet-introduction?preview_source=et_card)\n\nㅤ\n\n# **Why We Built Oneleet**\n\nHey! I’m Bryan Onel, the CEO of Oneleet. I co-founded Oneleet with my wife, Ora Onel, and my best friend, Erik Vogelzang, with one mission: to help startups build genuine security without the nonsense.\n\nAfter spending a decade as a penetration tester and security program manager, I grew frustrated with platforms that claimed to help with compliance but were really just about ticking boxes. They weren't helping businesses _become_ secure—they were just pretending.\n\nThat’s why we built Oneleet: to be the solution that truly focuses on security, not just compliance theater.\n\nㅤ\n\n# **The Problem**\n\nLet's be honest… most compliance platforms are all about security theater:\n\n* Ticking boxes instead of building actual security, making you waste time on useless things that are irrelevant to security\n* Dumping checklists on you and wishing you good luck\n* Making you juggle countless tools and vendors\n* Leaving you to deal with external auditors who don't understand real security\n* Hitting you with unpredictable pricing that keeps changing\n\nㅤ\n\n# **Our Solution**\n\n![uploaded image](/media/?type=post&id=84326&key=user_uploads/233375/e8d1a05a-7731-463b-97f6-6dad7407b58e)\n\nOneleet is here to change the game:\n\n* We build real-world security controls that actually protect your business\n* We take ownership of the entire process, from start to finish\n* We provide everything you need in one place, no vendor juggling required. Even code scanning and attack surface management are built in\n* We deal with external auditors, so you don't have to, speaking their language when needed\n* We act as an extension of your team, providing ongoing expert security help\n\nㅤ\n\n# **How It Works**\n\n1. **Scoping** – We assess your infrastructure, security concerns, and compliance needs\n2. **Custom Program** – We craft security that fits your size and needs\n3. **Expert Setup** – Our team of security and compliance experts guides you through implementation minus the jargon\n4. **Penetration Testing** – OSCE-certified experts find your weak spots\n5. **Compliance Automation** – We streamline SOC 2, ISO 27001, HIPAA, and more\n6. **Auditor Wrangling** – We battle incompetent external auditors so you don't have to\n7. **24/7 Protection** – Continuous monitoring keeps you secure, always\n\nㅤ\n\n# **What We Offer**\n\n![uploaded image](/media/?type=post&id=84326&key=user_uploads/233375/ddd8e80c-171f-45c2-a7bb-ce6baba122f5)\n\n* Compliance automation that actually works (SOC 2, ISO 27001, HIPAA, GDPR, & PCI)\n* OSCE-certified penetration testing\n* Third-party auditing with external auditors who get security\n* vCISO services\n* Employee Portal\n* Code security scanning\n* Attack surface monitoring\n* Mobile Device Management (MDM)\n\nㅤ\n\n## **Ready to Ditch Security Theater?**\n\nIf you're tired of pretending to be secure and want the real deal:\n\n* Book a call: https://calendly.com/d/cwr7-ztb-xxq/oneleet-introduction\n* Email us: [founders@oneleet.com](mailto:founders@oneleet.com)\n\nStuck with another platform? We can often help you get out of a contract and migrate everything to Oneleet. [Book a call with us to explore your options.](https://calendly.com/d/cwr7-ztb-xxq/oneleet-introduction)", "url": "https://www.ycombinator.com/launches/Lw6-oneleet-compliance-without-security-theater", "votes": 2097, "created_at": "2024-09-26T21:17:12.076Z" } ] }, { "id": 27258, "name": "AccessOwl", "slug": "accessowl", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f47d40efa2ec60ceb6de3d5dad85ab504f1c80f.png", "website": "https://www.accessowl.io/", "all_locations": "Berlin, Berlin, Germany; Remote", "long_description": "AccessOwl automates employee SaaS account provisioning and permissioning for any tool. IT teams from companies like Zeplin and Sary save 30 minutes on every request.\r\n\r\nAccess management used to be an enterprise problem. With work from home, exploding SaaS usage and the need for SOC2 certifications startups have the same problems as enterprises. \r\n\r\nMathias and Philip have built several startups and teams before and experienced the same problems around access management over and over again. Philip was the CEO and Co-Founder of blik, an award winning IoT solution that was used by Volkswagen and BMW. Mathias built the leading private payment infrastructure provider in Germany as well as the first digital car insurance as Co-Founder and CTO. Based on these experiences we decided to build a solution we wish we could have used when building our former companies.\r\n\r\nAccessOwl can be deployed within minutes instead of weeks by simply installing a Slack application. We save companies that use AccessOwl 30 minutes for every access request, on- and offboarding. ", "one_liner": "Managing your Employees' Access to SaaS", "team_size": 15, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1655853975, "tags": [ "SaaS", "B2B", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "Germany", "Europe", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/accessowl", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2022/accessowl.json", "year_founded": 2022, "city": "Berlin", "country": "DE", "linkedin_url": "https://www.linkedin.com/company/accessowl", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f47d40efa2ec60ceb6de3d5dad85ab504f1c80f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": null, "founders": [ { "user_id": 165231, "full_name": "Philip Eller", "title": "Founder", "founder_bio": "As CEO and Co-Founder of blik I sold thousands of IoT devices to BMW and Volkswagen before building out new business units for Compado (Ad-Tech). Scaling from 0-1.8M in profits selling within a single year. AccessOwl is solving the problems we had ourselves when scaling business in the past. ", "is_active": true, "linkedin_url": "https://de.linkedin.com/in/philip-eller-7667238b", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d03166921ce998207b30302568cfd90ca8fde25c.jpg" }, { "user_id": 824799, "full_name": "Mathias Nestler", "title": "Founder", "founder_bio": "Mathias Nestler is the co-founder and CTO of AccessOwl. He is a Forbes 30 under 30 Entrepreneur and CTO with 10+ years of experience in Technology. Former CTO & Co-Founder of FRIDAY.de (InsurTech). Former CTO of viafintech.com (FinTech). Loves to work on great products.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/mathias-nestler-a8436044/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4975f24c7b47682decfc9ecdd3ac8fb7eb7aaf8d.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 85154, "title": "AccessOwl - SaaS Spend Management", "tagline": "Track, manage and reduce your SaaS spend in a single place.", "body": "**tl;dr** AccessOwl SaaS Spend management is your single pane of glass across all your SaaS apps, allowing you to keep track, manage, and reduce your SaaS costs.\n\n![uploaded image](/media/?type=post&id=85154&key=user_uploads/165231/fc45f909-ef8a-4412-bf4f-35dbf1c1b8a5)\n\n**The Problem**\n\nWith SaaS apps multiplying across teams, budgets spiral due to overlooked renewals and unused licenses. Manual tracking via spreadsheets is inefficient, leading to hidden costs and wasted resources for finance and IT teams.\n\n**The Solution**\n\n**AccessOwl SaaS Spend Management** offers real-time cost visibility and centralized tracking to streamline SaaS management. By automating renewal alerts and usage insights, it empowers companies to cut waste and control SaaS spend efficiently.\n\n![uploaded image](/media/?type=post&id=85154&key=user_uploads/165231/594c73b0-0c58-4484-874e-c06f9d5f5f81)\n\n**Key Features**\n\n• **Cost Transparency on Access Requests**: Employees can now see the price tag on every seat and license before adding new software, keeping budgets on track from the start.\n\n• **Centralized Cost Tracking**: Filter SaaS costs by department, team, or individual employee. Get clear insights without the usual hassle of piecing together spreadsheets.\n\n• **Renewal Calendar**: Never miss a renewal or an opportunity to negotiate. The renewal calendar and usage insights help teams optimize spend, avoiding the waste of unused or forgotten subscriptions.\n\n• **Automatic Usage Tracking**: AccessOwl automatically tracks usage and flags unused accounts so you can cut out the fat and make every dollar count.\n\n![uploaded image](/media/?type=post&id=85154&key=user_uploads/165231/5203a6b2-3e37-4441-9a66-726230261a02)\n\n**Uncover all of your SaaS apps first**\n\nThe [free Shadow IT scan](https://www.accessowl.com/scan) gives you a quick and easy overview of every SaaS app that’s used within your organization.\n\n**🚀 Getting started with tracking, managing, and reducing SaaS spend**\n\nVisit [AccessOwl.com](http://AccessOwl.com) to learn more, or book a demo [here](https://calendly.com/d/dyj-q7w-qmb/accessowl-demo).", "url": "https://www.ycombinator.com/launches/M9S-accessowl-saas-spend-management", "votes": 13, "created_at": "2024-10-30T18:56:16.804Z" }, { "id": 81875, "title": "AccessOwl: Discover every hidden SaaS app and their users", "tagline": "🔍 Losing track of your SaaS apps? Uncover your Shadow IT with a single-click", "body": "Losing track of who has access to which apps is a nightmare. In [**Mathias Nestler**](https://www.linkedin.com/in/mathias-nestler-a8436044/) and my previous roles as CTO, COO, and CEO, the problem usually came up in one of three ways:\n\n1. **Missed Employee Offboardings:** If I don’t know which apps the employee used, it’s impossible to fully offboard them. There’s nothing worse than finding out an employee who left for your competition still has access to company data.\n2. **Failing Compliance:** The first question an auditor will ask is what systems you use. Knowing where your company data lives is at the core of any audit.\n3. **Unwanted Costs:** It sucks to find out that you pay for multiple apps that essentially do the same. You can only keep your team accountable if you know what they use.\n\nIn the world of IT administration this challenge is called ‘Shadow IT' - apps you are not aware being used by your team.\n\nHistorically, the only options have been to repeatedly ask employees to fill out a Gsheet with any apps they remember using or to manually search through Google Workspace OAuth logs.\n\n**Here’s a better option:** [**Uncover all SaaS apps and their users in a single click!**](https://www.accessowl.io/scan)\n\n![](https://bookface.ycombinator.com/media/?type=post&id=81875&key=user_uploads/165231/04941cdd-2f76-4b0c-b7f4-e44d0b1a41d1)\n\n[**Scan now!**](https://www.accessowl.io/scan)\n\n_The Shadow IT scanner will find any SaaS app your employees use in combination with Google or Microsoft sign-in._\n\n### FAQ\n\n> **Why do you offer this for free?**\n\nKnowing who has access to what should be the standard for all of us. We want to bring attention to the need to manage your access proactively, which is why we decided to offer a part of our product for free.\n\n> **How does it work?**\n\nAccessOwl reads your organization’s OAuth logs and matches them with our SaaS database. As a result, you’ll see which apps have been used and by whom.\n\n> **What if a user signed up with email/password and didn’t use ‘Sign in with Google/Microsoft’?**\n\nThis feature is not currently part of the free scan. However, our core product offers advanced Shadow IT detection, which includes checking for invitation emails.\n\n> **Is this safe to use?**\n\nYes, reading OAuth logs is common practice for SaaS management vendors. The data is only extracted when you actively request a scan. AccessOwl is SOC 2 Type II audited and GDPR compliant.\n\n[**Start your Shadow IT scan now!**](https://www.accessowl.io/scan)\n\nSurprised by the results? [_Book a free 1:1 consultation_](https://calendly.com/accessowl/30m) _with one of the AccessOwl founders to learn about best practices for keeping track of user access!_", "url": "https://www.ycombinator.com/launches/LIZ-accessowl-discover-every-hidden-saas-app-and-their-users", "votes": 19, "created_at": "2024-07-03T15:20:28.896Z" }, { "id": 64758, "title": "AccessOwl: Automate SaaS access for your employees", "tagline": "SaaS account provisioning and permissioning for your workforce. Save 30 minutes on every access request.", "body": "**tl;dr AccessOwl automates how your employees receive access to SaaS tools. Provision any tool, no matter what API is available. IT teams from companies like Zeplin save 30 minutes on every access request.**\n\n## **📜 The Story**\n\nManually creating software accounts, documenting it in Gsheets and rushing through dozens of tools with every offboarding. Those are struggles we faced time over time when building prior startups. Available solutions only cover a fraction of the tools and require expensive upgrades to enterprise-subscriptions ([SSO.Tax](http://SSO.Tax)). That’s why we built an easy-to-use tool with a Slack-UI that every employee knows how to work with and bundled it with unmatched provisioning capabilities (hundreds of apps!).\n\n![uploaded image](/media/?type=post&id=64758&key=user_uploads/165231/b1769bda-60e3-4cf9-9085-59489077abd7)\n\n## **❌ The Problem**\n\n1. **30 minutes wasted for every Access Request**: Your workforce needs to request, approve, provision, communicate & document for every single access request\n2. **Enterprise subscriptions needed**: Other solutions only work with specific APIs (SCIM/SAML) for which the highest enterprise subscription is needed (”SSO Tax”).\n3. **Compliance & Security**: Documenting who has access to what is a manual and tedious process that never is 100% accurate\n\n## **✨ The Solution**\n\n1. **Automated workflows in Slack**: On- & Offboardings, Access Requests and Approvals all handled directly in Slack. Stop the JIRA ticket-flood - saving your workforce time and nerves.\n2. **Provisioning & Permissioning**: AccessOwl is the future of Access Management. It handles all account changes (creation, deletion, updates) for all SaaS applications. The best: It works no matter what API is available.\n3. **Stay SOX, SOC2, HiPAA, ISO27001 compliant:** Full Audit-trail about who has access to what and ability to schedule recurring Access Reviews.\n\n![uploaded image](/media/?type=post&id=64758&key=user_uploads/165231/22da2853-f0c9-4beb-afd3-0d940596e675)\n\n## ⚡ **How it Works**\n\n1. **Install it in Slack:** Give your employees access in one single click\n2. **App Discovery & Sync**: Let AccessOwl discover all applications used by your team by connecting to your Google Workspace\n3. **Start (De)Provisioning**: Have AccessOwl automate all of your provisioning and deprovisioning tasks\n\n## 🌐 **Integrations**\n\nAccessOwl already works with over 100+ applications. Let us know which are the most relevant to you!\n\n![uploaded image](/media/?type=post&id=64758&key=user_uploads/165231/f9b7f249-5d53-42db-b35e-672c9f09eacc)\n\n### **Try out AccessOwl 7-days for free** or [book a demo with us](https://calendly.com/accessowl/accessowl-demo)", "url": "https://www.ycombinator.com/launches/GqU-accessowl-automate-saas-access-for-your-employees", "votes": 38, "created_at": "2022-07-20T13:07:22.390Z" } ] }, { "id": 27664, "name": "Infisical", "slug": "infisical", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e613a0916d0e99cf2fa52a3c8be726a00bd6c51a.png", "website": "https://infisical.com", "all_locations": "San Francisco, CA, USA", "long_description": "Infisical is the all-in-one security infrastructure platform for secrets, certificates, and privileged access management.\r\n\r\nInfisical stores your secrets and injects them back into your development workflow, CI/CD pipelines, and cloud infrastructure. It comes with secrets versioning, point-in-time recovery, audit logging, automatic secret rotation capabilities, and more.", "one_liner": "Security infrastructure for developers and agents", "team_size": 70, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1674066953, "tags": [ "Developer Tools", "SaaS", "B2B", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/infisical", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/infisical.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/infisical/", "x_url": "https://twitter.com/infisical", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/infisical", "github_url": "https://github.com/Infisical/infisical", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/e613a0916d0e99cf2fa52a3c8be726a00bd6c51a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 942802, "full_name": "Vlad Matsiiako", "title": "Founder", "founder_bio": "Co-founder/CEO of Infisical", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vmatsiiako/", "x_url": "https://twitter.com/matsiiako", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/66f8eb40aaf6ba990dcf3fb7787222e157a67ede.jpg" }, { "user_id": 1017557, "full_name": "Tony Dang", "title": "Founder", "founder_bio": "Co-founder of Infisical", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tuan-d-a104a6125/", "x_url": "https://twitter.com/dangtony98", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2419b4588a6d671c73445ca358b013681c458989.jpg" }, { "user_id": 1191187, "full_name": "Maidul Islam", "title": "Founder", "founder_bio": "", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/maidul98/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8aa9292f4de23b8453f0af5a125d55f417ec23e0.jpg" } ], "jobs": [ { "id": 77875, "title": "Full Stack Engineer", "url": "https://www.ycombinator.com/companies/infisical/jobs/Bf7eGmW-full-stack-engineer", "location": "San Francisco, CA, US / Remote (US; CA; PA; AR; BR; BO; UY; CL; EC; CO; HN; VE; PY; MX; NI; PE; CR; SV; GT; DO; CU; PR; HT; GF; AG; LC; GY; SR; MQ; GP; BL)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$100K - $180K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizenship/visa not required", "skills": [ "Node.js", "TypeScript" ] }, { "id": 85851, "title": "Senior Full Stack Engineer ", "url": "https://www.ycombinator.com/companies/infisical/jobs/2pwGcK9-senior-full-stack-engineer", "location": "San Francisco, CA, US / Remote (US; CA)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$180K - $250K", "equity_range": "", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 88824, "title": "Design Engineer, Brand", "url": "https://www.ycombinator.com/companies/infisical/jobs/SHYFnFw-design-engineer-brand", "location": "San Francisco, CA, US / Remote (US; CA)", "type": "Full-time", "role": "Design", "role_type": "Brand/graphic design", "salary_range": "$100K - $180K", "equity_range": "", "experience": "1+ years", "visa": "US citizenship/visa not required", "skills": [ "Marketing design" ] }, { "id": 88826, "title": "Design Engineer", "url": "https://www.ycombinator.com/companies/infisical/jobs/wjckxpL-design-engineer", "location": "San Francisco, CA, US / Remote (US; CA; BR)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$100K - $180K", "equity_range": "", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "JavaScript", "React", "TypeScript", "Figma" ] }, { "id": 103074, "title": "Enterprise Account Executive ", "url": "https://www.ycombinator.com/companies/infisical/jobs/bqS2vGP-enterprise-account-executive", "location": "New York, NY, US / Seattle, WA, US / Chicago, IL, US / Boston, MA, US / San Francisco, CA, US / Remote (New York, NY, US; Seattle, WA, US; Chicago, IL, US; Boston, MA, US; San Francisco, CA, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 103075, "title": "Solutions Engineer", "url": "https://www.ycombinator.com/companies/infisical/jobs/D4OujHu-solutions-engineer", "location": "New York, NY, US / Austin, TX, US / Atlanta, GA, US / Raleigh, NC, US / Washington, DC, US / Boston, MA, US / Remote (New York, NY, US; Austin, TX, US; Atlanta, GA, US; Raleigh, NC, US; Washington, DC, US; Boston, MA, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Infisical: The Open Source Security Stack", "url": "https://www.youtube.com/watch?v=qDumDlXcMkg", "date": "Jun 06, 2025" }, { "title": "Infisical raises $16 million Series A led by Elad Gil to safeguard secrets | Fortune", "url": "https://fortune.com/2025/06/06/infisical-raises-16-million-series-a-led-by-elad-gil-to-safeguard-secrets/", "date": "Jun 06, 2025" }, { "title": "Google's Gradient backs YC alum Infisical to solve secret sprawl | TechCrunch", "url": "https://techcrunch.com/2023/07/03/googles-gradient-backs-yc-alum-infisical-to-solve-secret-sprawl/", "date": "Jul 03, 2023" } ], "launches": [ { "id": 69599, "title": "💚 Infisical - The open source secrets manager for developers", "tagline": "Open source, end-to-end encrypted tool that lets you securely sync secrets and configs across your team, devices, and infrastructure", "body": "Hey there, this is team Infisical 🏂\n\n[Infisical](https://infisical.com/) is an open-source, end-to-end encrypted platform for developers to centralize their application secrets and configs, and sync them across their whole development life cycle.\n\nWe launched 3 months ago, and already have 4.2K+ stars on GitHub, 50 contributors, and 220+ community members 🚀\n\n![uploaded image](/media/?type=post&id=69599&key=user_uploads/942802/00941739-4c42-44c8-92e8-e8fc55f7cb1b)\n\n\n**Imagine this**: You add a new environment variable to your team’s codebase, push it up to GitHub, and head out for dinner. Shortly after, your teammate pulls the latest changes and everything crashes because they're missing that variable.\n\nYou come back to angry messages from your teammate and quickly send them the variable over text, risking a security vulnerability. Everything seems to be working until the next day when you deploy to production, and once again, everything crashes because you forgot to add the environment variable to the production environment.\n\nSounds relatable?\n\n![uploaded image](/media/?type=post&id=69599&key=user_uploads/942802/d8e6a881-8412-4baf-8f54-b8defb0ecd46)\n\n\n## **Problem**\n\nSecrets play a critical role in every stage of the software development lifecycle, from local development to staging, testing, and production. Even so, teams routinely run into challenges dealing with secret management:\n\n* **Missing secrets across infrastructure**: Having secrets sprawled across infrastructure with no central visibility and control often leads to missing secrets. In turn, applications crash in production and developers lose precious time debugging what’s missing.\n* **Leaking secrets to source control**: Even the biggest companies accidentally expose hardcoded secrets and .env files. When it happens, the consequences are grave.\n* **Lacking self-hosted alternatives**: Many great solutions are not self-hostable or end-to-end encrypted, a challenge for companies requiring it. In a world where security and privacy are increasingly paramount, having these options are essential.\n\n## **Solution**\n\nInfisical provides an open-source, end-to-end encrypted platform for developers to manage their application secrets and sync them across their team and software development lifecycle.\n\nWith Infisical, you can:\n\n* **Securely store and deliver** application secrets to your infrastructure with integrations available for Docker, Kubernetes, AWS, Vercel, GitHub Actions, etc.\n* **Inject secrets** into applications instead of using .env files that often get leaked.\n* **Self-host** Infisical on your own infrastructure.\n* **Enhance observability** of secrets and teammates with secret versioning, rollbacks, and audit logs for every action taken.\n\n![uploaded image](/media/?type=post&id=69599&key=user_uploads/942802/afe74cca-1292-4f25-b0d5-03ae9fc21327)\n\n\n## **Asks**\n\n* Check out Infisical at \n* Contact [tony@infisical.com](mailto:tony@infisical.com) if your company needs help with secret management\n* Intros to companies that in your experience may benefit from Infisical", "url": "https://www.ycombinator.com/launches/I6Z-infisical-the-open-source-secrets-manager-for-developers", "votes": 58, "created_at": "2023-02-23T15:39:57.107Z" } ] }, { "id": 27672, "name": "Blyss", "slug": "blyss", "former_names": [ "Spiral" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a070a3276443496b8e98455f7edba47028991034.png", "website": "https://blyss.dev/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Blyss is an AI model provider built on strong security guarantees. We run AI workloads in GPU-based secure enclaves, which keep data encrypted even while it's being processed. Our customers get a privacy model similar to on-premises deployment, without ever having to think about AI infrastructure or GPU supply. \r\n\r\nThe Blyss team has strong experience in cryptography and AI from Stanford, Apple, Nvidia, and more. We think data privacy is fundamental to safe, trustworthy AI, so it's our job to make end-to-end encrypted AI a no-compromise option - just like Signal and WhatsApp did for messaging.", "one_liner": "End-to-end encrypted AI.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1677026433, "tags": [ "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/blyss", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/blyss.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/blyssprivacy/", "x_url": "https://twitter.com/blyssdev", "fb_url": null, "cb_url": null, "github_url": "https://github.com/blyssprivacy", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a070a3276443496b8e98455f7edba47028991034.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harj Taggar", "url": "https://www.ycombinator.com/people/harj-taggar" }, "founders": [ { "user_id": 175680, "full_name": "Samir Menon", "title": "Founder", "founder_bio": "Worked at Yubico. Wrote ia.cr/2022/368. Stanford CS '19 BS + MS.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/samir-menon-27954214b/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/bf0f53add650620dbd2b4e70d5207b1bfa4dd840.jpg" }, { "user_id": 75138, "full_name": "Neil Movva", "title": "Founder", "founder_bio": "I've spent my whole career making computers go fast, especially for deep learning. I love large scale compute and care deeply about democratizing this power.\n\nPreviously, I worked on the Apple Neural Engine, and NVIDIA's cuDNN. Stanford '19, BS and MS in EE.", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/nmovva/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f5b0073f3a3a51b304eca2dcfb6a0acff802dc25.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 69550, "title": "Blyss - the SDK for privacy.", "tagline": "We make it easy to use and deploy homomorphic encryption.", "body": "## **TLDR:** Homomorphic encryption offers much stronger privacy guarantees than anyone thought possible. Blyss is the future of privacy, available today as a [developer-focused API](https://blyss.dev/).\n\nWe are Samir and Neil, the founders of Blyss.\n\n![uploaded image](/media/?type=post&id=69550&key=user_uploads/75138/64e460e5-9627-4f23-b3ec-57be1d24ac9e)\n\n## 😧 Problem: outside of FAANG, privacy is stuck in the ‘90s🕺\n\nPrivacy is a competitive advantage. There’s a billboard on the 101 explaining how WhatsApp can’t read your messages, millions of consumers use VPNs to secure their everyday browsing, and Apple doesn’t finish a keynote without touting new, frontier-pushing privacy practices. \n\nBut unless you’re at big tech, the most powerful new privacy tools are almost completely inaccessible. Chrome and Edge use homomorphic encryption to scan unsafe URLs and check passwords, but a startup wanting to offer similar features would need a team of PhDs to build them in-house.\n\n## 🛠️ Our solution: cutting-edge privacy, as a service\n\nThe [Blyss SDK](https://blyss.dev/) offers developers a key-value store with unusually strong privacy guarantees. Create S3-like buckets, fill them with data, and then make cryptographically secure retrievals. No entity, not even the Blyss service itself, can learn which items are retrieved from a Blyss bucket.\n\nPrivate retrieval is a simple but powerful new primitive. Using it,\n\n* Password managers can check if you’ve been exposed in a data breach, without learning anything about your passwords\n* Browsers can resolve domain names privately, without revealing every website you visit to DNS servers\n* Code scanners can safely check repos for vulnerabilities, without ever seeing customer codebases or the scan results\n\nPeople are building lots of new web apps with Blyss - try some of the best ones at the [Blyss playground](https://playground.blyss.dev)!\n\n# 🙇 The ask\n\n## 🧑‍💻 Developers:\n\nTry [our SDK](https://blyss.dev/) - it’s a self-serve, cloud storage service (feels just like S3), that transparently handles encryption and privacy for you. And if it isn’t quite clear how to fit privacy into your app, we’ll help you!\n\n## 🕵️ Privacy-conscious users:\n\nTell us about apps/services that feel icky because they collect too much data. It may not be obvious how to fix them, but your gut feelings on privacy are super valuable to us.\n\n## 🕴️ Bonus:\n\nIf you know companies that are trying to make privacy their competitive advantage (password managers, VPNs, etc), introduce us ([founders@blyss.dev](mailto:founders@blyss.dev))!\n\n## 👯 About us\n\nWe met eight years ago on Day 1 of freshman year at Stanford; we’ve been best friends since. Neil was previously at Apple working on ML; Samir worked at Yubico on applied security, and before that did research on homomorphic encryption with Dan Boneh. We [published](https://eprint.iacr.org/2022/368) the fastest-ever scheme for private retrieval at a top cryptography conference (Oakland). Now, we’re working to make advanced privacy technology available to everyone.", "url": "https://www.ycombinator.com/launches/I5m-blyss-the-sdk-for-privacy", "votes": 31, "created_at": "2023-02-22T17:37:27.725Z" } ] }, { "id": 27809, "name": "EdgeBit", "slug": "edgebit", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/129c0d512b87fa767fbbc001172d26269d9a0ab0.png", "website": "https://edgebit.io", "all_locations": "San Francisco, CA, USA", "long_description": "EdgeBit was acquired by FOSSA in July 2025: https://fossa.com/blog/fossa-acquires-edgebit/\r\n\r\nEdgeBit enables engineering teams to ship security updates 10x faster with confidence by automating dependency update analysis. Our platform turns weeks of manual review into minutes, helping teams find and fix security vulnerabilities while maintaining a secure, up-to-date software supply chain without compromising productivity.", "one_liner": "Autofix your software dependencies", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1672965227, "tags": [ "DevSecOps", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/edgebit", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/edgebit.json", "year_founded": 2022, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/edgebit/", "x_url": "https://twitter.com/EdgebitIO", "fb_url": null, "cb_url": null, "github_url": "https://github.com/edgebitio/", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/129c0d512b87fa767fbbc001172d26269d9a0ab0.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 230598, "full_name": "Rob Szumski", "title": "Founder", "founder_bio": "Rob Szumski is CEO and co-founder of EdgeBit, the security platform that secures your software supply chain by focusing on code that is actually running. EdgeBit simplifies vulnerability management as it cuts through noise that distracts engineers merging code.\n\nRob was an early employee of CoreOS (YC S13) which popularized the immutable operating system and propelled Kubernetes/container tech into the mainstream. CoreOS was acquired by Red Hat in 2018, where Rob was a Director of Product.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/robszumski/", "x_url": "https://twitter.com/robszumski", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/60e818e2ea2e9958d82e367fd34da1797653d7ce.jpg" }, { "user_id": 5721, "full_name": "Eugene Yakubovich", "title": "Founder", "founder_bio": "Eugene is a long time hacker who likes to work at the application / operating systems boundary. In the past, he designed the foundational layers for high-frequency trading, contributed to the container runtimes, and implemented graph algorithms for continent size road networks.\n\nLately he has been on a mission to secure workloads and in 2022 he teamed up with Rob and Russell to tackle the problem, starting with fixing the vulnerability fire hose.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/eugene-yakubovich-4640604/", "x_url": "https://twitter.com/eyakubovich", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/c569124aefb1e5e87e2e6cae1108ec324218e46d.jpg" } ], "jobs": [], "news": [ { "title": "FOSSA Acquires EdgeBit: From Scanning to Updating", "url": "https://fossa.com/blog/fossa-acquires-edgebit/", "date": "Sep 28, 2025" } ], "launches": [ { "id": 69144, "title": "EdgeBit - Secure your software supply chain", "tagline": "Supply chain analysis that eliminates noise in vulnerability response", "body": "tl;dr: [EdgeBit](https://edgebit.io) automatically inventories software dependencies, ensures they are trusted, and monitors vulnerabilities – securing your software supply chain. For security teams, we help you meet new compliance requirements about the libraries and packages in your products. For engineers, we make vulnerability investigation/patching streamlined, so you can get back to writing code.\n\nHi everyone, we are Rob, Russell and Eugene, the team behind [EdgeBit](https://edgebit.io).\n\nWe’re on a mission to make software secure by default. EdgeBit deeply understands how your app is built, what makes it up and how it’s running. That knowledge builds up trust to make developers lives easier, and your entire server fleet more secure.\n\n![uploaded image](/media/?type=post&id=69144&key=user_uploads/230598/b3341e0d-c53a-49b4-a31a-c5d9a5fa6c8c)\n\nLeft - [Eugene](https://www.linkedin.com/in/eugene-yakubovich-4640604/) - Chief Architect and low level hacker. He worked on pathfinding algorithms at Lyft, container networking at CoreOS and performance optimization in his high frequency trading days.\n\nCenter - [Rob](https://www.linkedin.com/in/robszumski/) - CEO and product leader. He was a Director of Product at Red Hat working on the OpenShift/Kubernetes platform after their acquisition of CoreOS (YC S13).\n\nRight - [Russell](https://www.linkedin.com/in/russellhaering/) - CTO and master of backend systems. He ran security engineering at Okta after their acquisition of ScaleFT, the zero trust access management startup he cofounded.\n\n## The Problem: securing software still feels like throwing problems over a wall\n\nSecurity teams have important work to do – meeting a maze of compliance rules against a constantly moving target of dependencies, frameworks and deployment platforms. Automation is key, but security teams aren’t experts in each app, so “open a ticket for any vulnerability found” is a typical workflow. This is a firehose for app teams, and tickets don’t contain the context needed for a speedy investigation.\n\n![uploaded image](/media/?type=post&id=69144&key=user_uploads/230598/201aef87-ad12-4842-9b9d-f423f8ccd315)\n\nLooking beyond compliance, real attacks are happening via software dependencies. For a single library, it’s tricky to securely download, integrate, sign and verify it…and very hard for 100s of dependencies across multiple apps. An enterprise can use [40,000 open-source software packages](https://www.theregister.com/2023/02/05/supply_chain_security_efforts/) each bringing another 77 dependencies.\n\nAn end-to-end system across the build→scan→run→monitor is required to stop these attacks. Dependencies are fragmented across OS packages, standalone binaries and containers, but a single view across all is required to understand the full attack surface.\n\n## EdgeBit: Map your supply chain from build to production in real time\n\n![uploaded image](/media/?type=post&id=69144&key=user_uploads/230598/9872f16b-3980-4c64-bf6f-fe47a5f82262)\n\nEdgeBit builds up context and trust by observing your software from build until deployment to your server fleet. How does it work? Install EdgeBit into your build pipeline and your server fleet/Kubernetes cluster via a tiny agent to immediately enable teams to bring vulnerabilities under control:\n\n* Security: track workload signatures, provenance and prevent malicious modification\n* Compliance: build a real time inventory tracked back to the software’s bill of materials (SBOM)\n* Engineering: prioritize vulnerability investigation based on deep context\n* Enterprises: track patching across teams. The next log4j will come, and it’s a huge endeavor without real time inventory across all tech stacks and packaging formats.\n\n## Try out EdgeBit\n\nSecurity teams can [install EdgeBit](https://edgebit.io) to track their supply chain and even help compliance managers do their job without getting engineering involved. Remove frustration from your vulnerability response program by connecting your teams together and take control back from noisy scanners.\n\nSecuring supply chains is just a step in our journey. Using trust profiles between systems is key to a zero trust security posture. We’d love to chat with you about acute compliance needs or long term security goals of your organization.", "url": "https://www.ycombinator.com/launches/HzE-edgebit-secure-your-software-supply-chain", "votes": 23, "created_at": "2023-02-08T20:44:58.421Z" } ] }, { "id": 28216, "name": "Escape", "slug": "escape", "former_names": [ "Escape", "Escape - GraphQL Security", "Escape", "Escape - GraphQL Security", "Escape - Modern Application Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0210bbcb75b7ba7c4519705bd24c324666b9538b.png", "website": "https://escape.tech", "all_locations": "Paris, Île-de-France, France", "long_description": "Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows.", "one_liner": "Offensive security for the teams that are 100x outnumbered", "team_size": 29, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1674779031, "tags": [ "Developer Tools", "Security", "API", "GraphQL" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/escape", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2023/escape.json", "year_founded": 2020, "city": "Paris", "country": "FR", "linkedin_url": "https://www.linkedin.com/company/escapetech", "x_url": "https://twitter.com/escapetechhq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/escape-b74e", "github_url": "https://github.com/Escape-Technologies/", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/0210bbcb75b7ba7c4519705bd24c324666b9538b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/800e3fb4725e8871c3b399e845bf3cbf34384993.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1709764, "full_name": "Tristan Kalos", "title": "Founder", "founder_bio": "Building Escape (YC W23) to help AppSec and Engineering teams secure their Single Page Apps, APIs, and Microservices. Previously ML engineer at source{d} and researcher at UC Berkeley. Passionate about solving complex business problems with creative technology or user experiences. ", "is_active": true, "linkedin_url": "https://linkedin.com/in/tkalos", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/974be13b71b658127ab50adf890409c4b115df2e.jpg" }, { "user_id": 1167886, "full_name": "Antoine Carossio", "title": "Founder", "founder_bio": "🇫🇷 • Engineer • UC Berkeley • Apple", "is_active": true, "linkedin_url": "https://linkedin.com/in/acarossio", "x_url": "https://twitter.com/icarossio", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a423c0fb183e5b9696de588124a6cbdefe8c2193.jpg" } ], "jobs": [ { "id": 84153, "title": "Head of Sales ", "url": "https://www.ycombinator.com/companies/escape/jobs/yfEXoM2-head-of-sales", "location": "New York, NY, US / Remote (US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$200K - $400K", "equity_range": "", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Escape raises $18M Series A to replace legacy scanners with AI agent-driven discovery, pentesting, and remediation", "url": "https://escape.tech/blog/escape-raises-18m-series-a/", "date": "Mar 09, 2026" }, { "title": "New Security Research: We discovered over 2k high-impact vulnerabilities and PII in apps built with vibe coding platforms", "url": "https://escape.tech/blog/methodology-how-we-discovered-vulnerabilities-apps-built-with-vibe-coding/", "date": "Oct 29, 2025" }, { "title": "Meet Escape Copilot: Automate App and Scan Management via MCP", "url": "https://escape.tech/blog/meet-escape-copilot-automate-app-and-scan-management-via-mcp/", "date": "Jun 05, 2025" }, { "title": "Escape DAST Now in Beta: Front-End & SPA Testing Made Easy", "url": "https://escape.tech/blog/front-end-dast-beta/", "date": "Dec 10, 2024" }, { "title": "Fortune 1000 at risk: How we discovered 100k vulnerabilities", "url": "https://escape.tech/blog/fortune-1000-at-risk-30k-exposed-apis-100k-vulnerabilities/", "date": "Nov 20, 2024" } ], "launches": [ { "id": 69497, "title": "🛡 Escape - Secure your GraphQL APIs", "tagline": "We help companies create Fast, Secure, and Reliable GraphQL APIs", "body": "### **tl;dr:** **Securing GraphQL is hard.** Escape makes it easy for developers to build secure and reliable GraphQL APIs. **You can test it for free and get your results in seconds** using this link: \n\nHello everyone, we are Antoine and Tristan, the founding team behind Escape.\n\n![uploaded image](/media/?type=post&id=69497&key=user_uploads/1231138/4111cf07-557b-4da5-ad36-d2336aa3913a)\n\n🧠 **Tristan** (left) previously worked as a **GraphQL Developer** and experienced himself the need for better tooling in this ecosystem. 💪 **Antoine** (right) previously worked as a security engineer for the French Government and **Apple** 🍎 which led him to the journey of helping developers secure their code.\n\n### 🛡 Why are we building Escape?\n\nGraphQL has seen exponential growth in the past years and is now used by 20% of all developers. Companies like **Paypal**, **Walmart**, **Twitter**, and **Airbnb** are now all relying on GraphQL APIs for **their** **core businesses**.\n\nYet, we observed that most - as in like **95%** - of GraphQL APIs that exist today are insanely vulnerable to cyberattacks.\n\nThe reason is simple: GraphQL has an entirely different structure than traditional APIs like REST.\n\nExisting security tools do not support it, leaving GraphQL developers and organizations completely blind to the security of what they release and **putting their business at risk**.\n\n### 🎯 Our solution\n\nWe aimed to build the GraphQL Security Testing tool that devs would love. As developers ourselves, we think such a tool would\n\n* _be_ **fast to run in CI/CD**\n* _be super_ **easy to set up** and maintain\n* _give_ **relevant results**\n\nExisting tools fail at achieving the latter because they rely on brute-forcing API requests. Thus, most requests are blocked at the validation layer, failing to test the actual code.\n\nAt Escape, **we developed a new approach called _feedback-driven API exploration_**. We crafted a graph traversal algorithm that learns from the API's responses how to generate requests that actually make sense from a business standpoint.\n\n![uploaded image](/media/?type=post&id=69497&key=user_uploads/1231138/4d4ffbf4-e5af-46b9-927d-904530700300)\n\n_Requests generated by bruteforce (left) vs. **Escape’s feedback-driven exploration** (right)_\n\nUsing this technique, we are able to pass the validation layer and test the code of the application at a deeper level than previous solutions. So far, we have achieved **more than 80% coverage** in most applications without fine-tuning.\n\n### 🚀 let us assess the security of your GraphQL API for free in seconds\n\nIn only 6 months, we partnered with **Snyk** and **Postman**, got into the GraphQL foundation, and worked with companies like **Neo4j** and **ArangoDB**.\n\n👉 If you are using GraphQL yourself, you are welcome to try our platform and **get your application's security report for free**, as **we unlocked all the features for the YC community**: !", "url": "https://www.ycombinator.com/launches/I4v-escape-secure-your-graphql-apis", "votes": 1096, "created_at": "2023-02-21T19:45:54.930Z" } ] }, { "id": 28778, "name": "Xeol", "slug": "xeol", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3d8557d5066f2f1e94f1be8ddc427697b79cc8d1.png", "website": "https://www.xeol.io/", "all_locations": "New York City, NY, USA", "long_description": "Pronounced Zee-O-L. \r\n\r\nEnd-of-life (EOL) and outdated software are a black box of vulnerabilities with very limited remediation paths. These 2 factors combine to make managing them a necessary proactive practice. Xeol enables enterprises and Fortune 500s to create a proactive EOL management program that directly contributes to better vulnerability management and lower cyber insurance. ", "one_liner": "Close your outdated dependency attack vector", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1689618282, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2023", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/xeol", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/xeol.json", "year_founded": 2023, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/xeol", "x_url": "https://twitter.com/xeol_io", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/xeol", "github_url": "https://github.com/xeol-io", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3d8557d5066f2f1e94f1be8ddc427697b79cc8d1.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/8c4047771eda54f492d2bcd886af0cc692bc72b3.png" ], "primary_partner": null, "founders": [ { "user_id": 1279127, "full_name": "ShiHan Wan", "title": "Founder", "founder_bio": "CEO @ Xeol. Backend Engineer.\n\nPreviously helped build 2 startups from early to 🦄, now doing that for Xeol.\n\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/shihanwan", "x_url": "https://twitter.com/shihanwan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6ccd5955aeabc741fbfaefb062eb80e08362368c.jpg" } ], "jobs": [], "news": [ { "title": "🎉 Announcing our $3.2M Seed Round!", "url": "https://www.xeol.io/post/announcing-our-3-2m-seed-round", "date": "Dec 12, 2023" } ], "launches": [ { "id": 80578, "title": "bumpgen - keep your code up-to-date with AI", "tagline": "Open source tool to generate code fixes for breaking changes", "body": "![uploaded image](/media/?type=post&id=80578&key=user_uploads/89898/e210f386-2345-4c2e-ba0a-6133d756141a)\n\n[**bumpgen**](https://github.com/xeol-io/bumpgen) generates fixes for breaking changes in version upgrades with AI\n\n* 🧑🏼‍💻 `bumpgen ` to get fixes to your version bump breaking changes\n* 🔑 Bring your own **OpenAI API key**\n* 🌐 Supports **Typescript** codebases\n\n### Why build bumpgen?\n\nKeeping your dependencies updated is a good security and engineering practice (just not too up-to-date, thanks xz 🙏🏼). But they can be a pain to actual perform because:\n\n* **Major version bumps** have breaking changes and no one wants to fix them.\n* **25% minor version bumps** have breaking changes as well (semver isn’t perfect)\n* There can be a lot of version bumps from small packages to large frameworks\n\n### How Does bumpgen work?\n\n![uploaded image](/media/?type=post&id=80578&key=user_uploads/1279127/f06347b9-da03-4f95-aa1b-8f850576b262)\n\n**bumpgen** is pretty straight forward:\n\n* **BUMP** your dependency version then **GEN**erate the fixes for the breaking changes\n* Quick to get started with `npm install -g bumpgen`\n* Works on top of your Dependabot or Renovate to take care of those gnarly breaking changes\n\nIf you are curious how bumpgen identifies, fixes, then propagates the breaking change fix, we added bumpgen’s architecture and design decisions [**here**](https://github.com/xeol-io/bumpgen) 👈\n\n### How to start?\n\n* 🧑🏼‍💻 [**Try it out**](https://github.com/xeol-io/bumpgen), it’s 100% open source\n* ⭐ [**Support**](https://github.com/xeol-io/bumpgen) the project with a star\n* 📩 [**Get updated**](https://www.xeol.io/beta) on the GitHub app release", "url": "https://www.ycombinator.com/launches/Kxe-bumpgen-keep-your-code-up-to-date-with-ai", "votes": 43, "created_at": "2024-05-02T15:07:15.215Z" }, { "id": 73333, "title": "🌌 Xeol - Modern platform for software supply chain security", "tagline": "Cut through the noise, identify and remediate risks, then enforce security policies", "body": "![uploaded image](/media/?type=post&id=73333&key=user_uploads/1279127/210f8a5b-d0c2-4f78-a504-dea9eb6669ca)\n\n### TLDR\n\n> Fortune 500 companies use Xeol to connect all their software dependencies into a contextual graph to ask questions like “am I affected by vulnerability X?” and enforce policies like “ensure all my docker images were signed by me?”\n\n![uploaded image](/media/?type=post&id=73333&key=user_uploads/1279127/040b5865-0ba9-42f6-a893-bbf3f0eb3222)\n\nWe first met 6 years ago as early engineers at **Ada** leading backend, cloud infrastructure, and security. Right before founding Xeol:\n\n* **Benji** was a Sr DevOps Engineer at **Datadog** leading its service catalog project with a near decade career in DevOps\n* **ShiHan** was the Director of Engineering helping build 2 startups from early stage to 🦄\n\nWe have been in the startup world for many years and are now on our own journey to help AppSec engineers quickly identify, remediate, and enforce security risks.\n\n### Problem. A New Attack Vector\n\nAsk anyone on the street to plug in a random USB drive and they will scoff. They know it’s unsafe! But developers do this every day when they use open-source packages as part of their software supply chain. The typical npm package has **86 dependencies** and with supply chain attacks up **600%** over the past year alone, this attack vector is widening.\n\nWhat’s not working?\n\n* **Too much noise:** tools that show all possible CVEs without contextual runtime information make prioritization near impossible leading to alert fatigue\n* **Attacks are more common:** generative AI enables malicious actors to easily launch attacks\n* **Huge attack surface:** many actors involved including OSS maintainers and their code, CI/CD systems, container orchestrators, and in-house developers\n\n### Solution. Complete Ontological Visibility\n\n![uploaded image](/media/?type=post&id=73333&key=user_uploads/1279127/a7017029-25ff-45a2-b114-6386d949057d)\n\nXeol is an **agentless** solution that scans your software artifacts at **build** and **runtime** then creates a **contextual graph** of your software supply chain. This contextual graph allows AppSec engineers to:\n\n**answer** questions like\n\n* Where am I using package X?\n* Which software are end-of-life?\n* Which packages are missing SLSA attestations?\n* Which software artifacts are produced from repo X?\n\n**enforce** policies like\n\n* Ensure all Docker images were built by my org from our CI pipeline\n* Prevent software X, which is end-of-life, from being packaged in our Docker images\n* Ensure sure all packages meet a minimum [OSSF](https://openssf.org/) score\n* Prevent any dependencies using a GPL license\n\n### Our Ask\n\n**See** Xeol’s graph capabilities in action [here](https://dashboard.xeol.io/demo)\n\n**Try** our open-source CLI [tool](https://github.com/xeol-io/xeol) to scan for end-of-life software\n\n**Follow** us on [LinkedIn](https://www.linkedin.com/company/xeol), [GitHub](https://github.com/xeol-io), or [Twitter](https://twitter.com/xeol_io) to get the latest updates", "url": "https://www.ycombinator.com/launches/J4n-xeol-modern-platform-for-software-supply-chain-security", "votes": 45, "created_at": "2023-07-24T02:01:24.497Z" } ] }, { "id": 28862, "name": "Corgea", "slug": "corgea", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4f659e1a5051b790e28f097f1c858880dc797b7f.png", "website": "https://www.corgea.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Corgea is an autonomous application security platform that finds and validates vulnerabilities, then generates safe code fixes developers can apply in their existing workflow. In production customers like Zapier and Yageo, see ~20% more true positives and ~90% fewer false positives (vs their prior tooling), reducing triage and speeding remediation without adding headcount.\r\n", "one_liner": "Corgea finds, and fixes insecure code and packages autonomously. ", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1686005960, "tags": [ "Developer Tools", "SaaS", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/corgea", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/corgea.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/corgea/", "x_url": "https://twitter.com/CorgeaInc", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/corgea", "github_url": "https://github.com/Corgea", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4f659e1a5051b790e28f097f1c858880dc797b7f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 65616, "full_name": "Ahmad Sadeddin", "title": "Founder", "founder_bio": "Ahmad is the founder and CEO of Corgea, which is his 3rd startup. His last one was acquired by Coupa. He spent the last 3 years of his tenure there leading the payments product where he worked on making sure their products were secure.", "is_active": true, "linkedin_url": "https://linkedin.com/in/asadeddin", "x_url": "https://twitter.com/asadeddin", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2faba562e39bcac6bfbe892753fd27713da6b74d.jpg" } ], "jobs": [ { "id": 69626, "title": "Senior software engineer - California", "url": "https://www.ycombinator.com/companies/corgea/jobs/BkQzEJ1-senior-software-engineer-california", "location": "San Francisco, CA, US / San Mateo, CA, US / Remote (CA, US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $200K", "equity_range": "0.50% - 2.00%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 69628, "title": "Senior software engineer - Jordan", "url": "https://www.ycombinator.com/companies/corgea/jobs/28hnjyF-senior-software-engineer-jordan", "location": "JO / Remote (JO)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$20K - $65K", "equity_range": "0.10% - 2.00%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 81750, "title": "Software engineer - Jordan", "url": "https://www.ycombinator.com/companies/corgea/jobs/4ikDBbl-software-engineer-jordan", "location": "JO / Remote (JO)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$17K - $40K", "equity_range": "0.10% - 2.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 81751, "title": "Software engineer - California", "url": "https://www.ycombinator.com/companies/corgea/jobs/Fj7nVVP-software-engineer-california", "location": "San Francisco, CA, US / San Mateo, CA, US / Remote (CA, US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$100K - $180K", "equity_range": "0.25% - 2.00%", "experience": "1+ years", "visa": "US citizen/visa only", "skills": [] }, { "id": 83239, "title": "Security Researcher", "url": "https://www.ycombinator.com/companies/corgea/jobs/flq0ShW-security-researcher", "location": "San Francisco, CA, US / San Mateo, CA, US / Remote (US)", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$120K - $220K", "equity_range": "0.25% - 0.75%", "experience": "6+ years", "visa": "US citizen/visa only", "skills": [ "JavaScript", "Python", "Information Security", "Software Security" ] }, { "id": 91598, "title": "Founding DevOps Engineer - California", "url": "https://www.ycombinator.com/companies/corgea/jobs/5adGCih-founding-devops-engineer-california", "location": "San Francisco, CA, US / Remote (US; CA, US)", "type": "Full-time", "role": "Engineering", "role_type": "Devops", "salary_range": "$100K - $210K", "equity_range": "0.05% - 0.50%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [] }, { "id": 91601, "title": "Founding DevOps Engineer - Jordan", "url": "https://www.ycombinator.com/companies/corgea/jobs/AxEYjCf-founding-devops-engineer-jordan", "location": "JO / Remote (JO)", "type": "Full-time", "role": "Engineering", "role_type": "Devops", "salary_range": "$25K - $42K", "equity_range": "0.05% - 0.20%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": " Introducing PolicyIQ: Contextual Security Analysis for Smarter, More Accurate Results - Corgea - Home", "url": "https://corgea.com/blog/introducing-policyiq-contextual-security-analysis-for-smarter-more-accurate-results", "date": "Jan 15, 2025" }, { "title": "Corgea’s raises $2.6 Million Seed Round", "url": "https://en.incarabia.com/shorooq-partners-leads-corgea%E2%80%99s-us26-million-seed-round-694875.html", "date": "Nov 06, 2024" }, { "title": "Corgea Recognized as an IDC Innovator for DevSecOps Automated Remediation", "url": "https://corgea.com/blog/corgea-recognized-as-an-idc-innovator-for-devsecops-automated-remediation", "date": "Sep 18, 2024" } ], "launches": [ { "id": 103899, "title": "Corgea: Agentic Pentesting", "tagline": "An autonomous penetration testing engine that runs in hours and not weeks", "body": "[**Corgea AI Pentesting**](https://corgea.com/products/ai-pentest): an autonomous penetration testing engine that uses AI agents to plan, execute, validate, and report security tests. It doesn’t run a checklist. It reasons about your application.\n\n\n\n## The numbers\n\nIn a recent pentest:\n\n* **Corgea found 25 findings.** The human pentester found 6.\n* **Delivery time: 4-8 hours.** The human pentest took 2 weeks.\n\n![Corgea AI Pentesting findings overview](https://corgea.com/cms/blog/introducing-ai-pentesting/image-3.png)\n\n## How it works\n\nMost autonomous pentesting tools are black-box scanners with better marketing. They probe endpoints against a generic vulnerability checklist and produce a PDF full of theoretical findings that security teams have to triage manually.\n\nCorgea takes a fundamentally different approach. The engine operates like a real pentesting team.\n\n**Multi-agent architecture.** Not a single scanner. Corgea spawns a coordinator agent that assigns specialized sub-agents (an authentication discovery agent, an API exploration agent, a SQL injection expert agent) based on what it discovers. These agents collaborate, share findings, and build on each other’s discoveries. For complex targets, Corgea can spawn hundreds of agents.\n\n![Corgea AI Pentesting multi-agent execution view](https://corgea.com/cms/blog/introducing-ai-pentesting/image-1.png)\n\n**Code-aware, not black-box.** The engine ingests code context, dependency data, infrastructure configuration, and business logic. It uses your existing [AI SAST](https://corgea.com/products/ai-sast) findings for white-box pentesting, exploiting vulnerabilities at runtime that static analysis already identified. This combination of static insight and dynamic testing dramatically amplifies what the engine can find.\n\n**Dynamic adaptation.** Corgea’s agentic architecture is not fixed. The system continuously adapts its strategy based on what it learns about the target, dynamically scaling the number of agents, their responsibilities, and their specialization. It doesn’t follow a one-size-fits-all workflow.\n\n**Exploitability validation built in.** Corgea doesn’t report theoretical vulnerabilities. Agents validate exploitability during the test itself, confirming a finding can be triggered, capturing evidence, and explaining business impact. This eliminates the triage burden that makes traditional pentest reports a firehose of unverified findings.\n\n![Corgea AI Pentesting exploit reproduction script](https://corgea.com/cms/blog/introducing-ai-pentesting/image-2.png)\n\n## The pipeline\n\n1. **Environment setup.** Corgea provisions a Linux-based sandbox with a full suite of security tools for crawling, discovery, reconnaissance, and exploit validation.\n2. **Scope and context ingestion.** Target scope, endpoints, API documentation, auth flows, user roles, business logic context, and optional code/repo context. Both authenticated and unauthenticated.\n3. **Attack surface discovery.** Maps reachable routes, APIs, parameters, forms, auth boundaries, authorization-sensitive workflows, and exposed services.\n4. **Autonomous test planning.** AI agents reason about application structure and generate test plans for broken access control, IDOR, authentication bypass, injection, SSRF, insecure file handling, sensitive data exposure, and business logic abuse.\n5. **Safe execution and validation.** Hundreds of sub-agents execute probes, observe responses, adapt based on application behavior, and validate exploitability.\n6. **Evidence generation.** For confirmed issues: affected endpoint, payload or request sequence, response evidence, exploitability reasoning, severity, business impact, and remediation recommendation.\n7. **Developer-native remediation.** Findings go directly into developer workflows (PR comments, Jira tickets, Slack notifications, CI/CD pipelines) with reproduction steps, code context, and suggested fixes.\n8. **Reporting.** Findings converted into reports for management, auditors, and customers.\n\n## Supervised autonomy\n\nAutonomous doesn’t mean uncontrolled. Humans remain in control of:\n\n* Defining and approving test scope\n* Setting rules of engagement\n* Approving aggressive or potentially disruptive testing\n* Reviewing sensitive findings\n* Accepting final pentest reports\n* Making risk decisions for production environments\n\nCorgea automates the repetitive and technically complex parts. Humans own the risk decisions.\n\n## Continuous, not point-in-time\n\nTraditional pentesting delivers a PDF report weeks after testing begins. By the time you read it, your application has changed.\n\nCorgea supports both one-time and continuous autonomous pentesting. Retesting is automatic after remediation. Findings close the loop between discovery, fix, and verification in hours, not waiting for the next quarterly cycle.\n\n## Ready to Ditch Security Theater?\n\nIf you're tired of checkbox pentests:\n\nBook a call: \n\nEmail us: sales@corgea.com", "url": "https://www.ycombinator.com/launches/R1n-corgea-agentic-pentesting", "votes": 18, "created_at": "2026-06-24T15:40:00.793Z" }, { "id": 77558, "title": "🐕 Corgea - Easily and quickly fix vulnerable code using AI", "tagline": "We make it easy for companies fix vulnerable code by automating away 80% of the engineering work needed. ", "body": "**TL;DR**: Corgea helps companies fix vulnerable source code. It is an AI-powered security platform that writes security patches for engineer approval, saving 80% of the engineering effort needing and $$$. Having Corgea is like having a security engineer on staff constantly focused on making your code more secure. \n\nHi YC! This is Ahmad, and along with Adam, Pratik and Tamara we’re building [Corgea](https://corgea.com/).\n\n![uploaded image](/media/?type=post&id=77558&key=user_uploads/65616/fd08a653-a912-4b81-8d59-cfb4c56e0d95)\n\n### 🕳️ Unresolved holes in software\n\nCompanies scan their code for security vulnerabilities, and are often met with a big pile of findings. On average, companies take 3 months to fix a vulnerability, and 60% of breach victims were aware of the unpatched vulnerability that was exploited.\n\nWhy? This is because engineers prioritize revenue-generating work, often leaving security fixes lower in priority. It is also really expensive for companies to fix vulnerabilities, costing them between $400 - $4,000 per fix. Unacceptable in today’s environment of more frequent security breaches and increasingly sophisticated attacks.\n\nSecurity teams kept complaining to us that all of their hundreds (yes hundreds) of security tools alert them about issues without giving them a way to actually resolve the issues automatically. This leaves security teams hanging high and dry.\n\n### 🐕 What does Corgea do?\n\nWe’re approaching one of the hardest problems in security with an entirely new approach. Unlike other tools that have been vehemently obsessed with just reporting on vulnerabilities, Corgea fixes them.\n\nCorgea connects to your existing SAST (Static application security testing) tools, like Snyk and Semgrep, and automatically writes code fixes for the reported vulnerabilities. Security teams can issue a pull request for the fix with a single click without disrupting any workflows. Engineers get the code fix for review, and well written descriptions helping them understand the changes.\n\nFor example, Corgea can rewrite code and issue PRs to fix SQL injection, path traversal, SSRF, or hundreds of other vulnerabilities. Here’s a brief demo to show Corgea’s capabilities.\n\n[Fixing Issues using Corgea - Watch Video](https://www.loom.com/share/318f06b97dac48628971bb52db372fb8)\n\n![](https://cdn.loom.com/sessions/thumbnails/318f06b97dac48628971bb52db372fb8-1702061376925-with-play.gif)\n\n### ✅ Empowering Security and Freeing up Engineering\n\nSecurity is often perceived as a blocker to engineering, and vice versa. With Corgea, we’re empowering security teams to be able to take action while also accelerating engineering velocity. This fundamentally changes the dynamic between teams.\n\n* **💪 Stronger code:** companies can now secure their products and reduce their fix times to hours without taxing engineering. Many prospects we spoke to have tens of thousands of vulnerabilities that now has a fighting chance in reducing them.\n* **🚀 Increase engineering velocity:** since Corgea is issuing the code fix, we see up to an 80% savings in time engineers spend fixing security issues. Security can now be an enabler to engineering rather than a blocker.\n* **💰 Slash Costs:** Research shows that a single vulnerability takes about $400 - $4,000 to fix. Corgea reduces these costs by up to 80%. Many enterprises can expect to save at least $10m in direct development costs. This doesn’t account for breach cost savings.\n\nOften, security software lacks a clear return on investment or value proposition. They are frequently bought due to fear, uncertainty, and doubt. At Corgea, our belief is that security software needs to lead first with real value and a clear ROI.\n\n### 🌟 How is Corgea different than existing solutions?\n\nThe current market is flooded with tools that overwhelm security teams with alerts and are not effective at fixing what they’re reporting.\n\n* General code-gen tools do not specialize in security and we’ve seen them inadvertently introduce security issues unbeknownst to the engineer. Additionally, they often do not integrate into a wider ecosystem of tools, preferring to focus solely on their own findings.\n* Most SAST & SCA vulnerability scanners do not remediate issues. Many tout this but it’s mostly limited to upgrading packages from one version to another to reduce a CVSS. This often introduces downstream challenges. If they do offer CWE remediation capabilities their success rates are very low because they’re often based on traditional AI methodologies. Finally, they do not integrate into a wider ecosystem of tools because they want to only serve their own findings.\n\nEnterprises often use multiple scanners like Snyk, Semgrep, Checkmarx, and may have multiple repository tools like Github, Gitlab and Bitbucket for their code. They need a solution that consolidates across their existing tools.\n\n### 👩🏽‍💻 Who is building Corgea?\n\nEach member of the Corgea team has experienced the challenges of addressing vulnerabilities in both security and engineering. We first hand witnessed the frustration of teams in wanting to deliver on high quality feature-rich secure software. Our goal is to shatter the silos between the teams and empower both of them rather than empower one at the expense of the other.\n\nIn our prior roles, we designed, secured and built mission-critical software products at companies like of Coupa, Autodesk, and PlanGrid.\n\n### 🎉 Want to try it?\n\nWe’re really excited to help companies in automating the security of their source code. [Use Corgea today](https://www.corgea.app/registration/) for free and without a credit card. Setup takes less than a few minutes. Feel free to [reach out to us](https://calendly.com/asadeddin/30min?month=2024-01) to chat and get a more in-depth demo.", "url": "https://www.ycombinator.com/launches/KAw-corgea-easily-and-quickly-fix-vulnerable-code-using-ai", "votes": 24, "created_at": "2024-01-16T16:32:31.262Z" }, { "id": 73406, "title": "🐕 Corgea - Enterprise data security and privacy", "tagline": "Empowering enterprises to secure sensitive data", "body": "Hi everyone!\n\nWe’re building [Corgea](https://corgea.com?utm_source=yc&utm_medium=cpc&utm_campaign=yc_launch&utm_id=yc_launch) - a data security and privacy platform that automates sensitive data protection and compliance in the products companies make.\n\n### [**🚩**](https://emojipedia.org/triangular-flag/) **The Problem**\n\nCompanies process sensitive data, but don't know what it is, and who they share it with. They can’t protect and make private what they don’t know they have and what it is. Additionally data protection requires a lot of different stakeholders to come together, and they lack the proper tools to collaborate around it.\n\n### [**⚡**](https://emojipedia.org/high-voltage/) **How does it work?**\n\nCorgea monitors data traffic, classifies sensitive data (e.g., PII, PHI, payment data), and maps where it came from and who it's being shared with. It then tells you which data protection and privacy policies you need to comply with.\n\nCorgea is unique because you can set it up using 300+ out-of-the-box connectors in hours with no IT integration work.\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/f206fe9c-e12f-4749-9946-5567453cecb7)\n\n### [**🧰**](https://emojipedia.org/toolbox/) **What can you do with Corgea?**\n\nHaving this information at your fingertips gives you super powers to be able to:\n\n* Unlock revenue by making data protection your competitive advantage\n* Reduce your attack surface vector of your infrastructure\n* Accelerate breach response\n* Know which 3rd parties receive sensitive data\n* Understand your data compliance requirements\n* Receive alerts for out-of-policy data events\n* Perform data minimization\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/dad1dd93-4e77-4560-95b3-cda61b090fc6)\n\n### [**📖**](https://emojipedia.org/open-book/) **The Story**\n\nOne day, Ahmad received a massive excel sheet to fill out for a data privacy initiative. By the end of it, he had curated hundreds of data fields manually, and identified where they came from and where they were sent to. Feeling how inefficient this was for the company, he decided to automate it by building Corgea.\n\nAhmad previously led the payments product at Coupa and founded 2 other companies before Corgea. His last company was acquired by Coupa.\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/437a87ab-4bc7-47d8-b8a8-9c81c8f0d034)\n\n### **🚀 Team**\n\nAhmad is joined by an amazing team all with experience in working and building software in regulated data environments such as HIPAA, FedRamp, PCI, ITAR, and data privacy.\n\n![uploaded image](/media/?type=post&id=73406&key=user_uploads/65616/c345a149-ae43-472e-a09c-ff7895239bf9)\n\n### [**❤️**](https://emojipedia.org/red-heart/)**Interested?**\n\nIf you are a company processing sensitive data, and want to unlock revenue while being compliant then [**schedule a call with us**](https://l.linklyhq.com/l/1rIbH)!\n\nCompanies that sign up before Aug 30th are eligible for **50% off**!", "url": "https://www.ycombinator.com/launches/J5y-corgea-enterprise-data-security-and-privacy", "votes": 43, "created_at": "2023-07-25T14:47:43.101Z" } ] }, { "id": 28958, "name": "Rimward", "slug": "rimward", "former_names": [ "Quack AI", "Sourcepulse" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/bd215af97ab581709a04ff6284c6091f29c2058e.png", "website": "https://rimward.ai/", "all_locations": "Paris, Île-de-France, France", "long_description": "Rimward helps solar asset managers detect intrusions using the cameras already installed across their sites. It flags camera failures and coverage gaps, and gathers video evidence from multiple cameras to help their team or monitoring provider filter out false alarms and decide when to act.", "one_liner": "Solar farm security software for existing cameras", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1691807496, "tags": [ "Machine Learning", "Computer Vision", "B2B", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/rimward", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2023/rimward.json", "year_founded": 2023, "city": "Paris", "country": "FR", "linkedin_url": "https://www.linkedin.com/company/rimward", "x_url": "https://twitter.com/rimward_ai", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/rimward", "github_url": "https://github.com/rimward", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/bd215af97ab581709a04ff6284c6091f29c2058e.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1390247, "full_name": "F-G Fernandez", "title": "Founder", "founder_bio": "Founder and CEO of Rimward. FG co-founded Pyronear, an open-source nonprofit, helping turn a Raspberry Pi, his laptop GPU and entry-level camera into a wildfire detection network across Europe and South America. Running AI locally on affordable hardware, it serves French fire services and detected a wildfire 32 km away.\n\nA computer vision researcher by background, he led research at Mindee (YC W21), published conference papers without a PhD and was formerly a top PyTorch contributor.", "is_active": true, "linkedin_url": "https://linkedin.com/in/frgfm", "x_url": "https://twitter.com/FrG_FM", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/eed0d8708a06aa60a305c5d378c1355472e2e065.jpg" } ], "jobs": [ { "id": 92922, "title": "Security / IoT Deployment Engineer", "url": "https://www.ycombinator.com/companies/rimward/jobs/j4L5SKW-security-iot-deployment-engineer", "location": "Paris, IDF, FR / Paris, Île-de-France, FR", "type": "Full-time", "role": "Engineering", "role_type": "Embedded systems", "salary_range": "€50K - €70K EUR", "equity_range": "0.50% - 2.00%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Linux", "Docker", "Information Security", "Internet of Things (IoT)" ] }, { "id": 92923, "title": "Platform Engineer", "url": "https://www.ycombinator.com/companies/rimward/jobs/Ocflvow-platform-engineer", "location": "Paris, IDF, FR / Paris, Île-de-France, FR", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "€50K - €70K EUR", "equity_range": "0.50% - 2.00%", "experience": "3+ years", "visa": "US citizenship/visa not required", "skills": [ "Node.js", "TypeScript", "Docker" ] } ], "news": [ { "title": "Here are this year’s top 40 startups at Station F | TechCrunch", "url": "https://techcrunch.com/2023/11/15/here-are-this-years-top-40-startups-at-station-f/", "date": "Nov 15, 2023" } ], "launches": [ { "id": 74260, "title": "🦆 Quack AI - AI companion for developer onboarding", "tagline": "Bridging open-source efficiency to drive enterprise excellence.", "body": "Hello there! I'm FG (short for François-Guillaume 🇫🇷), the founder of [Quack AI](https://www.ycombinator.com/companies/quack-ai).\n\n**tl;dr:** _We help large software companies run like the most efficient open-source projects. In the future, top-tier developers in those organizations will be able to contribute to pivotal projects, regardless of what teams they're from._\n\n### **💬** The Problem\n\nSuccessful OSS projects are well-organized communities where information is shared and valued. Recognizing this gold standard, corporate giants like Microsoft and IBM are shifting towards 'innersource' - a strategy that fosters ownership, augments communication, and bolsters productivity. However, like many cluttered OSS projects, the vast array of solicitations and varying expertise easily gets overwhelming.\n\n### 💻 Our Solution\n\nOur Dual-Fold Approach:\n\n![uploaded image](/media/?type=post&id=74260&key=user_uploads/1390247/195e8fa1-3b7d-4327-9507-c05a168f1531)\n\n* **Clarity for maintainers** (Web interface): we empower maintainers with a framework to streamline contribution processes. Through our intuitive interface, maintainers can design, curate, and sequence the optimal steps for smooth project contributions.\n\n![uploaded image](/media/?type=post&id=74260&key=user_uploads/1390247/94e7fe10-fc64-4df9-893a-8f20fd16e2ea)\n\n* **Guidance for developers** (VSCode extension): with our IDE extension, developers aren't just compliant; they're efficient. It aids in identifying the right issues, ensures alignment with contribution flows, and keeps a pulse on project priorities.\n\nWhile maintaining popular OSS projects and being an active contributor to PyTorch, I’ve often faced the frustration of seeing Pull Requests from newcomers and thinking “If only that person had the reflex to do XYZ.” Those unwritten norms, which often evade CI restrictions, only sink in after repeated code reviews and numerous trials and errors. This uneasy feeling that “it would be so easy if they were to do ABC” highlights the absence of a solid framework for collaborative development.\n\n### 🦆 The Team\n\n![uploaded image](/media/?type=post&id=74260&key=user_uploads/1390247/153b4727-f3fd-4ba1-9020-45fbc7e19d2b)\n\nI tend to describe myself as a _\"Deep learning engineer by day, open source contributor by night 🦇\"_ which is fairly accurate! On top of being among the top contributors of PyTorch, I’ve led the development of the open-source OCR library of devtool company Mindee (YC W21). I experienced first-hand how some open-source communities are structured to achieve high engagement & productivity, which now appeals to software behemoths.\n\n### 🙏 How you can help\n\n* **🤝 Refer**: know someone in a major corporation looming over innersource or part of a substantial OSS project? Please connect us.\n* **⭐ Engage**: star us on [GitHub](https://github.com/quack-ai/companion) & hop into our [Discord](https://discord.gg/E9rY3bVCWd) for the latest updates!\n* **👍👎 Experiment & feedback**: mold your unique coding insights and take our [VSCode extension](https://marketplace.visualstudio.com/items?itemName=quackai.quack-companion) for a whirl.\n* **📣 Share**: share this post with your network, you can find us on [Twitter](https://twitter.com/quack_ai) or [LinkedIn](https://www.linkedin.com/company/quackai)\n\nUp to revolutionize developer collaboration? Let’s get quacking then!", "url": "https://www.ycombinator.com/launches/JJk-quack-ai-ai-companion-for-developer-onboarding", "votes": 157, "created_at": "2023-08-21T14:34:11.158Z" } ] }, { "id": 29186, "name": "Tesseral", "slug": "tesseral", "former_names": [ "Codomain Data", "Okapi", "SSO Ready", "ssoReady", "SSOReady" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/85992f888276408373d1f33710dd92fd60ae187a.png", "website": "https://tesseral.com", "all_locations": "San Francisco, CA, USA", "long_description": "Tesseral is the open source platform for managing identity and access in business software. It provides enterprise-grade capabilities, including SAML single sign-on, SCIM provisioning, role-based access control, managed API keys, and audit logs, implemented in just a few lines of code. \r\n\r\nTesseral unifies access management for employees, customers, services, and AI agents, giving organizations the flexibility to adapt to any deployment model and the authority to enforce security policies with precision.\r\n\r\nYou can learn more by reading our docs at https://tesseral.com/docs or by checking out our GitHub at https://github.com/tesseral-labs/tesseral.", "one_liner": "The open source platform for managing identity in business software", "team_size": 5, "industry": "B2B", "subindustry": "B2B", "launched_at": 1708399745, "tags": [ "Developer Tools", "SaaS", "Security", "Open Source", "API" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Inactive", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tesseral", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/tesseral.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://linkedin.com/company/tesseral", "x_url": "https://x.com/tesseralhq", "fb_url": null, "cb_url": null, "github_url": "https://github.com/tesseral-labs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/85992f888276408373d1f33710dd92fd60ae187a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/cd33dd2bafa0760537a2552866d39b8a2728c2ea.png", "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/d4b0121f1fee45a4beb038578ef9331a9bc86340.png" ], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 1519710, "full_name": "Ned O'Leary", "title": "Founder", "founder_bio": "Cofounder / CEO at Tesseral", "is_active": false, "linkedin_url": "https://linkedin.com/in/nedoleary", "x_url": "https://twitter.com/nedoleary", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/32798834b53872ec8c2fb1c744cbfa357d1b1e61.jpg" }, { "user_id": 710191, "full_name": "Ulysse Carion", "title": "Founder", "founder_bio": "Cofounder/CTO at Tesseral.\n\nFormerly of Segment and Gem. I built Segment's permissions and identity resolution system. Editor of IETF RFC 8927. 🇫🇷🇺🇸", "is_active": false, "linkedin_url": "https://www.linkedin.com/in/ucarion/", "x_url": "https://x.com/ucarion", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f9978e896bb1cbde625ea8af8a36535a813f8d28.jpg" } ], "jobs": [], "news": [ { "title": "Tesseral launches with $3.3M to simplify B2B authentication for software developers - SiliconANGLE", "url": "https://siliconangle.com/2025/05/06/tesseral-launches-3-3m-simplify-b2b-authentication-software-developers/", "date": "May 06, 2025" } ], "launches": [ { "id": 90141, "title": "Tesseral: the open source auth infrastructure for B2B SaaS", "tagline": "Everything you need to manage users in business software, from a login page to session management to SSO and RBAC!", "body": "Tesseral is open source auth infrastructure for business software. You can use it to authenticate your users, and manage their access to resources.\n\nIt’s similar to products like Auth0, but it’s open source and built specifically for B2B apps.\n\nIt comes with enterprise features like single sign-on, directory provisioning, user impersonation, and multi-factor authentication, as well as beautiful login pages and self-service settings for customers.\n\nYou can experiment with Tesseral using our hosted service for free at [console.tesseral.com](http://console.tesseral.com) or learn more by reading the docs at tesseral.com/docs!\n\nhttps://www.youtube.com/watch?v=hawD-4PWy4Y\n\n![uploaded image](/media/?type=post&id=90141&key=user_uploads/1519710/328d4d9e-4a18-4dbe-ae6e-231ae3002b1c)\n\n", "url": "https://www.ycombinator.com/launches/NRt-tesseral-the-open-source-auth-infrastructure-for-b2b-saas", "votes": 16, "created_at": "2025-05-06T17:28:04.050Z" }, { "id": 84774, "title": "SSOReady: Open source developer tools for enterprise single sign-on", "tagline": "SSOReady makes it safe and easy for developers to offer SAML SSO and SCIM directory sync in their software.", "body": "**TLDR: set up SAML and SCIM in less than a day:** .\n\n# Context: customers want SAML\n\nThere are lots of different ways to authenticate (i.e. log in) users in software.\n\nCompanies often require their employees to use single sign-on (SSO) to access business software, both for convenience and security.\n\nFor the most part, especially in large companies, SSO relies on an old, complicated protocol called SAML. (If you’ve used a service like Okta before, you’ve likely used SAML without realizing it!)\n\nIf you make business software, you probably will need to support SAML at some point.\n\n# Problem: SAML is hard\n\nBut SAML is really hard, even for experienced developers. It just doesn’t work like most modern software, making implementations slow and risky. Companies as sophisticated as GitLab can make [very costly mistakes](https://ssoready.com/blog/engineering/ruby-saml-pwned-by-xml-signature-wrapping-attacks/).\n\n# What we do: we make SAML easy\n\nSSOReady makes SAML safe and easy enough that developers can often finish an implementation in [less than a day](https://blog.runreveal.com/we-shipped-sso-support-in-a-day-how/).\n\nSSOReady is an open-source (MIT) service that helps developers implement SAML single sign-on without ever touching SAML directly. Devs just need to implement two API endpoints: one to initiate SAML logins and another to receive incoming SAML messages. And then they’re pretty much done.\n\nSSOReady also offers a similar tool for SCIM, a protocol often used alongside SAML to provision and de-provision users. Developers can use SCIM to establish a live sync between their database of users and their customers’ central IT systems.\n\n# Get in touch\n\n* Our website: \n* Our github: \n\n![uploaded image](/media/?type=post&id=84774&key=user_uploads/89898/5ad4c15a-246b-4e47-86ba-96e87cabf198)\n\n", "url": "https://www.ycombinator.com/launches/M3K-ssoready-open-source-developer-tools-for-enterprise-single-sign-on", "votes": 14, "created_at": "2024-10-15T19:58:22.889Z" } ] }, { "id": 29324, "name": "PromptArmor", "slug": "promptarmor", "former_names": [ "Board Security Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f85e50382b3869e84b292235c05317d5db4ab8cd.png", "website": "https://promptarmor.com/", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "LLM Security and Compliance", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1702083397, "tags": [ "Generative AI", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/promptarmor", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/promptarmor.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/promptarmor", "x_url": "https://twitter.com/PromptArmor", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/f85e50382b3869e84b292235c05317d5db4ab8cd.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Garry Tan", "url": "https://www.ycombinator.com/people/garry-tan" }, "founders": [ { "user_id": 592271, "full_name": "Shankar Krishnan", "title": "Founder/CEO", "founder_bio": "Al Security & Compliance. Previously at Snappr, Observe, Tesla, Accenture. Berkeley Data Science & Econ‎", "is_active": true, "linkedin_url": "https://linkedin.com/in/shankar-krishnan", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/98d7fa926e66d41bef63f3becd665196d0cd771b.jpg" }, { "user_id": 325305, "full_name": "Vikram Jayanthi", "title": "Founder/CTO", "founder_bio": "Co-founder of PromptArmor.\n\nPreviously infrastructure & security at Google, Roblox, and Symantec.\n\nBerkeley CS & Public Policy.", "is_active": true, "linkedin_url": "https://linkedin.com/in/vikramjayanthi", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9866a979e839d1d267f85264c95b2d45f385a9fc.jpg" } ], "jobs": [ { "id": 92807, "title": "Growth", "url": "https://www.ycombinator.com/companies/promptarmor/jobs/YgI1Tbu-growth", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Operations", "role_type": null, "salary_range": "$80K - $120K", "equity_range": "0.50% - 0.75%", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "IBM's AI agent Bob easily duped to run malware: Researchers • The Register", "url": "https://www.theregister.com/2026/01/07/ibm_bob_vulnerability/", "date": "Jan 07, 2026" }, { "title": "‘Claude For Excel’ Gets Tricked Into Leaking Secrets — The Information", "url": "https://www.theinformation.com/articles/rubrik-tests-undo-button-malfunctioning-ai-agents?rc=bqclp0", "date": "Nov 25, 2025" }, { "title": "Slack patches Slack AI issue that could have allowed insider phishing | SC Media", "url": "https://www.scworld.com/news/slack-patches-slack-ai-issue-that-could-have-allowed-insider-phishing", "date": "Aug 22, 2024" }, { "title": "Slack AI can leak private data via prompt injection • The Register", "url": "https://www.theregister.com/2024/08/21/slack_ai_prompt_injection/", "date": "Aug 22, 2024" } ], "launches": [] }, { "id": 29362, "name": "Pazi", "slug": "pazi", "former_names": [ "GPT Pilot", "Pythagora (GPT Pilot)", "Pythagora" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/39be77a3f81a0c68f20c5bdfe6e6a34a1979d88c.png", "website": "https://pazi.ai/", "all_locations": "", "long_description": "Pazi enables people to build agents that run all operations in a company. You create an agent for a position (eg. developer, devops, social media manager, SDR, etc.), you give it a goal (eg. reach 10k followers on X) and let it create a plan, start checking in with you, oversee how the goal is coming up.", "one_liner": "Platform where autonomous companies are built", "team_size": 7, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1709274350, "tags": [ "Developer Tools", "Security", "Web Development", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": [ { "question": "How did your company get started? (i.e., How did the founders meet? How did you come up with the idea? How did you decide to be a founder?)", "answer": "Senko and Zvonimir met at a startup event in 2016. when Senko was looking for someone who would lead a side project that he started. Zvonimir accepted the challenge, we turned that project into a company, and 5 years later, in 2021., we sold the company to Miro.Leon and Zvonimir have been best friends since starting college in 2009. and after the Miro acquisition, we started learning ML together and playing with different ideas. In 2023. we created our first open-source project for generating automated tests with AI and it quickly gained 1.4k Github stars. After talking to users and observing how AI is evolving, we decided to pivot to GPT Pilot, which became one of the fastest-growing open-source projects ever.While we worked on the GPT Pilot, Senko was exploring a similar idea, so finally, in October 2023. we decided to join forces and build Pythagora together." } ], "url": "https://www.ycombinator.com/companies/pazi", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/pazi.json", "year_founded": 2026, "city": null, "country": null, "linkedin_url": "https://www.linkedin.com/company/pazi-agi", "x_url": "https://x.com/pazidotai", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/pythagora", "github_url": "https://github.com/Pythagora-io", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/39be77a3f81a0c68f20c5bdfe6e6a34a1979d88c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/e7bb4b702a362554aa06087f1f0aed1b72e76498.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 170713, "full_name": "Zvonimir Sabljić", "title": "Founder", "founder_bio": "I am an engineer and a technology entrepreneur. I cofounded AWW (A Web Whiteboard), which became a major player in the online whiteboard market. AWW had 1.5M MAU, with Apple as our largest customer. In 2021, it was acquired by Miro.\n\nI created two successful open source repositories - automated testing repo that got 1.4k Github stars and now, GPT Pilot, which has over 22k stars.\n\nCurrently, I'm working on bringing software development into the AI age.", "is_active": true, "linkedin_url": "https://linkedin.com/in/zvonimirsabljic", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/803057e47b472c272931d6eb920cdd64309d33c9.jpg" }, { "user_id": 1047121, "full_name": "Leon Ostrež", "title": "Founder/CTO", "founder_bio": "Software engineer, computer scientist (M.Sc.) and entrepreneur. Problem solving and attention to details with big persistence is my passion.\nI led the tech team at Faze Clan before they went public at $1B valuation and was a key contributor of Plex at Ericsson - the core language that handles 25% of the world's 2G and 3G network communication.\nI created two successful open source repositories - automated testing repo that got 1.4k Github stars and now, GPT Pilot, which has over 22k stars.", "is_active": true, "linkedin_url": "https://linkedin.com/in/leon-ostrez-b55494178", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/7b9f05415e358fa6c4ea514bc40840e1c268fd40.jpg" } ], "jobs": [], "news": [ { "title": "Y-Combinator-backed Pythagora AI secures $4M for open source app development with AI - Tech.eu", "url": "https://tech.eu/2024/05/14/y-combinator-backed-pythagora-secures-4m-funding-revolutionizing-app-development-with-ai/", "date": "May 14, 2024" } ], "launches": [ { "id": 91577, "title": "Pythagora: All-in-one AI development platform", "tagline": "Try Pythagora and transform your ideas into production ready apps!", "body": "### **TLDR**\n\nPythagora is an all-in-one AI dev platform that is focused on building production-ready apps that you can deploy, use, and share.\n\n[Video](https://www.youtube.com/watch?v=o1nEvwjKziw)\n\n### **Problem**\n\nWe built Pythagora after seeing too many AI-generated projects either abandoned at the first sign of trouble or trapped in endless \"fix it\" loops with no visibility into what's actually happening. Without proper logs, breakpoints, or debugging tools, users were left guessing and rebuilding repeatedly.\n\n![uploaded image](/media/?type=post&id=91577&key=user_uploads/1047121/e2ca5b1e-9f0d-40ae-b6fc-30a24cf4abfe)\n\n### **Another codegen tool?**\n\nWhile other platforms focus on the initial \"wow\" of code generation, we've designed for the complete reality of software development. Every application will face challenges when it meets real users with real data.\n\nOur key differences:\n\n1. Overview: Clear overview of the project roadmap and your current progress.\n2. End-to-end development: From project planning to deployment (our cloud backed by AWS or your own infra - take your code wherever)\n3. Tools access - Easy access to app preview, logs, and knowledge base.\n4. Real debugging tools: Breakpoints, logs, and database inspection when something inevitably breaks\n5. Full-stack architecture: Proper backend, frontend, and database relationships, not just UI demos\n\n### **Final thoughts**\n\nWe're most proud that Pythagora treats your applications as living projects, not disposable demos. The platform shines exactly where others fall short: when you need to fix, improve, and deploy what you've built.\n\nStop treating AI-generated apps as disposable. Start building applications worth maintaining, fixing, and deploying.\n\n* **Explore apps built with Pythagora:** [pythagora.ai/examples](http://pythagora.ai/examples)\n* Read case studies of users creating meaningful apps: [pythagora.ai/case-study](https://www.pythagora.ai/case-study)\n\n### [**🙏**](https://www.pythagora.ai/case-study-medical-research) Ask\n\nIf you know a company that’s looking to build internal tools, please connect us. I’d be happy to give them a demo.", "url": "https://www.ycombinator.com/launches/Np3-pythagora-all-in-one-ai-development-platform", "votes": 14, "created_at": "2025-06-24T14:25:35.556Z" }, { "id": 84468, "title": "🧮 Pythagora - Build tools completely in natural language", "tagline": "Pythagora is an AI dev tool that enables humans to build production ready apps using only natural language.", "body": "TLDR; Pythagora is a VS Code Extension that writes all the code for the app you want to build and talks to you whenever it needs a creative decision or feedback. It is focused on building production-ready apps that you can deploy and use, so to achieve that, it keeps you, the human, in the loop throughout the entire development process. Pythagora manages the entire codebase and talks to you in natural language.\n\n### **🤨 Problem**\n\nToday, new AI dev tools come out almost weekly. While many showcase impressive demos, very few prove their worth in building real-world, production-level applications. We think that this is because they don’t put the human in the loop enough. There is a notion that apps can be built just by writing 2 sentences of what kind of an app you want, and then you just wait until AI comes back with a fully built application.\n\nWe believe that humans have to be involved in the entire process of app development to give timely feedback so that AI can make changes as it works on specific features.\n\n### **💡 solution**\n\n![](https://www.ycombinator.com/media/?type=post&id=79066&key=user_uploads/170713/2c530744-eaf9-4870-9e87-d4bfd806082d)\n\nPythagora talks to the user throughout the entire development process. First, it creates a plan for building the entire application. Then, it goes task by task, implementing each one, but before going on to the next one, it asks the user to test whether it’s working as intended. We noticed that very often, Pythagora implements a feature correctly, but users, once they see how a feature works, decide they want it to work differently.\n\n* Watch the full crash course on how to use Pythagora here: [https://youtu.be/HIIHx0kErPc](https://www.youtube.com/watch?v=4g-1cPGK0GA)\n* **Explore apps built with Pythagora:** [pythagora.ai/examples](http://pythagora.ai/examples)\n* Read case studies of users creating meaningful apps: [pythagora.ai/case-study-medical-research](http://pythagora.ai/case-study-medical-research)\n\n### [**🙏**](https://www.pythagora.ai/case-study-medical-research) **Ask**\n\nIf you know a company that’s looking to build internal tools, please connect us. I’d be happy to give them access to Pythagora v1 and do a demo.", "url": "https://www.ycombinator.com/launches/LyO-pythagora-build-tools-completely-in-natural-language", "votes": 9, "created_at": "2024-10-02T18:00:05.786Z" }, { "id": 79066, "title": "Pythagora - First complete AI developer that builds apps by talking to you", "tagline": "Open source VS Code extension that enables you to build production-ready apps from scratch in 1/20th of time", "body": "**TL;DR** [Pythagora](https://pythagora.ai/) is not a coding assistant or an autocomplete. It’s a true AI developer that takes your requirements, asks you questions, considers what technologies to use, and creates the development plan. Then, it breaks the plan into tasks, writes code, reads the CLI, fixes bugs, iterates, reviews the code, and asks you questions to make sure it’s on the right track.\n\n### 🛤 **OUR JOURNEY**\n\n![uploaded image](/media/?type=post&id=79066&key=user_uploads/170713/273e17b6-e99a-464a-9faf-c5a223e81bb6)\n\n[Senko](https://linkedin.com/in/senkorasic) and [Zvonimir](https://linkedin.com/in/zvonimirsabljic) met at a startup event in 2016. when Senko was looking for someone who would lead a side project that he started. Zvonimir accepted the challenge, we turned that project into a company, and 5 years later, in 2021, we sold the company to Miro.\n\n[Leon](https://linkedin.com/in/leon-ostrez-b55494178) and Zvonimir have been best friends since starting college in 2009. After the Miro acquisition, we started learning ML together and playing with different ideas. In 2023, we created our first open-source project for generating automated tests, and it quickly gained 1.4k Github stars. After talking to users and observing how AI is evolving, we decided to pivot to GPT Pilot, which became one of the fastest-growing open-source projects, now with more than **22k Github stars**.\n\nWhile we worked on the GPT Pilot, Senko explored a similar idea, so finally, in October 2023, we decided to join forces and build Pythagora together.\n\n### **❌ The Problem**\n\nOk, let’s state the obvious - there’s still a huge demand for software development, which is still expensive. On the other hand, we have LLMs that are extremely good at writing code. They can write code snippets like a senior developer but if you ask them to build the full app, it will do a worse job than a junior developer. This is because building production-ready apps is not only writing code. It’s writing code, running it, debugging, iterating, changing requirements, refactoring, and many other mechanisms that developers do every day.\n\nWhile LLMs are getting smarter every single day, they will always be answering machines—they won’t have the mechanics that allow humans to iteratively progress on building an app.\n\nThe good thing is that all these mechanisms are deterministic and repetitive.\n\n### **🌟 Our Solution**\n\n![uploaded image](/media/?type=post&id=79066&key=user_uploads/170713/2c530744-eaf9-4870-9e87-d4bfd806082d)\n\nPythagora is a blueprint of what app development looks like. First, it takes your requirements and asks you questions to clarify how you want your app to look. Then, it thinks about what technologies should be used for your specific app and creates the development plan. Then, it breaks the plan into tasks, writes code, reads the CLI, fixes bugs, iterates, reviews the code, and refactors it. Before making each commit, it asks you questions to make sure that the app works exactly as you want. Finally, it proceeds this way to the next task until the entire app is finished.\n\nMany AI copilots help developers write code faster, but Pythagora goes beyond the current developer experience — we’re reimagining how software development is done.\n\n### **🙏 Asks**\n\nIf you know any company that’s looking to build internal tools, it would be amazing if you could connect us. I’d be happy to demo Pythagora to them.\n\nAlso, it would be amazing if you could share this launch on Linkedin or Twitter.\n\nFinally, join us on [Discord](https://discord.gg/HaqXugmxr9)!", "url": "https://www.ycombinator.com/launches/KZG-pythagora-first-complete-ai-developer-that-builds-apps-by-talking-to-you", "votes": 36, "created_at": "2024-03-05T15:19:41.894Z" } ] }, { "id": 29374, "name": "Superagent", "slug": "superagent", "former_names": [ "Superagent.sh" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a5fb7dd012389ddf81869040550578bb786988ed.png", "website": "https://superagent.sh/", "all_locations": "San Francisco, CA, USA", "long_description": "Superagent helps AI-native developers trust what they merge, control what their agents do, and show users it's safe.\r\n\r\nWe work in your coding agent and on GitHub:\r\n\r\n- Trust the change: checks on every pull request, before merge\r\n- Control it where it runs: boundaries around what your agents can see, say, and do\r\n- Break it before it ships: red teaming against what you actually run\r\n\r\nFree for open source.", "one_liner": "Security for AI-native developers", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1701445003, "tags": [ "Security", "Open Source", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/superagent", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/superagent.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/superagent-sh/", "x_url": "https://x.com/superagent_ai", "fb_url": null, "cb_url": null, "github_url": "https://github.com/superagent-ai/", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/a5fb7dd012389ddf81869040550578bb786988ed.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/4fb9bc805969476bc8a221698a1bdea8f7976c00.png" ], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1367556, "full_name": "Alan Zabihi", "title": "Founder/CEO", "founder_bio": "CEO & Co-founder of Superagent", "is_active": true, "linkedin_url": "https://linkedin.com/in/alanzabihi", "x_url": "https://twitter.com/alanzabihi", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cea2f5bfccfffc6a14c59ed18dcfed86babdbe0e.jpg" }, { "user_id": 80364, "full_name": "Ismail Pelaseyed", "title": "Founder", "founder_bio": "CTO & Co-founder of Superagent.", "is_active": true, "linkedin_url": "http://se.linkedin.com/in/pelaseyed/en", "x_url": "https://twitter.com/pelaseyed", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cb09040fa52bace9f9b4c6c760946f7028b27257.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 94188, "title": "Superagent — Defender of AI agents 🥷", "tagline": "Superagent protects AI agents from attacks and data leaks", "body": "Hi YC 👋 We’re Alan and Ismail, founders of **Superagent (YC W24)**.\n\nWe’re building open-source **defense for AI agents**. Our product protects agents from prompt injections, malicious tool calls, and customer data leaks — in production, in CI/CD, and wherever they run.\n\n# The Problem\n\nAI agents introduce new attack surfaces that traditional security practices don’t cover:\n\n* **At runtime**: users can inject adversarial prompts that hijack an agent or force it to run harmful commands.\n* **At the model** layer: unsafe or poisoned outputs can embed backdoors into your stack.\n* **In CI/CD**: AI-generated code can contain harmful logic that slips through review and ships to production.\n\nWithout protection, agents can leak customer data or trigger destructive actions that impact your product and your users.\n\n# How Superagent Works\n\nAt the core is **SuperagentLM**, our small language model trained specifically for agentic security. Unlike static rules or regex filters, it reasons about inputs and outputs to catch subtle and novel attacks.\n\nSuperagent integrates at three key points:\n\n1. **Inference providers** — filter requests and responses at the API layer\n2. **Agent frameworks** — run runtime checks on every input, output, and tool call\n3. **CI/CD pipelines** — fail risky builds before unsafe code ships\n\nHere’s a quick example of how to use it with Exa (YC S21):\n\n![uploaded image](/media/?type=post&id=94188&key=user_uploads/1367556/35562a1a-829f-4fc0-bcc2-03952e3f58f6)\n\nEvery request is inspected in real time. Unsafe ones are blocked. Safe ones go through — with reasoning logs you can audit later.\n\n# Why We’re Building This\n\nWe’ve been working closely with builders of AI agents for the last couple of years, building tools for them. What we noticed is that many teams are basically trying to system-prompt their way to security. Vibe security (VibeSec) obviously doesn’t work.\n\nSome of the most popular agentic apps today are surprisingly unsafe in this way. So we decided to see if we could fix it. That’s the motivation behind Superagent: giving teams a real way to ship fast **and** ship safe.\n\n# Get Involved\n\n📖 [Read the docs](https://docs.superagent.sh/)\n\n📅 [Book a call](https://www.superagent.sh/)\n\nWe’d love your feedback: what’s your biggest concern about running agents in production? Book a call or drop a comment!\n\nAlan & Ismail 🥷🥷\\\n[Superagent](https://www.superagent.sh/) (YC W24)\n\n![uploaded image](/media/?type=post&id=94188&key=user_uploads/1367556/22c8addf-151e-4bf5-ade5-18f253df2bc4)\n\n", "url": "https://www.ycombinator.com/launches/OVA-superagent-defender-of-ai-agents", "votes": 14, "created_at": "2025-09-29T14:01:06.539Z" }, { "id": 93541, "title": "Superagent — the AI Firewall 🥷🔥", "tagline": "Stops prompt injections, backdoors, and data leaks.", "body": "Hi everyone, we’re Alan and Ismail, founders of **Superagent** (YC W24).\n\nWe built the world’s first **AI Firewall** — powered by a model that sits between you and your models, protecting every request and response in real time.\n\n---\n\n## The Problem\n\nAI is quickly becoming the foundation of how software is built and used. But every time you send a prompt or receive a response, you take a risk:\n\n* Models can be tricked with prompt injections or jailbreaks\n* Sensitive data like API keys and PII can leak out\n* Malicious code or backdoors can slip through responses\n\nIf you’re building with AI or adopting third-party AI tools, you’re exposed.\n\n---\n\n## Our Solution\n\nSuperagent introduces **NinjaLM** — a small language model fine-tuned for security and safety. It runs in runtime (tens of milliseconds) and reasons about every prompt and response before it reaches your system.\n\n✅ Stops prompt injections and jailbreaks\\\n✅ Prevents secret leaks (API keys, credentials, PII)\\\n✅ Blocks malicious code before it reaches your system\\\n✅ Full audit logs, traces, and observability for compliance\n\nFrom internal apps to tools like Claude Code or ChatGPT, Superagent protects your AI without slowing you down.\n\n## https://youtu.be/GBTAs9yZiPM\n\n## Backstory\n\nBefore Superagent, we built plenty of AI apps ourselves. Each time, we ran into the same problem: adding even the most basic kind of protection was incredibly hard.\n\nTraditional firewalls are built for static rules — not reasoning. But AI isn’t static. It thinks, it adapts, and that creates a completely new class of security challenges.\n\nWe realized the only way forward was to fight fire with fire: build a model that could reason about other models, catching attacks, leaks, and malicious behavior in real time. That’s how the AI Firewall was born.\n\n---\n\n## Try It\n\nWe just launched our hosted service, and the open-source repo is live. Engineers can get started in minutes, and executives get the auditability and compliance they need.\n\n👉 [superagent.sh](http://www.superagent.sh)\\\n👉 [github.com/superagent-ai/superagent](https://github.com/superagent-ai/superagent)\n\n---\n\n## Call to Action\n\nIf you’re building or adopting AI:\n\n* Engineers — run your apps through Superagent today\n* Security teams — add prevention and compliance controls\n* Partners — we’re exploring integrations and distribution\n\nWe’d love your feedback. Links in comments.\n\n![uploaded image](/media/?type=post&id=93541&key=user_uploads/1367556/b76c2ef1-9036-484d-9564-73cecff2c9ff)\n\n---", "url": "https://www.ycombinator.com/launches/OKj-superagent-the-ai-firewall", "votes": 10, "created_at": "2025-09-03T14:51:00.274Z" }, { "id": 92929, "title": "VibeKit 🖖 The Safety Layer for Your Coding Agent", "tagline": "Open-source sandboxing and observability for Claude Code, Gemini CLI, et al.", "body": "Hey YC! 👋\\\nWe’re building **VibeKit**, an open-source safety layer for Claude Code, Gemini CLI, and other coding agents.\n\n![uploaded image](/media/?type=post&id=92929&key=user_uploads/1367556/58ed677f-4f55-4d10-a0ef-b32fb2508117)\n\n## ❌ The Problem\n\nWe love coding with AI agents — until the day Anthropic emailed us to say they had found our API keys in a public GitHub repo and revoked them.\n\nThe leak came from our own coding agent. That’s when we realized most developers have no way to see — let alone control — what their AI agents are doing:\n\n* Which files they read or write\n* What shell commands they run\n* What data leaves their machine\n* Whether secrets get exposed in API calls\n\n## 🖖 The VibeKit Solution\n\nVibeKit is a **universal CLI wrapper** that runs any coding agent in a **local, isolated Docker sandbox**,\n\n![uploaded image](/media/?type=post&id=92929&key=user_uploads/1367556/76cf29ec-d566-42e9-861b-fad1a9bd4889)\n\nIt comes with:\n\n* **Secret redaction** before anything leaves your machine\n* **Full observability** into file changes, commands, API calls, and outbound data\n* **Offline-first**, open-source (MIT), and works with any agent — Claude, GPT-4o, Gemini, etc.\n\n![uploaded image](/media/?type=post&id=92929&key=user_uploads/1367556/20caa134-7f4a-434d-acac-6e5405eeb82b)\n\n## 💻 Try it out\n\n```\n# Install globally\nnpm install -g vibekit\n\n# Run Claude Code with VibeKit\nvibekit claude\n```\n\nThen watch _everything_ your AI is doing — safely.\n\n🎥 **Demo video:** [https://youtu.be/vDwJ4xcdRBM\\\\](https://youtu.be/vDwJ4xcdRBM%5C)\n\n📂 GitHub: [https://github.com/superagent-ai/vibekit\\\\](https://github.com/superagent-ai/vibekit%5C)\n\n📖 Docs: [https://docs.vibekit.sh](https://docs.vibekit.sh/)\n\n## 🙏 Our Ask\n\nIf you use coding agents day-to-day:\n\n* **Run them through VibeKit** — see what they’re _really_ doing.\n* Share your weirdest or most alarming finds with us — we’re building a public library of “agent fails.”\n\n💌 Contact: [founders@vibekit.sh](mailto:founders@vibekit.sh)\n\n---", "url": "https://www.ycombinator.com/launches/OAr-vibekit-the-safety-layer-for-your-coding-agent", "votes": 11, "created_at": "2025-08-12T19:06:49.796Z" }, { "id": 91137, "title": "VibeKit 🖖 Run coding agents in a secure sandbox", "tagline": "Embed OpenAI Codex or Claude Code directly into your app.", "body": "## **Launch YC: VibeKit – Run coding agents in a secure sandbox**\n\n**Hi YC** 👋 We’re Alan and Ismail, the founders of Superagent (YC W24). We build tools for developers working with agents — especially **coding agents**.\n\nToday, we’re launching **VibeKit**, our open-source SDK that lets you run coding agents like OpenAI Codex or Claude Code safely in secure sandboxes.\n\nLocal setups work great for developing with coding agents — we’ve used them ourselves. But as soon as you want to **embed agents into your app**, **automate GitHub workflows**, or **run tasks in isolated environments**, you need something more flexible and secure.\n\n**VibeKit makes this possible.** It supports multiple sandbox providers (E2B today; Daytona, Modal, and [Fly.io](http://Fly.io) coming soon) and gives you:\n\n* ✅ Safe, isolated code execution\n* ✅ Live output streaming\n* ✅ Async run handling\n* ✅ Full prompt + code history\n* ✅ Telemetry and tracing\n* ✅ GitHub-safe automations\n\nWith VibeKit, coding agents can install packages, modify files, or create PRs — all without touching your local or production systems.\n\nhttps://youtu.be/GQaOSEbvOxM\n\nWe originally built VibeKit for internal use while developing Superagent. Since then we’ve used it to:\n\n* Embed coding agents inside apps\n* Build GitHub bots that open issues and PRs\n* Automate internal workflows (e.g. adding PostHog)\n\nNow it’s fully open source (MIT licensed) and available for anyone to use.\n\n🌐 [vibekit.sh](http://vibekit.sh) \n\n💻 [github.com/superagent-ai/vibekit](http://github.com/superagent-ai/vibekit) \n\n### 🙏 **Our Ask**\n\n* ⭐️ Star the repo\n* 🧪 Try embedding a coding agent in your app\n* 💬 Tell us what use cases it unlocked for you — email [founders@superagent.sh](mailto:founders@superagent.sh)\n\n![uploaded image](/media/?type=post&id=91137&key=user_uploads/1367556/d5bc1c0b-6a66-42b4-b75d-b28d6237e1a6)\n\n", "url": "https://www.ycombinator.com/launches/Nhx-vibekit-run-coding-agents-in-a-secure-sandbox", "votes": 18, "created_at": "2025-06-09T13:57:54.068Z" }, { "id": 79352, "title": "🥷 Superagent - Run any workflow using AI", "tagline": "Open-source platform that allows anyone to build AI-agent workflows", "body": "_**Tl;dr:** [_Superagent_](https://superagent.sh/) makes it easy for anyone to use AI to do complex tasks. Enterprises and startups already use it for things like managing R&D projects, customer support, and market research. It's open-source, and it's designed for everyone - not just AI experts. With Superagent, businesses can save money and work smarter. [_Learn more about Superagent_](https://superagent.sh/?utm_source=yc&utm_medium=blog&utm_campaign=launch-yc)._\n\n![uploaded image](/media/?type=post&id=79352&key=user_uploads/89898/db78152a-35a4-497e-acac-55556a095c07)\n\n👋 Hello, we're [Alan](https://linkedin.com/in/alanzabihi) and [Ismail](http://se.linkedin.com/in/pelaseyed/en). Our path to Superagent started while working on an AI app, where we faced the reality of needing to build the entire tech stack and become AI experts just to perform one basic workflow. This experience led us to create Superagent, aiming to simplify AI use for everyone.\n\n## 🚨 The Problem: AI integration is complex\n\nThe reality is, integrating AI into business processes is a complex task. It usually demands teams of machine learning engineers, which is a significant barrier for many companies. Consider a business executive who sees AI as an almost unachievable goal; this perspective can lead them to miss out on the benefits AI could bring to their operations.\n\n## 🚀 Our Solution: Easy-to-build AI-agents\n\nWith Superagent, companies can build their own AI agents to perform whatever workflow they have in their business operations:\n\n* **No coding or infrastructure needed**: Configure AI agents using simple markup.\n* **Integration with Airtable**: Ideal for managing data-heavy tasks like market research.\n* **API and SDKs**: Allows embedding AI agents into any app or third-party system, including task management tools like Jira.\n\nBy choosing Superagent, companies can:\n\n* Automate complex tasks that would typically require manual effort or sophisticated programming.\n* Reduce operational costs by spending less time and fewer resources on routine tasks.\n* Gain a competitive edge by doing better work internally, but also by creating new customer experiences.\n\n## 💡 Opportunity in Enterprise\n\nTechnology, healthcare, and banking are massive sectors with data-heavy operations. Superagent's open-source model has led to bottom-up adoption from these sectors, showing validation of our approach. Join us as we tap into this massive opportunity.\n\n## 👋 How you can join in\n\n\\- Fork us on [GitHub](https://github.com/homanp/superagent)\n\n\\- Join our community on [Discord](https://discord.com/invite/mhmJUTjW4b) \n\n\\- Create your first AI workflow on our [cloud service](https://superagent.sh/?utm_source=yc&utm_medium=blog&utm_campaign=launch-yc)\n\n\\- [Contact us](mailto:alan@superagent.sh) for custom advice on your workflows", "url": "https://www.ycombinator.com/launches/Kds-superagent-run-any-workflow-using-ai", "votes": 89, "created_at": "2024-03-13T14:25:14.679Z" } ] }, { "id": 29405, "name": "Risotto", "slug": "risotto", "former_names": [ "IntelliServe", "OttoHelm" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/490dc349e37f4a2e0e1693e480f1a2993cdb31aa.png", "website": "https://tryrisotto.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Want to apply AI to your IT Helpdesk queue? Risotto helps you grant software access, limit access/permission grants by time, serve knowledge, and get approvals from people like managers. All using natural language directly in chat (AKA \"ChatOps\")\r\n\r\nIT teams spend too much time manually provisioning software and answering the same question repeatedly. We help them improve resolution times, reduce SaaS spend, and enhance security with 24/7 automated software access and IT support. Check us out at: https://www.tryrisotto.com", "one_liner": "Risotto auto-solves IT support requests using AI", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Operations", "launched_at": 1709248167, "tags": [ "B2B", "Compliance", "Security", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Operations" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/risotto", "api": "https://devasheeshg.github.io/yc-api/batches/winter-2024/risotto.json", "year_founded": 2023, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tryrisotto/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/490dc349e37f4a2e0e1693e480f1a2993cdb31aa.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 607082, "full_name": "Aron Solberg", "title": "Founder", "founder_bio": "Aron is the founder and CEO of Risotto. When not working on his company he enjoys getting outdoors at every opportunity including hiking, skiing, and sailing. ", "is_active": true, "linkedin_url": "https://linkedin.com/in/aronsolberg", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/527b48c5394eaec2220613e0fec8df70f1d1074d.jpg" }, { "user_id": 1380843, "full_name": "Alex Confer", "title": "Founder", "founder_bio": "Co-founder of Risotto! Formerly Hellosign, Dropbox, Gusto. ", "is_active": true, "linkedin_url": "https://linkedin.com/in/aconfer", "x_url": "https://twitter.com/aconfer", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f0e971abf6917788ebdbdc7d2482802df92cbee7.jpg" }, { "user_id": 784345, "full_name": "Chris Paul", "title": "Founder", "founder_bio": "CTO and co-founder of Risotto. Formerly engineer and lead at HelloSign (YC11), interviewing.io, and Square.", "is_active": true, "linkedin_url": "https://linkedin.com/in/cmpaul/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/312dea2bf6a92f6da5d363de809849a87508c3a4.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 78931, "title": "Risotto: The new AI-enabled IT help desk in Slack", "tagline": "Turn any Slack Channel into an automated IT help desk in 60 seconds ", "body": "# **🏆** Tl;dr:\n\n[Risotto](https://www.tryrisotto.com) automatically solves IT support tickets using AI. We help IT teams improve their resolution times, reduce SaaS spend, and enhance security with 24/7 automated software access and IT support, all directly in Slack.\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/1932cf98-d844-41b5-83f3-210c96b453a6)\n\n# Meet the Team\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/e5b07a88-94f0-402e-bb58-8330605a7cec)\n\n[Aron](https://www.linkedin.com/in/aronsolberg/), [Alex](https://www.linkedin.com/in/aconfer/), and [Chris](https://www.linkedin.com/in/cmpaul/) met almost 10 years ago at HelloSign (YC11) as early employees.\n\n* Alex led the HelloSign IT team through the acquisition by Dropbox and later led IT engineering at Gusto.\n* Chris has a 25-year history as a software engineer and leader, most recently at Square.\n* Aron was also an early engineer at HelloSign before he shifted into Product Management, and later served as a Director of PM at Dropbox, and a PM lead in ML at Grammarly\n\nCollectively they have over 30 years of experience in enterprise B2B SaaS software. The team says they’re “excited to be building the IT product Alex always wanted, but has never been able to find.”\n\nCheck out automated 24/7 IT support with Risotto! ⬇️ ⬇️ ⬇️\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/8345b5cd-5e3e-4cf5-acd9-0054766f9de5)\n\n_Risotto learns the answers to common questions for automated 24/7 resolutions_\n\n# **❌** The Problem\n\n🕒 IT teams spend too much time manually provisioning software and answering the same question repeatedly\n\n💸 Manually provisioning SaaS accounts inflates license costs because there’s a tendency to over-provision\n\n🦹 Security suffers as software accounts proliferate\n\n😫 Quarterly user access reviews for SOC 2 compliance add additional overhead for IT to manage\n\nThese types of problems are a waste of time for people to solve but are perfect for automation. One of our co-founders [Alex](https://www.linkedin.com/in/aconfer/) saw this play out constantly while running IT at Gusto and Dropbox which inspired us to do something about it!\n\n# **📈** The Solution\n\n\n\n_Turn any Slack Channel into an automated IT help desk in 60 seconds_\n\nOut-of-the-box Risotto integrates with Slack, and IDPs like Okta to manage software groups and provide three major feature pillars to make IT teams awesome\n\n### “ChatOps” Helpdesk in Slack\n\nRisotto turns any Slack channel into a 24/7 automated help desk in 60 seconds. Embrace “ChatOps” to minimize context switching for employees and IT. All chat threads are backed by a digital ticket with control handled through natural language and emojis.\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/eaba27d2-ab79-4029-9592-b13b31df8ffc)\n\n_You’ll love seeing the green check marks pile up as Risotto solves tickets right in front of your eyes_\n\n### Automated Software Access Management\n\nGain the benefits of software **approvals** and **time-based access** with our powerful access rules engine. All these rules can be configured per department to ensure everyone gets the right level of access.\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/24a9a446-eba6-40ba-855e-6edb25d1fab7)\n\n_Time-based access is a piece of cake with Risotto_\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/3664b78b-717a-4b99-9b4b-a910579eb3fc)\n\n_Get important and expensive software approved to ensure it’s really needed_\n\n### Streamlined User Access Reviews\n\nYour SOC 2 quarterly access reviews will fly by with Risotto. We offer easy tracking and review of software to ensure you always keep tabs on who has access and why\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/dd5f3249-8166-4c99-80ba-87e6065a6c3e)\n\n### Risotto’s benefits\n\n📈 Risotto improves the key metrics that IT teams care about, such as time-to-resolution (TTR), time-to-first-response (TTFR), and employee satisfaction ratings\n\n![uploaded image](/media/?type=post&id=78931&key=user_uploads/607082/eb256bc0-2e46-4265-bb61-4370cca79cf2)\n\nRisotto also provides numerous other benefits including:\n\n1️⃣ A unified IT support funnel to reduce context-switching\n\n⏩ Faster resolutions\n\n💰 Lower SaaS costs with on-demand provisioning\n\n🔐 Better security with timed access, and swift compliance reviews\n\n# Learn More and Try out Risotto\n\nWork in IT and want to try our Risotto? Reach out we’d love to talk! We think the future of IT support is conversational, and AI can help.\n\n* Email us at [founders@tryrisotto.com](mailto:founders@tryrisotto.com)\n* Schedule time directly via [Calendly](https://calendly.com/d/32r-55q-4d7)\n* Visit our [website](https://www.tryrisotto.com) and use our contact form\n\nWe love talking about modern IT challenges and we can often provide advice and best practices for navigating sticky problems!", "url": "https://www.ycombinator.com/launches/KX5-risotto-the-new-ai-enabled-it-help-desk-in-slack", "votes": 152, "created_at": "2024-03-01T01:03:31.109Z" } ] }, { "id": 29729, "name": "Clearly AI", "slug": "clearly-ai", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c287d41c131d5c10886a84c3cd7fd46b393f7af.png", "website": "https://clearly-ai.com", "all_locations": "Seattle, WA, USA", "long_description": "Clearly AI automates security and privacy reviews with AI. We performed hundreds of reviews at Amazon and Moveworks and now we're building the product we wish we had. Our users complete reviews in minutes instead of days.\r\n\r\nEmily and Joe are technical co-founders and senior engineers. We met in 2019 while working on an Alexa security review.", "one_liner": "Automate security and privacy reviews", "team_size": 17, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1722269171, "tags": [ "Generative AI", "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/clearly-ai", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/clearly-ai.json", "year_founded": 2024, "city": "Seattle", "country": "US", "linkedin_url": "https://www.linkedin.com/company/clearly-ai", "x_url": "https://twitter.com/ItsClearlyAI", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c287d41c131d5c10886a84c3cd7fd46b393f7af.png", "app_video_url": "https://bookface-images.s3.us-west-2.amazonaws.com/bf-public_profile/29787/app_video.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIAQC4NIECAODIUI2QA%2F20261020%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20261020T022720Z&X-Amz-Expires=60&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEHEaCXVzLXdlc3QtMiJGMEQCICdQyGY%2BbftNLxtKIYzFPxdUXttuiP0N09%2F%2BUfBHiBuhAiBOSl161zU1GSzXg078adXidT%2BI1mNTN00xIiFabrEuZSrlAwg6EAAaDDAwNjIwMTgxMTA3MiIMkex8rUdJQnYvqkb2KsIDZvHjdb5Nj1eMSDUiIIyyiwfJ8RyPFxer5o1XPlMS8x%2FtN9n%2F7PvS5Wd7oFPHi1qVxZAOUh%2BsJ%2B%2BXOPvWZ3Ae6ZZbt6%2BpSxxIqhHajGvQPEffXaUpP5qEh5zdOBvoNiFOEcL3U5kvAXPdFAeyEQUSC22Zz6qlwEbD4gyjAVIG69Bq2BqpO5gGA142dDrsMk9Fpvvrw4sUrmoFsqVRjQeNNnbJ6kGBUpNWGmGUg9xVdF1g6zjy5AOLq9gaZMWpGvdL2up4UE8tZcCtovhQX7LttuknA2oMDZbhb%2Bm1111BTyQwfpo0mzYMWvLSVFktebdbrXNkCCYHuwzkc%2FAYLLBCHcwr959rGhfijkmBq8zJ6L%2F3m2hFjzDHCnZYPOz0rFWk1O%2FdpaLpo4%2B83owIv8pdLkfxnSwz7jpV83o7ddFuQwi3GyYhgDV9NKraaZUPDf35OffhHBAa9LNH9KBtXE%2B9EJapzAmTZRHX0y1pAaJdqK7NnCs3JXj5MlJbG%2Fk7qe6hMwsDLiNtlbMQ85QzyJJHGU4y3dM2z2PBRjDSvRfVwapQjnLimR6h7fxLZHe1JssWKCLL3Y7dNZqEc8LFx7ZPmRWFMOj92tYGOqYB1OGPMkYIGSgzUnwJVB6Fm37ysfFBg0lS7An85D5284tv08ntQNXM%2B3NjFf0CnSg8DB6Uagn6Pf8Hz0vPosKjbkPeKHdUWICNI6ZBqrBsIZuFlEJamVl3d%2B5M5pi50RkfxaC0jUNRP0kzypvFoXoBWM5zGuVWthjEJhSlwkhKt8FAj4eChg9bDGTNeM9DkgbxKs0YI84QCmRK0pRtLAv0T11YvQ%2FTTg%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=5b61a20d2f49ee45b592e4520b2d2c056aa03109d6ea3b4e605512f6de3ff06f", "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 1848263, "full_name": "Emily Choi-Greene", "title": "Founder/CEO", "founder_bio": "Founder/CEO at Clearly AI. Previously, Emily owned data security and privacy at Moveworks. Before that, she spent 5 years at Amazon, where she led Alexa AI Security. Emily performed hundreds of security and privacy reviews, from Moveworks' AI data lifecycle to Alexa's machine learning compute platform (used by 5000+ ML scientists). Emily graduated with High Honors in Computer Science from Dartmouth College.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/emilycgreene/", "x_url": "https://twitter.com/escgreene", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/095144c8d2288c74a28b3c53ed81fa5cc42a1d32.jpg" }, { "user_id": 1848395, "full_name": "Joe Choi-Greene", "title": "Founder/CTO", "founder_bio": "Founder/CTO at Clearly AI. \nPreviously, Joe was a sr. software engineer at Amazon. Joe led the satellite telemetry team at Project Kuiper and built exabyte scale datalakes at Alexa. \nJoe graduated from Carnegie Mellon University with a degree in computer science.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jcg-cmu", "x_url": "https://twitter.com/JoeChoiGreene", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b5a8be784960f6931b08f78ae355cd70f2ce405d.jpg" } ], "jobs": [ { "id": 90826, "title": "Forward Deployed Security Engineer", "url": "https://www.ycombinator.com/companies/clearly-ai/jobs/zdixMrj-forward-deployed-security-engineer", "location": "Seattle, WA, US / Remote (US; CA)", "type": "Full-time", "role": "Engineering", "role_type": "Backend", "salary_range": "$125K - $175K", "equity_range": "0.10% - 0.50%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Information Security", "Software Security" ] } ], "news": [ { "title": "Seattle security startup led by husband-wife duo raises $8.4M – GeekWire", "url": "https://www.geekwire.com/2026/seattle-security-startup-led-by-husband-wife-duo-raises-8-4m/", "date": "Feb 10, 2026" }, { "title": "Okta Announces Finalists for Startup Challenge", "url": "https://www.businesswire.com/news/home/20250918072554/en/Okta-Announces-Finalists-for-Startup-Challenge-to-Build-Identity-Security-Applications", "date": "Sep 18, 2025" }, { "title": "Meet the Winners of the Amazon Bedrock Builders’ Challenge", "url": "https://aws.amazon.com/startups/learn/amazon-bedrock-builders-challenge#overview", "date": "Mar 11, 2025" } ], "launches": [ { "id": 82990, "title": "Clearly AI - Your AI Trust Team", "tagline": "Automate security and privacy with AI that understands your software.", "body": "**TL;DR:** [Clearly AI](https://clearly-ai.com) continuously reviews your software for security and privacy risks. We keep your compliance paperwork up to date and escalate issues that need attention so that your engineers can focus on more critical work.\n\n### The Problem\n\n* **Burn-out:** Many companies struggle to complete in-depth security reviews due to understaffed teams. The industry average is 1 security engineer per 200 software engineers. There is an overwhelming volume of software and policies to monitor and cross-check.\n* **Fragmentation:** Today, a typical enterprise security review takes 3-4 months to complete. Most of that time is spent gathering information and filling out paperwork. Trust teams operate in silos, leading to redundant questions or delayed risk identification.\n\n### Our Solution\n\n* **Triage:** Review all designs and code for security best practices and regulatory compliance.\n * **Raise the Ceiling:** Prioritize which applications need deeper review by security & privacy engineers.\n * **Raise the Floor:** For the rest, perform baseline security & privacy reviews to ensure compliance.\n* **Shift Left:** Bring the collective knowledge of legal, privacy, compliance, and security teams directly to developers from the inception of their work.\n* **Continuous Monitoring:** Real-time, automated checks instead of point-in-time reviews.\n\n![uploaded image](/media/?type=post&id=82990&key=user_uploads/1848263/d98720b6-83d2-42ed-bc4b-5dae8d938410)\n\n### Our Ask\n\nReach out to us if:\n\n* Your security/privacy teams are understaffed and overwhelmed.\n* Security/privacy is critical to your customers (beyond SOC2 certification).\n* You operate across regions with varying privacy regulations, and you need to evaluate and comply.\n\n### Our Offer\n\nGive us your gnarliest security & privacy problems — we’re happy to do a [free consultation](https://calendly.com/emily-cg/security-privacy-consult) and lend our expertise back to the YC community.\n\n### Our Team\n\nEmily & Joe met five years ago while working on an Alexa security review.\n\n* [**Emily**](https://www.linkedin.com/in/emilycgreene/)**:** Senior engineer at Amazon and Moveworks, speaker at USENIX PEPR, expert in privacy-preserving machine learning, featured in the New York Times.\n* [**Joe**](https://www.linkedin.com/in/joseph-choi-cmu)**:** Senior engineer at Amazon, designed and secured spacecraft command software that now orbits Earth, automated data compliance with global regulations like GDPR and HIPAA.\n\n![uploaded image](/media/?type=post&id=82990&key=user_uploads/1848263/d75fc960-831c-41bb-b51a-2a2dc7d0015c)\n\n", "url": "https://www.ycombinator.com/launches/LaY-clearly-ai-your-ai-trust-team", "votes": 221, "created_at": "2024-08-13T18:05:13.368Z" } ] }, { "id": 29750, "name": "winfunc", "slug": "winfunc", "former_names": [ "Stition", "Asterisk" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/758cce64094ba9a7250a8b613b368074620a74f5.png", "website": "https://winfunc.com", "all_locations": "San Francisco, CA, USA", "long_description": "Winfunc (winfunc.com) is an AI Hacker that autonomously finds, verifies, and patches security vulnerabilities in codebases, just like a human security engineer would. \r\n\r\nWinfunc can find business logic errors with context-aware scanning and automate the full auditing cycle to generate reports with zero false positives.\r\n\r\nWinfunc's agent has found vulnerabilities in Google, Supabase, Sentry, Cal, Gumroad, Bun, Hoppscotch, etc.", "one_liner": "ai-native security engineering for mission critical codebases", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1723094847, "tags": [ "SaaS", "B2B", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/winfunc", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/winfunc.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/winfunc", "x_url": "https://x.com/winfunc", "fb_url": null, "cb_url": null, "github_url": "https://github.com/winfunc", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/758cce64094ba9a7250a8b613b368074620a74f5.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/6ff376ba6239359fd82e52f00898c3d24ba45dc8.png" ], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1378207, "full_name": "Mufeed VH", "title": "Founder/CEO", "founder_bio": "founder/hacker at winfunc.\n\nwebsite: mufeedvh.com\ngithub: github.com/mufeedvh", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/mufeed-vh/", "x_url": "https://twitter.com/mufeedvh", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/26370ebfa125cc4425cfac841e698261a9937b41.jpg" }, { "user_id": 629782, "full_name": "Vivek R", "title": "Founder/CTO", "founder_bio": "CTO @ Asterisk. Previously, Vivek built secure, fault tolerant distributed systems for leading POS validators handling a total stake of $2B+, did IoT protocol optimization research for startups, contributor to GStreamer - the leading multimedia framework used by Google, Apple, etc, helped Fortune 100 companies with their infrastructure strategy and optimization.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/123vivekr", "x_url": "https://twitter.com/veev3x", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/de2b3ae0262c681b5388927081725e25a91adcc1.jpg" } ], "jobs": [], "news": [ { "title": "Devika Creator Launches Asterisk, YC-backed AI Agent Startup", "url": "https://analyticsindiamag.com/ai-news-updates/devika-creator-launches-asterisk-yc-backed-ai-agent-startup/", "date": "Aug 12, 2024" } ], "launches": [ { "id": 82844, "title": "Asterisk: AI-automated Security team", "tagline": "Automatically find, exploit, and patch security vulnerabilities across your digital assets with zero false positives.", "body": "**TL;DR**: [Asterisk](https://asterisk.so/) is an AI “hacker” with the ability to find, exploit, and patch security loopholes across your digital assets. It does all of this with no user intervention and generates a report with zero false positives. ([example](https://demo.asterisk.so/?report_id=776e01e4-22a2-44bd-afc5-229ec115e1b1))\n\n![uploaded image](/media/?type=post&id=82844&key=user_uploads/629782/0cd6877d-6d46-4428-ae29-236edb91393e)\n\n# **The Problem**\n\n* Almost 95% of potential vulnerabilities raised by static security tools (SAST) are **false positives**, and security engineers spend a lot of time filtering them out.\n* Current security tech **cannot detect business logic bugs** - think of vulnerabilities like unauthorized access, privilege escalation, and bugs that would rack up your AWS/API bills.\n\n# **Solution**\n\n* **Verification:** Asterisk verifies a vulnerability by spinning up a sandbox, running the software being scanned, and attempts to exploit the bug. If Asterisk flags a vulnerability, you can be sure it's real.\n* **Context-aware Threat Modeling:** Asterisk understands your codebase and can thus emulate a malicious hacker by coming up with attack scenarios, like the recent CrowdStrike incident.\n\n# **Our Team**\n\nWe are [Mufeed](https://www.linkedin.com/in/mufeed-vh/), [Asjid](https://www.linkedin.com/in/asjidkalam/) and [Vivek](https://www.linkedin.com/in/123vivekr/). All of us have a background in security research and systems engineering.\n\n![uploaded image](/media/?type=post&id=82844&key=user_uploads/629782/4120e7a5-43bf-4fa1-9352-699f902b32c9)\n\n**Mufeed**: represented 🇮🇳 at WorldSkills CTF, 🥇 medalist - IndiaSkills CTF, 🥉 medalist - BRICS Skills CTF\n\n**Asjid**: 🥈 medalist - IndiaSkills, ex-security research engineer at Emirates National Bank (UAE)\n\n**Vivek**: ex-distributed systems/platforms engineer at Chorus One (one of the biggest POS validators)\n\nOur team has helped secure Google, Mastercard, Okta, Nvidia, Microsoft, etc. We are also the team behind [Devika,](https://github.com/stitionai/devika) the open-source alternative to Devin with over 18K stars on GitHub.\n\n# **Our Ask**\n\nIf you're looking for a **complete security audit** of your digital assets or want to talk about anything security, email us ([hello@asterisk.so](mailto:hello@asterisk.so)) or book a demo ([asterisk.so/demo](http://asterisk.so/demo)).", "url": "https://www.ycombinator.com/launches/LYC-asterisk-ai-automated-security-team", "votes": 205, "created_at": "2024-08-08T07:20:52.225Z" } ] }, { "id": 29812, "name": "ZeroPath", "slug": "zeropath", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/fd70ee2d072b5f54e3fd3fc0e2531e49708b3fa7.png", "website": "https://zeropath.com", "all_locations": "San Francisco, CA, USA", "long_description": "ZeroPath is a developer tool that autonomously detects, verifies, and submits fixes for vulnerabilities in your code. Engineers can use ZeroPath to find security problems that they might only otherwise catch in pentests or from bug bounty researchers.", "one_liner": "Automatically find and fix your software vulnerabilities", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1718222641, "tags": [ "Developer Tools", "B2B", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/zeropath", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2024/zeropath.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/zeropathai", "x_url": "https://x.com/zeropathAI", "fb_url": null, "cb_url": null, "github_url": "https://github.com/zeropathai", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/fd70ee2d072b5f54e3fd3fc0e2531e49708b3fa7.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 2021206, "full_name": "Dean Valentine", "title": "Founder", "founder_bio": "ZeroPath founder", "is_active": true, "linkedin_url": "", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d4aa118f45ea9f67b3ca5bb4aa5d886701b03b48.jpg" }, { "user_id": 2049348, "full_name": "Raphael Karger", "title": "Founder", "founder_bio": "CTO at ZeroPath. Former Google Security Engineer and BishopFox Consultant.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/raphael-karger/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/db088b311094bb1d324eed9d1fde67f15d0cd2f6.jpg" }, { "user_id": 2021191, "full_name": "Etienne Lunetta", "title": "Founder", "founder_bio": "COO at ZeroPath. Former Co-Founder at Mevlink, acquired by bloXroute Labs in 2023.", "is_active": true, "linkedin_url": "", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/69f8b695e026ab2db3939b185d23a01ceef56eb8.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 82258, "title": "🛡️ ZeroPath - Autonomous vulnerability patching", "tagline": "Detect and fix your web application's exploitable security issues without config.", "body": "📝 TL;DR: [ZeroPath](https://zeropath.com/) is a GitHub app that detects, verifies, and issues pull requests for security vulnerabilities in your code.\n\n![uploaded image](/media/?type=post&id=82258&key=user_uploads/2021206/183871ce-a1b3-4db9-a320-ce73defc63c3)\n\n### 💡 Why We Built This:\n\nAs security engineers and developers, we've seen firsthand how challenging it is for businesses to secure their products. Existing Static Application Security Testing (SAST) tools overwhelm teams with false positives and fail to remediate the real vulnerabilities they do find. We built ZeroPath to allow fast-moving teams to write secure code without having to configure or review a scan dashboard.\n\n![uploaded image](/media/?type=post&id=82258&key=user_uploads/2021206/9f2ff51d-2c6b-4ad5-b7c3-4c48e26fc0e9)\n\n### 🛠 How It Works:\n\n1. Executes regular vulnerability scans of your source code\n2. Integrates with GitHub to scan pull requests for vulnerabilities\n3. Uses advanced LLMs to significantly reduce false positives\n4. Generates patches for vulnerabilities identified\n5. Automatically issues pull requests to patch them\n\n### 💪 Why ZeroPath:\n\n* Integrates with your existing SAST - **removes** **85% of false positives**\n* Reduces vulnerability remediation time by up to **90%**\n* Enables natural language modification of patches, just tag @zeropath-ai in PRs (including your own!)\n* Supports complex, multi-file changes seamlessly\n* Prevents SAST vendor lock-in\n\n### 👥 Our Team:\n\n* [Nathan](https://linkedin.com/in/nathan-hrncirik): Ex-Tesla Red Team Engineer, $100k+ in bug bounties\n* [Raphael](https://linkedin.com/in/raphael-karger): Ex-Google Security Engineer, 12 security researcher hall of fames\n* [Dean](https://www.linkedin.com/in/dean-valentine-3b7583313/) & [Etienne](https://www.linkedin.com/in/etienne-lunetta-574065313/): Founders of Mevlink (acquired by Bloxroute in 2023)\n\n## 💰 YC Launch Deal: 50% off for 12 months\n\n* $20/month per contributing developer (reg. $40)\n* Use code LAUNCHYC at checkout, **valid until 8/15**\n\n### 🙏 How You Can Help:\n\nWe're eager for your insights on our product, feature ideas, and security needs - whether through trying our GitHub app, scheduling a meeting, or sharing feedback.\n\n* [Install our GitHub app](https://zeropath.com/)\n* [Schedule a meeting to discuss your application security needs](https://cal.com/zeropath/30min)\n* [Share your feedback](mailto:hello@zeropath.com)\n\n### 🚀 Get started in 30 seconds: \n\n📅 Want to learn more? Schedule a demo: \n\n![uploaded image](/media/?type=post&id=82258&key=user_uploads/2021206/c947eed7-8cdb-43e0-b330-0c5e36c86ef5)\n\n", "url": "https://www.ycombinator.com/launches/LOk-zeropath-autonomous-vulnerability-patching", "votes": 47, "created_at": "2024-07-18T18:38:13.935Z" } ] }, { "id": 30087, "name": "Gecko Security", "slug": "gecko-security", "former_names": [ "Gecko Security Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/45adce9bea5991ec16d5af841bb7bca96948baf2.png", "website": "https://gecko.security", "all_locations": "London, England, United Kingdom", "long_description": "We built Gecko for teams that want to build secure code quickly without wasting time on security tools that don’t deliver results, or relying on one-time human pentests that quickly become outdated. Gecko uses AI to understand how your application should work, simulates relevant attacks to find critical vulnerabilities, and then verifies these vulnerabilities by exploiting them. It also helps you understand the risk of these vulnerabilities and applies a working fix to keep your code secure.", "one_liner": "Security that understands your company", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1729014786, "tags": [ "SaaS", "B2B", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United Kingdom", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/gecko-security", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2024/gecko-security.json", "year_founded": 2024, "city": "London", "country": "GB", "linkedin_url": "https://www.linkedin.com/company/geckosec", "x_url": "https://x.com/gecko_sec", "fb_url": null, "cb_url": null, "github_url": "https://github.com/Gecko-Security", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/45adce9bea5991ec16d5af841bb7bca96948baf2.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 1543392, "full_name": "Jeevan Jutla", "title": "Founder/CEO", "founder_bio": "Jeevan, Co-Founder and CEO of Gecko Security, has previously worked as a security researcher for UK Intelligence, where he built automated security tools. He’s ranked in the top 500 globally for competitive hacking and has co-developed machine learning tools for vulnerability research, 3 years ahead of public research.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jeevan-jutla", "x_url": "https://x.com/jjjutla", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/74dd4dee3403d90703a392dc55f1bfb34cb2bf67.jpg" }, { "user_id": 1969797, "full_name": "Artemiy Malyshau", "title": "Founder/CTO", "founder_bio": "Artemiy is the CTO and Co-Founder at Gecko Security. He holds an MSc from Imperial College London, where he was a scholar. He contributed to research in multi-agent systems and reinforcement learning. Prior, he developed threat intelligence software for Interpol and national governments.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/artemiy-malyshau/", "x_url": "https://x.com/nkoorty", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/5ebf9724a66e3cf8fe013ca476bdfca6e4ccec30.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 92703, "title": "Gecko Security: AI SAST for finding Vulnerabilities in Code", "tagline": "30+ 0-Days found using Gecko", "body": "**TL;DR:** Static analysis tools flood teams with false positives and miss the vulnerabilities that matter. We use LLMs to find the complex business logic flaws that traditional scanners can't detect.\n\n![uploaded image](/media/?type=post&id=92703&key=user_uploads/1969797/42239d23-2918-4c49-bc6d-38a1955fc1c7)\n\n# **The Problem**\n\nCompanies scan their code for security vulnerabilities and are often met with a big pile of findings. 80% of these findings are false positives and not exploitable vulnerabilities. Even among the true positives, these scanners still miss issues like privilege escalation and authentication bypasses. These are the most important issues that only surface later during manual code review or penetration testing.\n\nSecurity teams have to deal with this by spending hours tuning scanners and rules or hiring headcount to triage through the false positives. This translates into delayed releases, overtime costs, and compliance risks when critical flaws slip through undetected.\n\n# **The Solution**\n\nTraditional SAST (Static Application Security Testing) tools have two fundamental limitations. First, they parse code into simplistic models like ASTs or call graphs, which lose context and can't resolve complex call chains. Second, they rely on pattern matching against predefined rules, which works for basic vulnerabilities like XSS and SQLi but fails completely for custom business logic flaws.\n\nGecko solves both problems. We built a custom, compiler-accurate indexer that preserves semantic information and allows us to precisely navigate code like an IDE. This gives us the ground truth of how your code actually works.\n\nWith that foundation, we use LLMs to perform threat modeling. The LLM analyzes your code's business logic, data flows, and trust boundaries to generate targeted attack scenarios. We then systematically validate each potential attack path, using the indexer to reconstruct full call chains from source to sink and determine real-world exploitability before flagging it as a vulnerability.\n\nThis approach finds the complex, multi-step business logic vulnerabilities that have been invisible to traditional tools.\n\n# **Ask**\n\nWe've got a handful of Fortune 500 companies and startups alike excited about this, because it addresses key pain points they couldn’t address with traditional scanners. Customers are seeing 50% fewer false positives on the same codebases, and are finding issues using the scanner that would only appear in pentests and manual code reviews.\n\nWe’ve used it to find 30+ CVEs in projects like Ollama, Gradio, and Ragflow (). You can [try it on any OSS repo](https://app.gecko.security) at or [get a demo](https://cal.com/geckosec/30min).\n\n# **Team**\n\nJJ and Artemiy met four years ago while studying in London. Since then, they have traveled the world competing in CTFs and hackathons, earning over $100,000 in prizes.\n\nJJ, CEO and Co-founder, previously worked for the UK Intelligence Service, as a teenager building automated tooling to defend critical infrastructure. He also worked at Binance in China leading security tool development for the Red Team. \n\nArtemiy, CTO and Co-founder, served in the Austrian Cyberforces and built threat intelligence platforms used by Interpol and national governments. A scholar of Imperial College London, he’s spent his career developing systems that detect and respond to complex cyber threats", "url": "https://www.ycombinator.com/launches/O7D-gecko-security-ai-sast-for-finding-vulnerabilities-in-code", "votes": 22, "created_at": "2025-08-04T18:13:52.289Z" }, { "id": 84816, "title": "Gecko Security: Your AI Security Engineer", "tagline": "Gecko is an AI SAST for finding and fixes security vulnerabilities in your codebase. It's just like having a security engineer making your code secure.", "body": "**TL;DR:** We built [Gecko](https://gecko.security/) for teams that want to build secure code quickly without wasting time on tools that don’t deliver results, or relying on one-time human pentests that quickly become outdated.\n\n![uploaded image](/media/?type=post&id=84816&key=user_uploads/1969797/81233561-38af-49a4-b7ed-03f61aa03ae0)\n\n### **The Problem**\n\nMost developers tell us they think of security as an afterthought, added out of fear rather than part of the development process at the start. This is because current security tools **can’t find critical business logic vulnerabilities**, which are the ones attackers actually exploit, and instead flag low-priority issues with many **false positives**. This makes fixing these issues slow and costly, **pulling engineers away from building** features that grow revenue.\n\n### **The Solution**\n\nGecko uses AI to understand how your application should work, simulates relevant attacks to find critical vulnerabilities, and then verifies these vulnerabilities by exploiting them. It also helps you understand the risk of these vulnerabilities and applies a working fix to **continuously** **keep your code secure**. [Watch our demo here!](https://www.youtube.com/watch?v=ObuItEP3rZk)\n\n### **Technical Details**\n\nAt a high level, Gecko mimics the approach of skilled security experts by using LLM agents combined with program analysis tools like static analyzers, fuzzers, and symbolic executors, which were previously **only used in intelligence agencies**. For fixing vulnerabilities, Gecko uses multiple agents to iteratively refine the patches - ensuring the vulnerability is remediated, and your code isn’t broken. All testing is done in parallel with certified human pentesters, as we continue to benchmark Gecko’s performance to ensure no vulnerabilities are overlooked.\n\n### **Ask**\n\n**Do you have code that needs to be secured?** Email us at [**gecko@gecko.security**](mailto:gecko@gecko.security) or book a demo at [**https://cal.com/geckosec/15min**](https://cal.com/geckosec/15min).\n\n### **Team**\n\n[JJ](https://www.linkedin.com/in/jeevan-jutla/) and [Artemiy](https://www.linkedin.com/in/artemiy-malyshau/) met four years ago while studying in London. Since then, they have traveled the world competing in CTFs and hackathons, earning over $100,000 in prizes. \n\nJJ previously worked for the UK Intelligence Service (GCHQ), as a teenager building automated tooling to defend critical infrastructure. He also worked at Binance in China leading security tool development for the Red Team.\n\nArtemiy holds an MSc from Imperial College London, where he was a scholar. He has contributed to research in multi-agent systems and reinforcement learning. As the first employee and only non-PhD member at his previous company, he developed threat intelligence software for Interpol and national governments. \n\nBoth are deeply committed to cybersecurity and AI, and are focused on solving one of the industry's most challenging problems.", "url": "https://www.ycombinator.com/launches/M40-gecko-security-your-ai-security-engineer", "votes": 81, "created_at": "2024-10-16T21:47:06.425Z" } ] }, { "id": 30407, "name": "Golf", "slug": "golf", "former_names": [ "authed", "Authed", "authed", "Authed" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/cb627188af8a389c044d02fc9024aae3ea05cdd3.png", "website": "https://golf.dev/", "all_locations": "San Francisco, CA, USA", "long_description": "Golf gives enterprises visibility into shadow AI and control over AI agents and MCP. See what's connected, enforce policies, and generate audit trails - all from one place.", "one_liner": "Agentic AI Security and Governance", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1745255607, "tags": [ "Developer Tools", "Security", "Infrastructure", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/golf", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/golf.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/106327716", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/golf-mcp", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/cb627188af8a389c044d02fc9024aae3ea05cdd3.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 1366358, "full_name": "Wojciech Błaszak", "title": "Founder/CEO", "founder_bio": "Wojciech is the cofounder & CEO @ Golf.\n\nWojciech started building first company at 14, scaling it to $200k rev. He dropped out of university after one semester to keep building full-time. He has previously worked on multiple AI products, including an AI SDR and infrastructure for AI agents. Wojciech also started a community for young Polish hackers and scientists.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/wojciech-błaszak11/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/9a5daa1c44dcd87e2763d40b6840f93abec96904.jpg" }, { "user_id": 1313739, "full_name": "Antoni Gmitruk", "title": "Founder/CTO", "founder_bio": "Antoni is the cofounder & CTO @ Golf.\n\nAntoni started building at 15 by creating a fully automated 3D printer. He dropped out of university after one semester to keep building full-time. He has previously worked on multiple AI products, including an AI SDR and infrastructure for AI agents. Antoni also started a community for young Polish hackers and scientists.", "is_active": true, "linkedin_url": "https://linkedin.com/in/antoni-gmitruk-80a268211", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2e0b52ea49b6bc7e7ceceb4127f248f43085852e.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 90569, "title": "Golf: Open-source platform for shipping production MCP servers", "tagline": "We provide the tooling to build and operate MCP servers in production - auth, tracing, and a deployment pipeline included.", "body": "Hi YC,\n\nWe’re Wojciech and Antoni -  high school friends who’ve been building together since we were 14. We're incredibly bullish on a future where AI agents have their own internet through which they access our services - so much so that we dropped out of university to build Golf.\n\n**Golf lets you ship a production-ready MCP server without worrying about the plumbing.** You just write the tools, prompts, and resources you want agents to call. Golf handles everything else - routing, auth, telemetry, error reporting, and deployment. Then you can observe and manage it through our gateway.\n\nhttps://youtu.be/u9ar4w2uE7E\n\n# **The problem**\n\nOver the past few weeks, we spoke with over 40 teams building MCP servers. Everyone hit the same walls: wiring up authentication, figuring out how to trace agent calls, setting up working transports, and debugging behavior in production. The MCP spec doesn’t cover these parts. Teams told us it takes **2-4 weeks** to get that to production.\n\n# **What we built**\n\n**GolfMCP** is an open-source framework that gives you a clear, file-based structure to define what your agent can call. No decorators, no spec knowledge, no boilerplate - just write your logic.\n\n**Golf Gateway** is the hosted layer that runs and observes your server. golf deploy gives you a live server in under 60 seconds, with real-time traces, tool usage, and error monitoring built in.\n\n![uploaded image](/media/?type=post&id=90569&key=user_uploads/1366358/b035bdc4-02c2-42d5-a230-ad38be34dfa9)\n\n# **Early traction**\n\nWe’re already running Golf in production with companies, and we’ve got more landing this week. \n\n**CTAs**\\\nIf you are looking to ship server for your company, schedule a demo of our platform here: https://golf.dev\\\nAlso we’d love to get your feedback, and we’re happy to help teams get to production faster. Reach us at [founders@golf.dev](mailto:founders@golf.dev)", "url": "https://www.ycombinator.com/launches/NYn-golf-open-source-platform-for-shipping-production-mcp-servers", "votes": 74, "created_at": "2025-05-21T01:15:30.127Z" } ] }, { "id": 30452, "name": "Better Auth", "slug": "better-auth", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f768f164c4dd92121e70abbd42713af3118834a.png", "website": "https://better-auth.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Better Auth is a comprehensive authentication framework for TypeScript that lets you implement everything from simple auth flows to enterprise-grade systems directly on your own database, embedded in your backend. It’s loved by developers all over the world and endorsed by leading voices in the ecosystem.\r\n\r\nOn top of the framework, Better Auth also provides an infrastructure layer to help you scale with user management and analytics, bot and fraud detection, transactional email and SMS, global session storage and more.", "one_liner": "The authentication framework for TypeScript", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1744888506, "tags": [ "Developer Tools", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/better-auth", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/better-auth.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/better-auth", "x_url": "https://twitter.com/better_auth", "fb_url": null, "cb_url": null, "github_url": "https://github.com/better-auth", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f768f164c4dd92121e70abbd42713af3118834a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 1184116, "full_name": "Bereket Engida", "title": "Founder/CEO", "founder_bio": "I’ve spent the past few years building developer tools and contributing to open source projects, mostly in TypeScript - including libraries like Better Call, Better Fetch, Loglib and Better Auth. Before that, I worked across several products, which is where I first got obsessed with making dev infra more usable. I care a lot about good DX, clean APIs, and building things that actually ship.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/bekacru/", "x_url": "https://x.com/bekacru", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/da6169f6f81e9fa0e7fd8311a4df990285887bbf.jpg" } ], "jobs": [], "news": [ { "title": "Better Auth is joining Vercel", "url": "https://better-auth.com/blog/better-auth-joins-vercel", "date": "Jul 07, 2026" }, { "title": "Better Auth, an authentication tool by a self-taught Ethiopian dev, raises $5M from Peak XV, YC | TechCrunch", "url": "https://techcrunch.com/2025/06/25/this-self-taught-ethiopian-dev-built-an-authentication-tool-and-got-into-yc/", "date": "Jun 25, 2025" } ], "launches": [ { "id": 90320, "title": "Better Auth - The Authentication Framework for TypeScript", "tagline": "The fastest growing Auth framework for TypeScript: 13K stars + 100K weekly downloads!", "body": "Hey! 👋 We’re building Better Auth - a comprehensive, framework-agnostic authentication framework for TypeScript. It lets you roll your own auth directly on your backend and database, without relying on 3rd party services. From basic sign-ins to complex enterprise systems all with great DX.\n\nhttps://www.youtube.com/watch?v=j_HjHmprVOs\n\nAuth has been a pain point for many developers in the TypeScript ecosystem for a while. Other open-source libraries require a lot of additional code for anything beyond basic authentication. So, we set out to build a comprehensive auth library - framework-agnostic, with a robust set of features out of the box, a plugin ecosystem for everything else you might need, and great documentation.\n\n![uploaded image](/media/?type=post&id=90320&key=user_uploads/1184116/dec3dc74-8395-4d83-b062-c2f3271b8164)\n\nSince launching v1 just 5 months ago:\n\n* **13K+ GitHub stars** and **350K+ monthly npm downloads**\n* We've grown into one of the **most influential** and **well-loved** open source projects in the TypeScript ecosystem.\n* Used in production by great teams including YC companies and major OSS projects including [folo](https://github.com/RSSNext/Folo), [same](https://same.new/), [dokploy](https://github.com/Dokploy/dokploy), [zero](https://github.com/Mail-0/Zero), [onejs](https://github.com/onejs/one) and many more.\n* We’re the recommended auth library by **Next.js, Nuxt, Astro**, and other top JS frameworks.\n* A thriving community with **5K+ members on Discord,** **7K+ followers on X**, and a growing ecosystem of adjacent libraries built by community members.\n* Featured by creators like Theo, Dev Ed and more\n\nTo take it further, and after seeing the pain points of our current users, we're building an **infrastructure layer** on top of the framework to extend the library with functionality we can't offer through the framework alone:\n\n* A comprehensive admin dashboard with user management & analytics\n* Bot/fraud/abuse detection\n* Global session storage\n* and more…\n\nTo be clear – we’re not building a third-party auth service. Our goal is to make rolling your own auth so ridiculously easy that you’ll never need one.\n\nGet started with the library here: [better-auth.com/docs/installation](http://better-auth.com/docs/installation)\n\nJoin the waitlist for infra: http://better-auth.build/\n\nStar the repo: https://github.com/better-auth/better-auth", "url": "https://www.ycombinator.com/launches/NUm-better-auth-the-authentication-framework-for-typescript", "votes": 2197, "created_at": "2025-05-13T13:36:07.545Z" } ] }, { "id": 30456, "name": "Tinfoil", "slug": "tinfoil", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1fb98a08722d6b4a90ad914611f5c3579c0f3558.png", "website": "https://tinfoil.sh", "all_locations": "San Francisco, CA, USA", "long_description": "Tinfoil makes it easy to make your AI workloads secure and provably private. You get the privacy of on-prem deployments, while running on the cloud. It's like end-to-end encrypted messaging but for your AI applications. \r\n\r\nWe’ve built a full-stack platform on top of the latest NVIDIA GPUs offering confidential computing capabilities, meaning that you don’t have to trade off performance for privacy. We integrate a suite of recent advances in secure hardware technologies, in particular NVIDIA’s confidential compute mode available on Hopper and Blackwell. When combined with Tinfoil’s software stack, companies can prove their security claims like \"we can't see and don’t log your queries.” Tinfoil guarantees that all data always stays private and cannot be accessed by anyone other than the end user -- not even by Tinfoil or the cloud provider it’s processed on. Everything can be made end-to-end encrypted and private with Tinfoil. \r\n\r\nThe founding team combines deep academic and industry experience in security and Internet protocols. Tanya was previously a systems engineer at Cloudflare, where she built Internet security protocols used by billions, and contributed to the Workers AI platform. Jules and Sacha hold PhDs from MIT, where they worked on secure hardware, cryptography, and privacy technologies. Jules has also worked at NVIDIA on their confidential computing team. Tinfoil was born from our personal frustration with the false choice between access to powerful AI and the massive data privacy implications of deeply integrated AI.\r\n\r\nAI is a universal tool that becomes part of our personal lives and business workflows. In the process, it needs access to all personal, private, and proprietary data. Right now, the only solutions are data processing agreements (i.e., \"pinky promises\"), band-aids like PII redaction that don't work in practice, or AI locally/on-prem, which doesn't scale. Tinfoil promises to unlock significantly deeper AI adoption and integrations by making it easy to obtain true privacy, just as TLS on the Internet enabled e-commerce to flourish by securing credit cards on the network.\r\n\r\nToday we offer several self-serve products: \r\n\r\n- A consumer-facing chatbot that keeps your chats end-to-end encrypted and provides zero-access inference with powerful open-source models like Kimi, Gemma, and GLM. You can try it out for free: https://chat.tinfoil.sh\r\n\r\n- A developer-friendly API that allows you to build AI applications where all user data is kept private and we as the inference provider cannot see any of the prompts. Our SDKs make sure that all relevant security measures are checked for you before even sending a single byte of data. Learn more:https://docs.tinfoil.sh \r\n\r\n- An advanced confidential computing platform we call Tinfoil Containers that allows you to secure any Docker application. We make it easy to deploy your own logic and applications inside secure enclaves and prove to the world what code is running inside. This enables attested workloads and publicly verifiable privacy policies for sensitive applications. Learn more: https://tinfoil.sh/containers ", "one_liner": "Encrypted AI with verifiable privacy", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1744845895, "tags": [ "Developer Tools", "Security", "Privacy", "Cloud Computing", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tinfoil", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/tinfoil.json", "year_founded": 2024, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/Tinfoil/", "x_url": "https://x.com/TinfoilAI", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/tinfoil", "github_url": "https://github.com/tinfoilsh", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1fb98a08722d6b4a90ad914611f5c3579c0f3558.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Diana Hu", "url": "https://www.ycombinator.com/people/diana-hu" }, "founders": [ { "user_id": 1678261, "full_name": "Tanya Verma", "title": "Founder/CEO", "founder_bio": "Co-founder @ Tinfoil | Systems, Cryptography and AI @ Cloudflare | CubeSats & CS @ UIUC", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/tanya-verma-130a23124/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/71e19f53dbd482777277fb5c1899f8ee0808a80f.jpg" }, { "user_id": 2554847, "full_name": "Jules Drean", "title": "Founder", "founder_bio": "Jules has an MIT PhD in secure hardware and confidential computing. He has industry experience working at Microsoft Research and NVIDIA on the technologies underlying Tinfoil. During his PhD, Jules has built secure enclaves from the ground up and studied how to attack and defend these systems against advance microarchitectural attacks. His work also looked at using trusted hardware to securely deploy advanced cryptographic primitives such as FHE and MPC.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jdrean", "x_url": "https://x.com/julesdrean", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6e2e2ad4734fda8e101f5d5cfb506c5944356a36.jpg" }, { "user_id": 2540941, "full_name": "Sacha Servan-Schreiber", "title": "Founder", "founder_bio": "Co-founder of Tinfoil | PhD at MIT in cryptography\n\nPersonal website: sachaservanschreiber.com ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sacha-servan-schreiber-308341305", "x_url": "https://x.com/sachaservan", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/33096fdaf7641b0498b900f6e2b99c126f850834.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 90590, "title": "Tinfoil: Verifiable Privacy for Cloud AI", "tagline": "We host models and AI workloads on the cloud while guaranteeing zero data access and retention", "body": "Sending your most sensitive or proprietary data to OpenAI et al?\n\nSick of deals getting stalled during enterprise or government security reviews?\n\nHate deploying on various configurations of on-prem infrastructure environments?\n\nSay less ✋\n\nWe’re [Tanya](https://www.linkedin.com/in/tanya-verma-130a23124/), [Jules](https://www.linkedin.com/in/jdrean/), [Sacha](https://www.linkedin.com/in/sacha-servan-schreiber-308341305/) and [Nate](https://www.linkedin.com/in/nate-sales/) from[ Tinfoil](https://tinfoil.sh/). What we’re building at Tinfoil sidesteps these concerns because we can host models while guaranteeing zero data access and retention.\n\nWe let you run powerful models like Llama, Deepseek R1 on cloud GPUs without you having to trust us – or the cloud provider – with your private data.\n\nSince AI performs better the more context you give it, we think solving AI privacy will unlock more valuable AI applications, just how TLS on the Internet enabled e-commerce to flourish knowing that your credit card info wouldn't be stolen by someone sniffing internet packets.\n\nhttps://youtu.be/wnwI22qT-QQ\n\n**Who we are**\n\nWe come from backgrounds in cryptography, security, and infrastructure. Jules did his PhD in trusted hardware and confidential computing at MIT, and worked with NVIDIA and Microsoft Research on the same, Sacha did his PhD in privacy-preserving cryptography at MIT, Nate worked on privacy tech like Tor, and I (Tanya) was on Cloudflare's cryptography team.\n\n We were unsatisfied with band-aid techniques like PII redaction (which is actually undesirable in some cases like AI personal assistants) or “pinky promise” security through legal contracts like DPAs. We wanted a real solution that replaced trust with provable security, and addressed our personal frustration with the false choice between exploring cutting-edge AI capabilities and personal privacy.\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXcicUJrVGkJrvHFqW2CaNEpGzvSfbjySaAR3k-Q8fbf56JtXg8xAJa5MJrYn-RIdJjFirmZ4khWay_UpV6WhnZKZEE9ApI5HX97jRKGw4mJOTblXrujRY_9xcCvGPL139p2QaKd1g?key=xi6EV3GMAYXvlmorGP948w)\n\n**The magic sauce**\n\nRunning models locally or on-prem is an option, but can be expensive and inconvenient. Fully Homomorphic Encryption (FHE) is not practical for LLM inference for the foreseeable future. The next best option is using secure enclaves: a secure environment on the chip that no other software running on the host machine can access. This lets us perform LLM inference in the cloud while being able to prove that no one, not even Tinfoil or the cloud provider, can access the data. And because these security mechanisms are implemented in hardware, there is minimal performance overhead.\n\nUp until recently, secure enclaves were only available on CPUs. But NVIDIA confidential computing recently added these hardware-based capabilities to their latest GPUs, making it possible to run GPU-based workloads in a secure enclave.\n\nBelieve it when you see it, but Tinfoil has negligible performance overhead despite the strong security & privacy guarantees.\n\n**Getting Started**\n\n**The best part is you can start using confidential AI chat and inference with Tinfoil today!**\n\n**Try our private chat: [tinfoil.sh/chat](http://tinfoil.sh/chat).**\n\n[**https://www.youtube.com/watch?v=FuFszT0_vXk**](https://www.youtube.com/watch?v=FuFszT0_vXk)\n\n**Build with our API:** Drop-in replacement for the OpenAI chat-completions API with Tinfoil\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXfBq_bx4bvZAzdB9BTzMg9KSE8UB2bKQO5uqfF5eoZkEWZFUtlbFnZpeD-m_PwaCVgUWftTt3QDLTW-r84u2dvUEGQ0ddbbQuq082ClI48l2cY4jWX-kWG1G6ZfwjNh8GN-EdAVJg?key=xi6EV3GMAYXvlmorGP948w)\n\nWe support several popular open source models like Deepseek R1 70B, Llama3.3 70B, Mistral 3.1 24B. Missing your favorite model? Just ask us to add it!\n\nTry out our free version running Llama3.3 70B in [Colab](https://colab.research.google.com/drive/1DhpUSmSWjxERnEo3U0qyAyApfcdIhvMv?usp=sharing).\n\nSee how Nate psychoanalyzes himself by sending all his iMessage chats to Tinfoil!\n\nhttps://www.loom.com/share/2381c02ba51043528c6d3bdf61270bc0?sid=9ea0e955-ae68-4ce4-9c86-d06cab18d25c\n\n**Deploy your AI Application**: Make your AI application enterprise-ready in a matter of minutes. Here's a demo of how you can use Tinfoil to run a deepfake detection service that could run securely on people's private videos:\n\nhttps://www.youtube.com/watch?v=_8hLmqoutyk\n\nWe encourage you to be skeptical of our privacy claims. Verifiability is our answer. It’s not just us _saying_ it’s private; the hardware and cryptography let _you_ check. Here’s a guide that walks you through the verification process:[ ](https://docs.tinfoil.sh/verify)https://docs.tinfoil.sh/verification/attestation-architecture.\n\n**The Ask**\n\nIf you think this sounds interesting, or too good to be true, contact us at [**founders@tinfoil.sh**](mailto:founders@tinfoil.sh)**!**\n\nWe’d love to hear from you, whether you’re a:\n\n* startup looking to sell into regulated industries\n* government agency that does everything on-prem but doesn’t trust your AI team to handle sensitive data\n* neocloud trying to secure enterprise customers in regulated industries that don’t migrate from the big clouds to you\n* company providing your employees dead-simple confidential LLM chat app\n\nYou can also learn more on our [**blog**](https://tinfoil.sh/blog), and subscribe to our [**LinkedIn**](https://www.linkedin.com/company/tinfoil/) and [**Twitter**](https://x.com/TinfoilAI) to follow updates!", "url": "https://www.ycombinator.com/launches/NZ8-tinfoil-verifiable-privacy-for-cloud-ai", "votes": 44, "created_at": "2025-05-21T14:22:18.121Z" } ] }, { "id": 30535, "name": "Cotool", "slug": "cotool", "former_names": [ "Holtzman" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c50bede6546396b2ac97015979b5f1979c3c8f35.png", "website": "https://cotool.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Cotool builds AI agents and the infrastructure around them to help security teams detect threats, investigate alerts, hunt for attacks, and respond.\r\n\r\nOur agents work across a team's security tools and data. They investigate alerts, write and tune Python detections, and turn threat intelligence into hunts and new coverage. Teams can customize agents around their workflows, inspect the evidence, edit detection logic, and bring humans in when judgment or approval matters.\r\n\r\nUnderneath the agents, Cotool provides log storage and search built for their workloads, with access to data where it already lives. The goal is to give security teams more capacity to defend their companies as their environments and workloads grow.\r\n\r\nTeams at Ramp, EliseAI, ClickHouse, Legora, and many more use Cotool.", "one_liner": "Security operations optimized for agents.", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747110142, "tags": [ "SaaS", "Compliance", "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/cotool", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2025/cotool.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/cotool-ai", "x_url": "https://x.com/cotoolai", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/c50bede6546396b2ac97015979b5f1979c3c8f35.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Pete Koomen", "url": "https://www.ycombinator.com/people/pete-koomen" }, "founders": [ { "user_id": 2254937, "full_name": "Max Pollard", "title": "Founder/CEO", "founder_bio": "Building AI agents and infrastructure to help security teams detect threats, investigate alerts, and respond. Co-founder and CEO of Cotool. San Francisco native.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/mmpollard/", "x_url": "https://x.com/maxpollard415", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/a3e5bb1453fdc94ab1ddc26b05036ed17d06b708.jpg" }, { "user_id": 2300356, "full_name": "Logan Carmody", "title": "Founder/CTO", "founder_bio": "building Cotool for security teams\n\nhmu if you're interested in chatting (opp|app)-sec, agents, trail running or cycling", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/logan-carmody/", "x_url": "https://x.com/endorseurgirl", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/05e1063a714ee172a41aecc6b0eb0b25ab451463.jpg" }, { "user_id": 2530428, "full_name": "Eddie Conk", "title": "Founder/CPO", "founder_bio": "Building Cotool to help security teams eliminate manual & repetitive tasks.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/eddieconk", "x_url": "https://x.com/eddieconkml", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/4fae79b207cffda00fa166e58974e0c57e47421d.jpg" } ], "jobs": [ { "id": 116142, "title": "Founding Product Engineer", "url": "https://www.ycombinator.com/companies/cotool/jobs/s3Bwr2M-founding-product-engineer", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$150K - $300K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 116143, "title": "Machine Learning Engineer — Applied AI & Agents", "url": "https://www.ycombinator.com/companies/cotool/jobs/WWZZsd5-machine-learning-engineer-applied-ai-agents", "location": "San Francisco, CA, US", "type": "Full-time", "role": "Engineering", "role_type": "Machine learning", "salary_range": "$150K - $300K", "equity_range": "", "experience": "Any (new grads ok)", "visa": "US citizen/visa only", "skills": [] }, { "id": 116240, "title": "Account Executive", "url": "https://www.ycombinator.com/companies/cotool/jobs/8quCd1f-account-executive", "location": "San Francisco, CA, US / Remote (New York, NY, US)", "type": "Full-time", "role": "Sales", "role_type": null, "salary_range": "$200K - $300K", "equity_range": "", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [] } ], "news": [ { "title": "Cotool raises a $7.4M seed led by a16z for agentic security", "url": "https://www.axios.com/pro/enterprise-software-deals/2026/03/05/cybersecurity-cotool-seed-a16z-enterprise-tech", "date": "Mar 05, 2026" } ], "launches": [ { "id": 90398, "title": "Cotool - Composable AI Agents for every Security Team", "tagline": "Reduce time spent on investigations and detection engineering by 90%", "body": "Hey everyone 👋\n\nWe're [Eddie](https://www.linkedin.com/in/eddieconk/), [Logan](https://www.linkedin.com/in/logan-carmody/), and [Max](https://www.linkedin.com/in/mmpollard/) – co-founders of [Cotool](https://cotool.ai).\n\n### TL;DR\n\nCotool uses AI to automate repetitive security workflows so teams can focus on threat hunting instead of manual tasks. Our early users have used the copilot and agents to cut investigation time by 90% and increase detection quality & coverage. Book a demo to learn how you can do the same!\\\nhttps://www.youtube.com/watch?v=GnyZuJGQ5C0\n\n### ❌ The Problem\n\nSecurity is complex, but the problems facing most teams are not:\n\n1. Alert Fatigue: Hours lost to false positives, while genuine threats slip by unnoticed.\n2. Context Switching: Investigations requiring constant toggling across 5-10 disconnected tools just to assemble basic context.\n3. Documentation Overhead: Teams spend more time as technical writers than security practitioners, bogged down in endless reporting.\n\nBefore founding Cotool, we collaborated with cutting-edge security teams including OpenAI, Coinbase, Figma, and DoorDash, experiencing these universal challenges firsthand.\n\nAdvancements in AI now offer an opportunity to truly reimagine this model; by building intuitive, collaborative tools that complement, not replace, security professionals.\n\n### 👷 Our Solution\n\nCotool provides a suite of Agents and an AI co-pilot designed specifically for security teams, streamlining workflows and reducing frustration through:\n\n* Seamless Investigations 🔍: A true AI co-pilot that works alongside security engineers during alert triage, investigations, and detection engineering; automatically gathering relevant context from across tools so they can focus on reasoning, not tool-hopping.\n* No-code Agents 🤖: Turn successful debugging flows into reusable agents, then refine their behavior with natural language prompts and connect them to any tools Cotool has access to, with granular permission controls.\n* Automated Documentation 📊: Generating thorough, accurate reports in seconds, freeing up valuable security practitioner time.\n\n![uploaded image](/media/?type=post&id=90398&key=user_uploads/2254937/d59dd9d1-e396-4f77-8dce-283a5e31c4ee)\n\n### 👨‍💻 The Team\n\nWe have worked together for years and co-founded Cotool in 2025.\n\n[Max Pollard](https://www.linkedin.com/in/mmpollard/) (CEO) led the forward deployed engineering team at Material, working directly with security teams to understand their workflows and pain points. He built the team up from one to 8 engineers and embedded himself with the world's best security programs. Previously he worked as a SE at Okta. He holds a BA in Business and Computer Science from UC Berkeley.\n\n[Eddie Conk](https://www.linkedin.com/in/eddieconk/) (CPO + Head of AI) spent the last 3 years at Material Security, leading the ML Engineering function. He developed and trained AI models for detecting Phishing emails at scale for some of the largest and most secure companies in the world. Previously he was an ML Engineer at Apple, and holds a BA in Computer Science from UC Berkeley.\n\n[Logan Carmody](https://www.linkedin.com/in/logan-carmody/) (CTO) was an early engineer and the technical lead for the Phishing Protection product at Material Security. He helped develop the proprietary language and compiler which Material’s threat researchers used to detect Phishing messages and Workspace breaches. He previously was a Staff SWE at LinkedIn working in infrastructure, and holds a BS in Computer Science and Philosophy from Duke University.\n\nTogether, we've spent years embedded with some of the world's best security teams. We're passionate about helping security teams focus on what they do best – hunting threats, not handling workflows.", "url": "https://www.ycombinator.com/launches/NW2-cotool-composable-ai-agents-for-every-security-team", "votes": 142, "created_at": "2025-05-14T16:47:35.959Z" } ] }, { "id": 30651, "name": "Alter", "slug": "alter", "former_names": [ "Alter AI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a30946452aaca1a7c8b4b8fefafd9807f194243.png", "website": "https://alterauth.com", "all_locations": "New York City, NY, USA", "long_description": "Alter is a zero-trust identity and access control platform purpose-built for AI agents. It wraps every tool call in strong authentication, fine-grained authorization, and real-time guardrails, so agents can move fast without breaking things.\r\n\r\nEach request is verified at the parameter level, authorized against granular policies, executed with least-privilege access, and fully audited in real time. Unsafe actions, whether it’s a rogue DROP TABLE or a payment above policy limits, are blocked before they touch production. Behind the scenes, Alter manages credentials, issuing ephemeral, scope-narrowed access for every interaction, then rotating or expiring it in seconds. The result: no long-lived secrets, no blind spots, and no surprises in audit.\r\n\r\nWith Alter, teams can move fast on AI agent initiatives while staying fully compliant with SOC 2, HIPAA, GDPR, and internal security standards. A CISO-ready dashboard delivers real-time visibility, detailed audit logs, and compliance-ready controls, removing silos, eliminating excessive permissions, and providing complete oversight of every agent workflow.", "one_liner": "Privileged Access Management for AI Agents", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1752476002, "tags": [ "AIOps", "Developer Tools", "DevSecOps", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/alter", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2025/alter.json", "year_founded": 2025, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/alterai-dev", "x_url": "https://x.com/alter_ai_labs", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a30946452aaca1a7c8b4b8fefafd9807f194243.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Jon Xu", "url": "https://www.ycombinator.com/people/jon-xu" }, "founders": [ { "user_id": 736424, "full_name": "Srikar Dandamuraju", "title": "Founder/CEO", "founder_bio": "Co-Founder & CEO of Alter (YC S25), a zero-trust identity and access control platform for AI agents. Former Platform Lead at Goldman Sachs, where I scaled GSAM’s post-trade infrastructure from single to multi-cluster and helped launch the GM Card. Before that, software engineer at Addepar and Clear Street.\n", "is_active": true, "linkedin_url": "https://linkedin.com/in/srikar-d-473390136", "x_url": "https://x.com/realsreeks", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cab46acc391807e07306cfd19067daaf2b55c346.jpg" }, { "user_id": 1363069, "full_name": "Kevan Dodhia", "title": "Founder/CTO", "founder_bio": "Co-founder and CTO of Alter (YC S25), a zero-trust identity and access control platform for AI agents. Previously technical co-founder of Compute.ai, where we built a compute engine 5x faster than EMR Spark and sold into highly regulated enterprises like LSEG. Compute.ai was acquired by Terizza in 2025.", "is_active": true, "linkedin_url": "https://linkedin.com/in/kevan-dodhia-760183129", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/ab81ff957341010eea7e1ee52d81382311c83b1c.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 93044, "title": "Alter – Identity and Access Control Platform To Secure Agents", "tagline": "Build secure, compliant agents without the fear of breaking production", "body": "### **TL;DR**\n\nAlter sits in the middle of every AI agent interaction, verifying identity and applying fine-grained RBAC & ABAC to check every parameter against policy. It instantly rejects dangerous actions and provides clear audit trails logging every request/response and decision.\\\n\\\nInterested? Learn more and request beta access at [alterai.dev](http://alterai.dev)\n\nDon’t want to read? Here is a video explaining what we do in a nutshell\n\n[Identity And Access Control Platform To Secure Agents | Alter (YC S25)](https://www.youtube.com/watch?v=UX0ACmMXpMg)\n\n**The Problem**\n\n**Dangerous:** Long-lived credentials and over-scoped service accounts mean a single leak can give an agent the keys to production letting it run destructive commands, exfiltrate sensitive data, or trigger costly transactions.\\\n**Opaque:** Scattered logs and siloed security make it impossible to trace “which agent did what, with which parameters” when something goes wrong, leaving teams blind in audits or incident response.\\\n**Slow:** Security reviews drag on for weeks because least-privilege and policy checks are hard to implement at scale, delaying projects and eroding velocity.\\\n**Overexposed:** Agents often get blanket root access, with no guardrails to stop prompt-injection or malicious payload swaps, so one bad input can become a catastrophic action.\\\n**The result:** enterprises face agents that _can_ and _do_ take unsafe actions in production, forcing teams to choose between unacceptable risk or shelving AI initiatives entirely.\\\n**\\\nOur Solution**\n\nAlter is the safest way to run AI agents in production without giving them blanket credentials or risking compliance breaches. From one central control layer, organizations can:\n\n* Host or connect to all their tools. We support MCP and Native tools (A2A coming soon)\n* Approve or deny any agent request in real time, with identity verification baked into every call.\n* Apply parameter-level RBAC & ABAC so dangerous actions like drop table commands in prod, during a freeze never reach production.\n* Instantly grant seconds-lived, scope-narrowed tokens so agents get only the access they need, only for that task.\n* Remove the need for long-lived API keys entirely, eliminating one of the biggest security liabilities.\n* See exactly what every agent did, when, and with what parameters, all in one CISO-ready dashboard.\n* Pass SOC 2, HIPAA, and GDPR audits without slowing down because compliance controls run automatically in the background.\n* Scale to any number of agents and tools without creating security silos or over-permissive access.\n\n### **The Team**\n\nWe are Srikar and Kevan.\\\n\\\nWe previously built enterprise-grade infrastructure at ComputeAI and Goldman Sachs, powering mission-critical systems for the London Stock Exchange and the Apple Card launch. Now we’re using that experience to make AI agents safe for production by giving them only the access they need and only for as long as they need it.\\\n**\\\nOur Ask**\n\nWe’re looking to connect with:\n\n* Engineering and security leaders running AI agents in production\n* Enterprises in regulated industries (finance, healthcare, government) with strict compliance requirements\n* Startups building AI-first products that need zero-trust access controls\n* Infosec teams looking to eliminate long-lived credentials and enforce least-privilege by default\n\nAs a bonus, we have also partnered with former OpenAI cybersecurity experts to provide you with ongoing red teaming, catching prompt-injection, data exfiltration, and other exploits before attackers can.\n\nIf you or someone you know is interested, please reach out to us at [**founders@alterai.dev**](mailto:founders@alterai.dev) or book a time to chat.", "url": "https://www.ycombinator.com/launches/OCi-alter-identity-and-access-control-platform-to-secure-agents", "votes": 30, "created_at": "2025-08-15T19:42:34.047Z" } ] }, { "id": 30665, "name": "Pangolin", "slug": "pangolin", "former_names": [ "Fossorial" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1ddd59479807f1000294d305ca0a4a84f2d40f97.png", "website": "https://pangolin.net", "all_locations": "New York City, NY, USA", "long_description": "Pangolin delivers seamless access and connectivity across your apps, infrastructure, and AI workloads while continuously enforcing enterprise-grade security. Built for agile IT teams, Pangolin eliminates the friction of bloated, legacy systems with an open platform that’s easier to deploy for your workforce.\r\n\r\nIt's open-source.", "one_liner": "Open networking and security for your workforce, AI agents, and infra", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1752801073, "tags": [ "Security", "Open Source", "Enterprise Software", "Networks" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/pangolin", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2025/pangolin.json", "year_founded": 2025, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/digpangolin", "x_url": "", "fb_url": null, "cb_url": null, "github_url": "https://github.com/fosrl/pangolin", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1ddd59479807f1000294d305ca0a4a84f2d40f97.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Andrew Miklas", "url": "https://www.ycombinator.com/people/andrew-miklas" }, "founders": [ { "user_id": 2927524, "full_name": "Milo Schwartz", "title": "Founder", "founder_bio": "I am the co-founder of Pangolin. Previously, I worked as a founding engineer on intelligent transportation systems and connectivity and monitoring solutions for public works infrastructure.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/miloaschwartz/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/cfe74fdf761f037c3a9639a4dab56e35fef407f6.jpg" }, { "user_id": 2804733, "full_name": "Owen Schwartz", "title": "Founder", "founder_bio": "I am the co-founder and CTO of Pangolin, an open source zero trust networking and infrastructure company. Before this, I worked as a founding engineer for 4 years on intelligent transportation systems and connectivity and monitoring solutions for public works. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/owenschwartz", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b2677e06efbf7db88c5738433369649c53316dc8.jpg" } ], "jobs": [ { "id": 82887, "title": "Founding Engineer - Full Stack", "url": "https://www.ycombinator.com/companies/pangolin/jobs/7DeBchl-founding-engineer-full-stack", "location": "New York, NY, US", "type": "Full-time", "role": "Engineering", "role_type": "Full stack", "salary_range": "$125K - $150K", "equity_range": "0.50% - 1.25%", "experience": "3+ years", "visa": "US citizen/visa only", "skills": [ "Amazon Web Services (AWS)", "Android", "Express", "Git", "Go", "iOS", "Kubernetes", "PostgreSQL", "TypeScript", "Docker", "Next.js" ] } ], "news": [], "launches": [ { "id": 92267, "title": "Pangolin – Open-source secure gateway to private networks", "tagline": "Pangolin tunnels your services to the internet so you can access anything from anywhere.", "body": "**TL;DR: [Pangolin](https://digpangolin.com) is an [open-source](https://github.com/fosrl/pangolin) cloud and self-hostable alternative to Cloudflare Tunnels, Zscaler ZPA, and Ngrok. Pangolin provides a simple way to securely expose applications on private networks with identity-aware access control and high availability.**\n\nWe’ve seen incredible early traction since we launched 5 months ago: **12,600+ GitHub stars, 140,000+ installs, 2,700+ Discord members**. \n\nhttps://youtu.be/0nv91PgCm9M\n\n\"Pangolin isn't just a fantastically easy-to-configure VPN and reverse proxy; it's a revelation in self-hosting simplicity.\" XDA Developers\n\n**The problem:**\n\nProviding users with secure access to internal tools and infrastructure is cumbersome for both end users and administrators. They're forced to manage complex VPN clients, servers, and network configurations that create friction and operational overhead. Traditional and mesh VPN approaches require layered ACL management to control which users can access specific resources, turning simple access requests into complex network engineering problems.\n\n**Our solution:**\n\nDrop in the Pangolin connector in your network, and:\n\n* **Expose anything to the internet:** Instantly create a secure tunnel with your domain and SSL to internal dashboards like Grafana, or any other services on your private network and access via web browsers.\n* **Manage access control with ease:** Grant access to your resources with user and role-based permissions, PIN codes, temporary share links, or email OTPs. Bring your existing users by integrating an external identity provider.\n* **Own your infrastructure:** Self-host your own Pangolin Nodes, so data flows through your servers, and our cloud will handle coordination and failover for out-of-the-box high availability.\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXfMGfOAnChfvZ2vFva0IbL-s3dj1O50IP8cfgGf7h9IDz3ViH_tHbtHEwr_bdecGPerQPY-HSRMtoRLmJew9IlaQqpQQY_1JJBluOAEKCqsWjvusZMgy_9Y5FPVvjo68nGNaZ0Uig?key=2GXukewhPJ8smnttAaub3w)\n\n\"A self-hosted version of Cloudflare Tunnels on your terms. By your terms, I mean on the infrastructure of your choice.\" Lawrence Systems\n\n**Deployment options:**\n\n* **Enterprise:** Self-host the entire system on-premises with complete control over all system components.\n* **Hybrid:** Self-host Pangolin Nodes on internal infrastructure while leveraging our cloud service for automatic failover coordination.\n* **Cloud:** Fully managed service where organizations only run network connectors to expose resources.\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXc8cH83Sxqj5M57XuqQm_sofqW-Qn1sfTvTEsaTg4xYVAfRh_33XNMI8QDJrqibWqIQNVLLFHBob1vASk5ZnaX8KF5nZfY2eXYOwMp-n9UzOzyEHQUiocK89KT8izCeFG1CaEJ5xA?key=2GXukewhPJ8smnttAaub3w)\n\n**Get started:**\n\n* Website:[ https://digpangolin.com](https://digpangolin.com)\n* GitHub: https://github.com/fosrl/pangolin\n\n\"Its streamlined deployment has left janky WireGuard configurations and Cloudflare tunnels in its dust.\" [selfh.st](http://selfh.st)\n\n![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXdXJ0wOsKzIrKFRWntnI4mgQRM3dcsgCMe7-t3poZP4A56J7SxiqqTdPU85bzNvvTXCO5Nuu7hRM2fXyvHrAbn55MzAd2N0J374OuDMoY8PdFgfa9jg9f2eRBgYzQqfCl-Srx3t?key=2GXukewhPJ8smnttAaub3w)\n\nWe are Owen and Milo Schwartz (brothers) who previously worked together as founding engineers at a successful smart mobility startup, working on connectivity and automation solutions for public infrastructure. We are passionate about building the next generation of simple networking tools.\n\n“I’m addicted to Pangolin” [u/ParadoxHollow](https://www.reddit.com/r/selfhosted/comments/1kqrwev/im_addicted_to_pangolin/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button)\n\n**The ask:**\n\nWe’d love for the YC community to try out [Pangolin Cloud](https://pangolin.fossorial.io/auth/signup) and give us your feedback!\n\nWe are also looking for any warm intros to people who might be interested in the product - particularly businesses with on prem applications or field equipment in the IoT space.\n\n**Contact:**\n\n[founders@fossorial.io](mailto:founders@fossorial.io)", "url": "https://www.ycombinator.com/launches/O0B-pangolin-open-source-secure-gateway-to-private-networks", "votes": 85, "created_at": "2025-07-18T07:08:50.979Z" } ] }, { "id": 30702, "name": "TwentyTwo", "slug": "twentytwo", "former_names": [ "Muon", "Mohi" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5be6b2304553a4bca9bfa1f2953ae02638a8d430.png", "website": "https://twentytwo.bio/", "all_locations": "New York City, NY, USA", "long_description": "AI is making biology easy to engineer. Life-saving drugs and therapies are accelerating, but so is the ability for bad actors to create a pandemic. TwentyTwo is working on the defensive stack to prevent the next pandemic.", "one_liner": "AI infrastructure for biosecurity", "team_size": 3, "industry": "Healthcare", "subindustry": "Healthcare -> Industrial Bio", "launched_at": 1753262535, "tags": [ "Synthetic Biology", "Biotech", "Compliance", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "Healthcare", "Industrial Bio" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/twentytwo", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2025/twentytwo.json", "year_founded": 2025, "city": "New York City", "country": "US", "linkedin_url": "https://www.linkedin.com/company/mohi-inc", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/5be6b2304553a4bca9bfa1f2953ae02638a8d430.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Tyler Bosmeny", "url": "https://www.ycombinator.com/people/tyler-bosmeny" }, "founders": [ { "user_id": 1970485, "full_name": "Evan Seeyave", "title": "Founder/CEO", "founder_bio": "kurzgesagt and mango enjoyer", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/evanseeyave", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8d3154cafebe2dd909cd3639d2d5f15c0758ee9e.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 92831, "title": "Mohi: Debugging assistant for AI agents", "tagline": "Don’t know why your agent messed up? Neither do we. But Mohi will show you exactly where your agents went wrong - and why.", "body": "Hey folks! 👋\n\nWe’re building Mohi, a debugging assistant for AI agents. If you've ever spent hours scrolling through 500+ LLM calls asking “what the hell happened?” — this is for you.\n\nhttps://youtu.be/UzQZlUdZ59s\n\n### The Problem\n\nAgents are complicated — tools, memory, web search, nested loops, and hallucinations. And when something breaks, it’s like untangling spaghetti. You’re stuck scrolling through flat logs, guessing which of the _35_ steps silently failed.\n\nIt's slow, brittle, and makes you second-guess your whole stack.\n\n### **The Fix**\n\nMohi makes debugging agents **_fast_**, and **_actually usable_**.\n\nJust tag key steps in your agent with our lightweight SDK (think: tool calls, memory access, context switches, decision logics), and we build a clean visual graph of what happened under the hood. Then we go a step further and show you:\n\n* where your agent last succeeded\n* where it went off the rails (hallucinated, failed tool, wrong branch)\n* and how to re-run broken steps with new inputs\n\nIt’s not just observability. It's a diagnosis.\n\n### **Who We Are**\n\nPreviously, Hao worked on AI and distributed systems observability at AWS, and Evan worked on automated testing at Google and AI evaluations at SecureBio. We met at MIT and worked on a bunch of projects together, eventually building agents ourselves and seeing firsthand how painful debugging can be — so we built Mohi to fix it.\n\n![uploaded image](/media/?type=post&id=92831&key=user_uploads/1675765/aa1f6344-8ce0-4ad5-a5ba-0e203412791a)\n\n### **Our Ask**\n\nIf you’re building complex agents — we’d love to chat!\n\n→[ https://trymohi.com/](https://trymohi.com/)\n\n→ [founders@trymohi.com](mailto:founders@trymohi.com)", "url": "https://www.ycombinator.com/launches/O9H-mohi-debugging-assistant-for-ai-agents", "votes": 4, "created_at": "2026-02-07T00:21:30.007Z" } ] }, { "id": 30875, "name": "Veria Labs", "slug": "veria-labs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4a840ecd92ea1ebab3e7fa406ce9389683fe9208.png", "website": "https://verialabs.com", "all_locations": "San Francisco, CA, USA", "long_description": "Veria Labs is developing AI agents that hack better than the best human hackers. Founded by members of the #1 US competitive hacking team, we've already found critical bugs in AI tools, operating systems, fintech and billion dollar crypto exchanges. \r\n\r\nNow we're scaling that expertise through AI-native security tooling that operates faster than human researchers while finding deeper, more complex vulnerabilities that traditional tools miss.", "one_liner": "Continuous AI pentesting that finds and fixes vulnerabilities", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1758644249, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/veria-labs", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2025/veria-labs.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/verialabs/", "x_url": "https://twitter.com/verialabs", "fb_url": null, "cb_url": null, "github_url": "https://github.com/verialabs", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/4a840ecd92ea1ebab3e7fa406ce9389683fe9208.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Tom Blomfield", "url": "https://www.ycombinator.com/people/tom-blomfield" }, "founders": [ { "user_id": 2964558, "full_name": "Cayden Liao", "title": "Founder", "founder_bio": "I've previously done work in the Web3 security space writing fuzzers for crypto and zero knowledge protocols. NCAA varsity swimmer and part of the #1 CTF (competitive hacking) team in the US. Prevented the largest hack in crypto history $94B.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/cayden-liao-6b018a272/", "x_url": "https://x.com/Cayden_Liao", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/e0738bc3df42b0c5f6d82f610337031d0e8e310b.jpg" }, { "user_id": 948094, "full_name": "Jayden Sarveshkumar", "title": "Founder", "founder_bio": "working on the future of security @ Veria Labs. web hacking @ .;,;. (#1 US competitive hacking team). ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/jayden-s/", "x_url": "https://x.com/0jayden_", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f58ac057077848126e2af32cae2e0ade1d46e13c.jpg" }, { "user_id": 2411026, "full_name": "Stephen Xu", "title": "Founder", "founder_bio": "CEO & Co-Founder @ Veria Labs\n\nPreviously doing Offensive Security @ TikTok, and play on the #1 CTF (competitive hacking) team in the US. Also used to do computational physics research at some point.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/stuxf", "x_url": "https://x.com/stuxfdev", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/0250381cdafcf8e7303136fa3900d8298e020161.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 94260, "title": "Veria Labs: AI agents that pentest your code continuously", "tagline": "Automated penetration testing for modern development teams", "body": "👋Hi all, we’re Stephen, Cayden and Jayden from [Veria Labs](https://verialabs.com)!\n\n## TL;DR\n\n* Most companies pentest only 1-2x per year, but high-performing teams deploy multiple times per day \n* We're building AI agents that continuously find vulnerabilities in your application\n* **Our ask:** If you're at a fintech, healthcare, or crypto company that wants to be secure while moving fast, let’s talk: \n\n---\n\n## The Problem\n\nYou ship code constantly. You test for security once a year, if at all.\n\nThis isn't a startup problem. It's structural. PCI DSS mandates annual pentests. HIPAA requires regular security assessments. Crypto projects get audited before launch. But after that initial test, your codebase evolves, you add features, you refactor, and there's no continuous security validation.\n\nTraditional pentesting is **fundamentally broken** for modern development:\n\n**It's too slow.** Results take weeks to deliver. By the time you get the report, your codebase has changed 50+ times.\n\n**It's too expensive.** $15,000-$30,000+ per engagement. You can't afford to test continuously at these prices, but you also can't afford _not_ to be secure.\n\n**It has terrible coverage.** Pentesters scope to 5-10 application features because that's all they can audit in two weeks. The rest of your codebase gets ignored. Your background jobs, admin panels, internal APIs are all potential attack vectors that never get looked at.\n\n**It's too shallow.** Even within their limited scope, human pentesters are constrained by time. They get 5-10 days, bill $250-300/hour, and move on to the next client. They find the obvious vulnerabilities: SQL injection, XSS, broken auth. But complex, multi-step exploits that require deep exploration of your business logic get missed because there's simply not enough time.\n\nMeanwhile, 1 in 5 companies don't test their software for security vulnerabilities at all.\n\n## Our Solution\n\nWe're building AI agents that run continuously on your codebase and send you actionable results every Monday morning.\n\n**Why we're different from traditional pentesting:**\n\nOur agents aren't constrained by human hours or budgets. We can test exhaustively: every code path, every edge case, every possible attack chain. We're not just faster and cheaper. We find more bugs.\n\n**Why we're different from SAST tools (Semgrep, Snyk):**\n\nStatic analysis tools flag potential issues but can't exploit them. Our LLM-based agents:\n\n* Actually exploit vulnerabilities to prove they're real (no false positives)\n* Understand and adapts to your business logic and data flows\n* Learn your codebase architecture and conventions, which means dramatically fewer false positives\n* Chain together low-severity findings into high-impact exploits\n\n## About Us\n\nWe're members of the [#1 competitive hacking (CTF) team](https://ctf.gg/contests) in the United States.\n\nBetween us, we've found critical vulnerabilities in AI tools, operating systems, fintech apps, and billion-dollar crypto exchanges. The future of security testing is automated, and we're building it.\n\n## What We’re Looking For\n\nIf you:\n\n* Deploy code daily but test for security sporadically (or never)\n* Are spending $30K+ per year on pentests that are outdated within weeks\n* Need continuous security without hiring an entire red team\n* Want to find complex vulnerabilities before attackers do\n\nLet's talk: \n\nWe're especially interested in working with **fintech, healthcare, and crypto companies** (where the stakes are highest), but if you're facing similar challenges in other industries, we'd love to hear from you too.\n\n![uploaded image](/media/?type=post&id=94260&key=user_uploads/2411026/8021be6a-59f2-4d9c-9c43-ec32d957299e)\n\n", "url": "https://www.ycombinator.com/launches/OWK-veria-labs-ai-agents-that-pentest-your-code-continuously", "votes": 16, "created_at": "2025-10-01T13:55:13.126Z" } ] }, { "id": 30900, "name": "LogosGuard", "slug": "logosguard", "former_names": [ "Logos AI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/028016b5518081901c8e2d5a5483ea0f04a88946.png", "website": "https://logosguard.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Use AI tools like ChatGPT, Claude, and Gemini safely without leaking sensitive data. LogosGuard redacts your private information before the prompt ever leaves your device.", "one_liner": "The sensitive data redaction layer for AI", "team_size": 2, "industry": "B2B", "subindustry": "B2B", "launched_at": 1762810607, "tags": [ "B2B", "Compliance", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/logosguard", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2025/logosguard.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/logosguard/", "x_url": "https://x.com/logos_guard", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/028016b5518081901c8e2d5a5483ea0f04a88946.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "David Lieb", "url": "https://www.ycombinator.com/people/david-lieb" }, "founders": [ { "user_id": 1360462, "full_name": "Abel John", "title": "Founder/CTO", "founder_bio": "Cofounder at Logos Guard", "is_active": true, "linkedin_url": "https://linkedin.com/in/abel-john-85a7551b6", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2676fb12a3376b0738c096529889dfbc776c9310.jpg" }, { "user_id": 1963504, "full_name": "Sukrut Oak", "title": "Founder/CPO", "founder_bio": "Cofounder at LogosGuard", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sukrut-oak/", "x_url": "https://x.com/sukrut_oak", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/00a28be2c7282668c2d86a62afa38131143eef20.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 95396, "title": "LogosGuard: The risk management software for enterprises adopting AI", "tagline": "Evaluate your AI risk, responsibly.", "body": "Hey everyone! We’re[ Sukrut Oak](https://www.linkedin.com/in/sukrut-oak/) and [Abel John](https://linkedin.com/in/abel-john-85a7551b6) from[ LogosGuard](https://logosguard.com/).\n\n**TL;DR**\n\nEnterprises are racing to adopt AI, but often don't have the right controls in place or know how to verify vendors are compliant. LogosGuard turns AI policies into executable controls, stress-tests your AI products, and continuously monitors changes, giving enterprises the confidence to scale AI responsibly.\n\n**The Problem**\n\nSOC-2 wasn’t designed for AI. Without the right controls in place, enterprises are having to rely on outdated standards or navigate a fragmented landscape of nascent AI frameworks (think NIST AI RMF, ISO 42001, and CSA AICM). The result: slow approvals for new projects and vendors, inconsistent and insufficient reviews, and no reliable way to prove an AI product still meets policy after it changes.\n\n**The Solution**\n\n**LogosGuard** is an AI governance and assessment platform that fits into your existing procurement and compliance systems, and produces reports your teams can act on:\n\n* **Build your AI Controls baseline.** We translate leading controls frameworks, including NIST AI RMF and ISO/IEC 42001, and your internal policy, into a clear set of AI controls. We help you understand and choose controls tailored to your industry, and keep up to date with the continuously changing state and federal regulations.\n* **Stress test the AI features.** We run targeted evaluations for prompt-injection, harmful guidance, PII mishandling, access-control gaps, transparency failures, robustness, and more.\n* **Continuous monitoring.** When vendors update models and features, we re-run the key tests continuously and alert you if risk rises over time.\n* **Painless reporting.** We provide executive summaries, auditor-ready evidence, and a searchable record of decisions so compliance, information security, and leadership see the same truth.\n\n**Impact**\n\n* Vendor risk reviews in days, not months\n* Maintain a robust set of AI controls, with regulatory compliance informing policy updates\n* Catch drift before incidents occur with continuous monitoring\n\n**Why us**\n\n* **Sukrut Oak** — Stanford BS/MS (CS, AI); 3+ years AI safety and benchmarking research; ex-AI engineering at Apple’s Health team; ex-SpaceX.\n* **Abel John** — Stanford BS/MS (CS, AI); ex-AI engineering at Apple; ex-MTS at Accordance (AI for tax accounting - backed by Khosla, Sequoia, and more)\n\n**Our Ask**\n\n* Warm intros to CISOs, CIOs, or anyone who signs off on new AI deployments.\n\nWe’d love to chat. Reach out to us at [founders@logosguard.com](mailto:founders@logosguard.com) or find a time on[ our calendar](https://calendly.com/d/cw55-rnb-3w8/logos-guard-demo)! If you’re in SF, coffee is on us:)\n\n[Launch Video](https://www.youtube.com/watch?v=UZL54wns8nI)", "url": "https://www.ycombinator.com/launches/Ooe-logosguard-the-risk-management-software-for-enterprises-adopting-ai", "votes": 231, "created_at": "2025-11-11T00:36:13.063Z" } ] }, { "id": 31506, "name": "Tolmo", "slug": "tolmo", "former_names": [ "Droid Factory" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8b1fe60a254c3f83e0d218298337418aad753714.png", "website": "https://www.tolmo.com", "all_locations": "San Francisco, CA, USA", "long_description": "Tolmo is an agent-driven security platform that secures every layer — code, CI, cloud applications at the speed of AI changes.\r\n\r\nCodebases are growing faster than ever, at a rate humans can’t keep up with. Tolmo deploys fleets of AI security agents on a live production knowledge graph that connects data from cloud services, containers, databases, and third-party providers (Observability, Security, etc.).\r\n\r\nTolmo agents triage, verify impact, and remediate security issues autonomously, escalating to humans only when truly necessary.", "one_liner": "Tolmo is the AI security platform that secures every layer of cloud…", "team_size": 12, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1781726326, "tags": [ "DevSecOps", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/tolmo", "api": "https://devasheeshg.github.io/yc-api/batches/spring-2026/tolmo.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tolmohq/", "x_url": "https://x.com/tolmhq", "fb_url": null, "cb_url": "https://www.crunchbase.com/organization/tolmo", "github_url": "https://github.com/tolmohq", "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8b1fe60a254c3f83e0d218298337418aad753714.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Nicolas Dessaigne", "url": "https://www.ycombinator.com/people/nicolas-dessaigne" }, "founders": [ { "user_id": 207041, "full_name": "Pierre Betouin", "title": "Founder/CEO", "founder_bio": "Pierre was leading security products at Datadog following the acquisition of Sqreen (W18) - a cybersecurity company providing a comprehensive security monitoring for cloud and web apps protecting over 800 customers in production.\n\nPierre previously spent 9 years at Apple, where he led the team in charge of security assessments for the Internet Services department, hacking products and designing protection.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/pbetouin/", "x_url": "https://twitter.com/pbetouin", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/d773913accb3577e364f48d8247e9689aceedade.jpg" }, { "user_id": 3476457, "full_name": "Vladimir de Turckheim", "title": "Founder", "founder_bio": "Vladimir (Vlad) was a Staff Engineer working on security products at Datadog. He joined following the acquisition of Sqreen (W18) where he was employee #4 in charge of Node.js instrumentation. He was a Node.js core collaborator for five years and has setup the whole Node.js security program.\n\nHe is also the founder of Heal.dev.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/vladimirdeturckheim/", "x_url": "https://x.com/poledesfetes", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/25d9ce09a2a3f07ad97a622bed9a661b3710e706.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 103900, "title": "Tolmo: Secure your software shipped at Claude Code pace", "tagline": "Tolmo is your always-on fleet of security agents", "body": "Hi everyone! I'm Vlad, co-founder of **Tolmo**, along with Jean-Baptiste Aviat, Pierre Betouin, and Arnaud Breton.\n\n![uploaded image](/media/?type=post&id=103900&key=user_uploads/3476457/8df11a35-45e9-4f77-95d6-0c8bede1dc1a)\n\n\n**Tolmo is an agent-native security platform.** We deploy fleets of AI security agents that continuously identify, triage, and remediate security issues across every layer: code, CI, cloud, and even spec documents. All of that at the speed AI ships software.\n\n\n\n**Why now?** Production environments are growing faster than humans can review and secure them: 200+ PRs/engineer/week is no longer an outlier. The old security playbook (manual review, ticket queues, alert triage) is fundamentally broken at that pace. At the same time, attackers are using AI agents to break into systems faster than ever, and offensive tooling is being created faster than defensive tooling. Attacking infrastructure has never been cheaper or easier.\n\n**How it works:** Our agents reason over a live production knowledge graph connecting your cloud services, containers, databases, and third-party providers. They identify, triage, and remediate autonomously. Escalating to a human only when truly necessary.\n\n**Who we are:** We're the team behind Datadog's security products and Sqreen (YC W18). We secured thousands of organizations at Datadog, and we've seen firsthand that existing solutions won't keep up with the security challenges introduced by coding agents.\n\n**Join the waitlist: [https://app.tolmo.com/waitlist](https://app.tolmo.com/waitlist)**", "url": "https://www.ycombinator.com/launches/R1o-tolmo-secure-your-software-shipped-at-claude-code-pace", "votes": 7, "created_at": "2026-06-24T15:45:04.646Z" } ] }, { "id": 31537, "name": "Trident", "slug": "trident", "former_names": [ "Esprit" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/537de46d97dcdac9c07b330a6a1a4b2ab0583b7b.png", "website": "https://tridentsecurity.io/", "all_locations": "San Francisco, CA, USA", "long_description": "Trident is the standard for modern day security. its an agentic pentester that chains vulnerabilities together like a real attacker mapping verified attack paths across AWS, Azure, GCP, web apps, and APIs. Run AI attacks and get fixes.\r\n\r\nGet started today: tridentsecurity.io", "one_liner": "Autonomous offensive security agents. The best defense is offense", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1785361922, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/trident", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/trident.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/tridentsecure", "x_url": "https://x.com/TridentSecures", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/537de46d97dcdac9c07b330a6a1a4b2ab0583b7b.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Harshita Arora", "url": "https://www.ycombinator.com/people/harshita-arora" }, "founders": [ { "user_id": 2758911, "full_name": "Junaid Mahmood", "title": "Founder/CEO", "founder_bio": "Co-founder @Trident, CTF player & bounty hunter. Taught coding at 16 ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/junaidmahmood-/", "x_url": "https://x.com/whosjunaidd", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/6d60dad6ab24eccee2fa15fe372ef5e8b202fc97.jpg" }, { "user_id": 2702103, "full_name": "Dekai Li", "title": "Founder/CTO", "founder_bio": "Co-founder @Trident, CS @University of Waterloo. \n", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/li-dekai-8287332a6/", "x_url": "https://x.com/li_dekaii", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/5fbb11cf2687c50bb8c031cace4f6fbb674856c8.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 110468, "title": "Trident: Secure your company 24/7", "tagline": "My app keeps getting hacked what can I do?", "body": "\n![uploaded image](/media/?type=post&id=110468&key=user_uploads/2758911/13ca2ba5-d205-4afd-8d7c-ea92334d7136)\n\n**TL;DR**: Traditional pentesting is a thing of the past. Attackers use AI now, so we're making it fair. Trident safely and continuously attacks your own apps and cloud so you know what to fix before they do.\n\n![uploaded image](/media/?type=post&id=110468&key=user_uploads/2758911/a4001049-62a7-4856-b611-2f692dc8c3b7)\n\nToday we're launching Trident.\n\nAI changed the game on both sides. Your team ships every single hour; attackers scan and exploit at a scale no human team can match. Meanwhile, security is still sold as an annual pentest: a PDF about a version of your product that no longer exists.\n\nThat's not a fair fight. So we built Trident to make it even.\n\nTrident safely runs attacks on your own web apps, APIs, and cloud (AWS, GCP, Azure, Kubernetes), continuously. Every finding comes as an attack path that actually reaches your data, with proof of exploit and a proper fix. You know what to fix before someone else finds it.\\\n\\\n[https://drive.google.com/file/d/1qIn0j8LgI3XijoqyE0HBT4G66hBdyCAy](https://drive.google.com/file/d/1qIn0j8LgI3XijoqyE0HBT4G66hBdyCAy/view?usp=sharing)\n\nSince our batch started, we've found critical vulns in a ton of startups, bug bounty prorgams and 3 unicorns:\n\n* API keys hardcoded in desktop app binaries (yes, that was us on Twitter)\n* Publicly exposed S3 buckets and Azure Blob containers\n* Exploitable flaws in live DeFi protocols\n\nAll responsibly disclosed and fixed before anyone else got there. And none of these were careless teams, just great ones moving fast.\n\n![uploaded image](/media/?type=post&id=110468&key=user_uploads/2758911/bdb88f72-d6d1-44f1-a2d8-4aa555bfa399)\n\nCan't afford a dedicated security team yet? That's exactly who we built this for.\n\nYour job is to ship. Ours is to secure.", "url": "https://www.ycombinator.com/launches/Sjk-trident-secure-your-company-24-7", "votes": 14, "created_at": "2026-08-13T22:30:00.463Z" } ] }, { "id": 31575, "name": "Fire Wallet", "slug": "fire-wallet", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b24edcd9c30661e9d4cf818ec14536902f2b2c41.png", "website": "https://fire.co", "all_locations": "San Francisco, CA, USA", "long_description": "🔥FIRE WALLET 🔥\r\n\r\nhttps://www.youtube.com/watch?v=JeXDDegwhgA\r\n\r\nTL;DR: Fire Wallet is a fast, end-to-end encrypted, non-custodial stablecoin wallet with built-in payment processing and fiat on/off ramps, built by the team that created MobileCoin, the cryptocurrency inside Signal.\r\n\r\nHey Bookface! We're Josh, Michael, and Manny and we're building Fire Wallet!\r\n\r\n🔥Why we built this\r\n\r\nMost wallets and payment processors don’t work FOR you. They're slow, route your payments in the way that earns them the most, and they leak your financial life to anyone asking. Worse: every single one hold the keys to your money.\r\n\r\nWe believe your financial tools should act in your interest and, frankly, that your money should be yours.\r\n\r\n 🔥What Fire does\r\n\r\nMulti-chain, non-custodial, end-to-end encrypted wallet. \r\nYour keys, your money, your assets: you are in full control of your funds at all times. \r\nLeast Cost Routing. Every swap and payment takes the cheapest path, not the one that pays a middleman the most.\r\nSelf-sovereign payment processing. Send an invoice straight from the wallet. Get paid from your web checkout. No middleman.\r\nEasy fiat on/off ramps. Move stablecoins to USD and back without the pain.\r\nBuilt for agentic commerce. Manage per-agent sub-wallets for agentic workflows.\r\nEncrypted by default. Protecting you from bad actors and surveillance capitalism.\r\n\r\n🔥Early traction\r\n\r\nSigned our first major LOI with @Trustboop (founded by Justice Laub of Drone Racing League and Rob Rhinehart of Soylent).\r\n\r\nOnboarding our first enterprise customer in ecommerce packaging and marketing, doing about $1.5M/month in volume. They've connected us to 10 more companies in the same vertical at similar volume, roughly a $100M/yr GMV opportunity.\r\n\r\n🔥Why us\r\n\r\nJosh and Manuel led the creation of MobileCoin, the cryptocurrency in Signal Messenger: $100M+ raised, $1.16B peak valuation, $4B+ peak coin market cap, acquired in 2026.\r\n\r\nMichael runs product and design. He's an internationally exhibited artist with two published art books, and he builds sick products.\r\n\r\nManuel runs operations and orchestrates systems that actually work at scale.\r\n\r\n🔥Asks\r\n\r\nIntros to businesses moving $1M+/month in payments, especially cross-border, ecommerce, and DTC, who want lower fees and more control over their funds.\r\n\r\nStrategic partners in fintech and payments interested in integrating our infrastructure.\r\nTell us what's broken. Reply here or email founders@fire.co.\r\n\r\nWe're looking for our first 100 customers. If that's you or someone you know, we'd love to talk.", "one_liner": "Fire Wallet is a privacy-first crypto wallet designed to just work,…", "team_size": 3, "industry": "Fintech", "subindustry": "Fintech", "launched_at": 1792046296, "tags": [ "FinOps", "Fintech", "Security", "Cryptocurrency" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2026", "status": "Active", "industries": [ "Fintech" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/fire-wallet", "api": "https://devasheeshg.github.io/yc-api/batches/fall-2026/fire-wallet.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/b24edcd9c30661e9d4cf818ec14536902f2b2c41.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Garry Tan", "url": "https://www.ycombinator.com/people/garry-tan" }, "founders": [], "jobs": [], "news": [], "launches": [] }, { "id": 32138, "name": "NebuSec", "slug": "nebusec", "former_names": [ "Nebula Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c60d9cd12e8c1b315e07ee45555c24b5f74d5654.png", "website": "https://nebusec.ai", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "NebuSec is founded by the world’s #1 hacking team.\r\n\r\nWe were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Black Hat speakers, and PhD in cybersecurity. We have won $400K in bug bounties by exploiting the Linux kernel and Chrome browser.\r\n\r\n“Audited by NebuSec” is a mark of serious security credibility: a signal to customers, investors, and partners that your product has been reviewed by the world’s best hackers.", "one_liner": "Autonomous AI defense system for cyber attack", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1783007241, "tags": [ "B2B", "Security", "Cybersecurity", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/nebusec", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/nebusec.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/125323912", "x_url": "https://x.com/nebusecurity", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/c60d9cd12e8c1b315e07ee45555c24b5f74d5654.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Ankit Gupta", "url": "https://www.ycombinator.com/people/ankit-gupta" }, "founders": [ { "user_id": 1626290, "full_name": "Eten Zou", "title": "Founder/CEO", "founder_bio": "CEO & Founder @ Nebula Security (YC S26). PhD in Cybersecurity.\nFocus on automated vulnerability research.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/xiaochen-zou-phd-29540b168", "x_url": "https://x.com/etenal7", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/57bbc9606ef7588538536a132b2206290ce936f1.jpg" }, { "user_id": 3676420, "full_name": "Yuan Tan", "title": "Founder/CTO", "founder_bio": "Founder at Nebula Security (YC S26). Black Hat USA speaker. PhD dropout in System Security with experience in DARPA-funded fundamental research on program analysis.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/yuantan1/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/da759eb576807bd53522ad4e38bb45e06f4c0862.jpg" }, { "user_id": 3676409, "full_name": "Frank Wu", "title": "Founder/COO", "founder_bio": "Founder of Nebula Security (YC S26). Black Hat USA speaker and DEF CON finalist with r3kapig, the world's No. 1 hacking team in 2025. He led the DARPA AIxCC automated program repair team and shipped end-to-end RCE/LPE exploit chains on Chrome, Firefox, Linux, and Android. He pwned Google's kernelCTF multiple times with zero-days, and has published research at top academic venues such as USENIX Security and NDSS. Ph.D. dropout.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/yifan-wu-cs", "x_url": "https://x.com/FrankOverF1ow", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/54eba66a2435edef35054374d3e93dbb8d0af4ba.jpg" }, { "user_id": 3680004, "full_name": "Xiaochuan Yu", "title": "Founder/VP of Vulnerability Research", "founder_bio": "Founder at Nebula Security (YC S26). Hacked into iPhone, Chrome, Firefox, Safari, QEMU, and various things in your daily life. DEFCON finalist for 3 consecutive years. $200k+ Bug Bounty in Chrome. Core member of r3kapig, the #1 hacking team in the world in 2025, on CTFTime. M.S. from UC San Diego. Research published at USENIX Security, BlackHat USA. Ph.D. droped out. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/xiaochuan-yu-3103a5297", "x_url": "https://x.com/Nyaaaaa_ovo", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/8c980e06818698012626c4e85e58e70351bf6003.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 106602, "title": "Nebula Security: Bringing beyond Mythos protection to your product", "tagline": "#enterprise #cybersecurity #security #pentest #b2b", "body": "**TL;DR:** AI has changed cybersecurity. Don't let the next HuggingFace incident happen to your product. Hire VEGA, your best security engineer — a cybersecurity agent built by the world's best hacking team. It brings the same capabilities used to uncover critical vulnerabilities in browsers, operating systems, and internet infrastructure to protect your product. [Book a demo](https://nebula-security.cal.com/etenz/30min?overlayCalendar=true) today or find us at \n\n**The Problem:** Cybersecurity has changed. When the attackers have AI, how do you prevent the next HuggingFace incident from happening to your product?\n\nWe are here at Nebula Security for one reason, we are building the **world’s best cybersecurity agent**, bringing beyond Mythos protection to your product. \n\n### AI makes you fast. We make you secure\n\nIntroducing **VEGA**, the best cybersecurity agent that is built by the world's best hackers. An agent that has discovered critical vulnerabilities in major infrastructure and earned over **$400K** in rewards from Google.\n\nWatch our [launch video](https://youtu.be/gOzg5M5DhXI)\n\nWith VEGA, you can:\n\n* Autonomously find bugs in your codebase\n* Monitor code changes 24/7\n* Analyze root causes and generate Proofs of Concept\n* Provide ready-to-use patches\n* Understand the overall code health\n\nYou focus on bringing your product to the world. We manage the security.\n\n# The world saw the proof\n\nWhile ~~other companies~~ create hypes, we show you the proof.\n\nVEGA discovered\n\n* [IonStack](https://x.com/nebusecurity/status/2069707520160227688?s=20): the world's first fullchain exploit to root Android 17.\n* [GhostLock](https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html): a 15-year-old Linux kernel vulnerability capable of compromising nearly all the Linux devices in the world.\n* [nginx-poolslip](https://x.com/nebusecurity/status/2057071579876753643?s=20) and nginx-quicburst: the world's first and second vulnerabilities capable of remotely control your Nginx servers\n* And 91 more CVEs from Linux, Windows, Chrome Browser, Firefox, Nginx, Wordpress, and the other software you use every day.\n\nWe found vulnerabilities in the world's most complex software. Let us protect your product too.\n\n# The epic hacker team\n\n* Eten (CEO): PhD in Cybersecurity; Pwn2Own winner; speaker at Linux Security Summit, Off-by-One, IEEE S&P, USENIX Security, and NDSS. Previously worked at Microsoft.\n* Yuan (CTO): Previous cybersecurity PhD; Black hat speaker; Bringing VEGA to secure Linux Kernel.\n* Xiaochuan (Research Lead): From the world's #1 hacking team; three-time DEFCON participant; Jailbreak iPhone; Black Hat speaker; Previously worked at Zellic.\n* Frank (Research Lead): From the world’s #1 hacking team; DEFCON participant; Black hat speaker. Built the world’s first Android 17 root exploit.\n\nWe have won over **$400,000** from Google by breaking into their safest system.\n\nLet us show you what we can find in your system. [Book a demo](https://nebula-security.cal.com/etenz/30min?overlayCalendar=true) today.\n\nFind us at | Email to [founders@nebusec.ai](mailto:founders@nebusec.ai)\n\n![uploaded image](/media/?type=post&id=106602&key=user_uploads/1626290/4c0c365e-7cc4-469f-9c1c-c04a82c4f1b7)\n\n", "url": "https://www.ycombinator.com/launches/RjO-nebula-security-bringing-beyond-mythos-protection-to-your-product", "votes": 12, "created_at": "2026-07-23T21:25:03.912Z" } ] }, { "id": 32418, "name": "Traceforce", "slug": "traceforce", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8a31e3b43130c5974d52608c066ff45cc746112f.png", "website": "https://www.traceforce.ai", "all_locations": "San Francisco, CA, USA", "long_description": "AI apps such as ChatGPT and Claude have become part of everyone's daily workflow, but they introduce new security risks that traditional security tools weren't built to handle. Security teams at companies from startups to Fortune 500s, are struggling to keep up.\r\n\r\nTraceforce gives a company’s security team visibility of how AI apps are being used across company’s devices, and the ability to detect and prevent security breaches and unsafe actions as early as possible.", "one_liner": "CrowdStrike for AI Agents", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1785015608, "tags": [ "SaaS", "Security", "Cybersecurity", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/traceforce", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/traceforce.json", "year_founded": 2025, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/traceforce-security", "x_url": "", "fb_url": null, "cb_url": "Traceforce, Inc", "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/8a31e3b43130c5974d52608c066ff45cc746112f.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 2775802, "full_name": "Xia Hua", "title": "Founder/CEO", "founder_bio": "Founder at Traceforce. Previously Director of Engineering at Clumio, managing all flagship ransomware protection products. PhD in Applied Math from MIT.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/xia-hua-ph-d-28856a30/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2f3e3c63d811c56302968adf9fea80553cf68f79.jpg" }, { "user_id": 3675843, "full_name": "Varun Wadhwa", "title": "Founder/CTO", "founder_bio": "Co-founder & CTO at TraceForce. Previously Senior Software Engineer at LinkedIn, leading high-performance database systems for RAG. Before that, Staff Software Engineer at Clumio, leading distributed data infrastructure and backup. Earlier built distributed payments systems at Microsoft. BS in EECS, UC Berkeley.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/varunwadhwarcds", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/3bb82e62b797bba9d01efa60a14cb9d26fe41a26.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 117100, "title": "Traceforce TraceGraph – Ask anything about your company's AI usage", "tagline": "Know where every AI token goes", "body": "**TL;DR:** TraceGraph turns every AI interaction in your company into a fully queryable graph linking users, apps, models, MCPs, and tokens. You can ask questions in plain English, slice the data any way you want, and build agentic workflows on top of it out of the box. Try it free at [traceforce.ai](http://www.traceforce.ai).\n\n**👋 Hi YC, we're Xia and Varun**\n\nWe're the founders of Traceforce (S26), and we're building security and visibility for AI agents running on company devices. We previously built one of the world’s most scalable cyber-resillience systems at Clumio.\n\n**🔥 The problem**\n\nAI usage is exploding, but the data about it is stuck in billing totals and static dashboards. When you want to know which team's agents are burning tokens, which MCPs get called most, or who is using AI in ways that don't fit policy, you end up exporting CSVs or waiting on someone to build a report.\n\n**🕸️ How TraceGraph works**\n\nTraceforce runs on the endpoint, so it captures AI activity across every app and agent. TraceGraph connects that activity into one graph, and that graph lets you do three things:\n\n* **Query anything.** Every user, team, app, model, MCP, and token is a connected node, so you can slice the data in any combination with no predefined dashboards.\n* **Ask in natural language.** For example: _\"Which teams' token usage doubled this month?\"_ or _\"Show Claude Code sessions that called the Supabase MCP.\"_\n* **Build agentic workflows out of the box.** Put agents on top of the graph to flag spend spikes, send weekly usage reports, or escalate risky patterns automatically.\n\n🎥 **Demo:**\n\n\n\n**🙏 Our asks**\n\n* **Try it:** Install in under 5 minutes and see your team's token usage today.\n* **Intros:** Heads of engineering, IT, finance, or security leaders managing AI rollouts and spend.\n* **Feedback:** What would you ask your AI usage data? We'll show you the answer.\n\n📩 xia@traceforce.ai\n\nBook a time ", "url": "https://www.ycombinator.com/launches/USi-traceforce-tracegraph-ask-anything-about-your-company-s-ai-usage", "votes": 7, "created_at": "2026-09-28T14:55:58.682Z" }, { "id": 107460, "title": "Traceforce — Catch risky agent actions your security gateway will never spot", "tagline": "Company-wide security monitoring for AI apps", "body": "# \\*\\*\\*\\*\n\n**TL;DR:** AI agents are quietly pulling secrets off your employees' laptops — and your security gateway can't see it. Traceforce installs in under 5 minutes and gives you a full inventory of every AI app, MCP, and skill running on every device, then lets you block the dangerous stuff in real time. Built by the ex-Clumio engineering team. Traceforce is already deployed on 6,000+ devices across 10+ enterprise customers, with 40+ active pilots worth $3M+ in ARR. Try it free at [www.traceforce.ai](http://www.traceforce.ai).\\\n\\\n**The incident that started this**\\\nAt our last company, an AI coding agent running on a developer's laptop scraped what looked like database credentials and pushed them straight into a public GitHub repo. It took us _weeks_ to investigate, rotate credentials, and clean up the fallout. We got lucky — they were dev-environment creds, so no customer was affected. Next time, nobody will be that lucky.\\\n\\\nThat's the whole problem with AI at work now: ChatGPT, Claude, Cursor, and Claude Code are everywhere on employee devices, wired into your data through MCPs and skills that no one is tracking. The tools your security team already owns — gateways, proxies, enterprise APIs — never see any of it, because the risky action happens _on the device_, before it ever hits the network.\\\n\\\n**Why us**\\\nWe're Xia and Varun. We ran engineering at Clumio, a cyber-resilience company acquired by Commvault in 2024, where Xia was Director of Engineering and Varun was tech lead. We've spent our careers building security infrastructure — and we validated this problem with 50+ CISOs and CIOs before writing a line of code. Every one of them said the same thing: \\_I need to see and control this without slowing my engineers down.\\_\\\n\\\n**Why on-device — and why gateways can't do this**\\\nCompetitors sit at the gateway or plug into enterprise APIs. That misses the self-adopted AI tools employees install themselves, and it can't see how an agent is actually connected to your data via MCPs. Traceforce runs on the endpoint, so we see the full picture — which AI apps are running, what MCPs and skills they're wired to, what data they can reach — and we can _warn or block_ an unsafe action the moment it happens, not after it's already on the network.\\\n\\\n**What you get**\n\n* Install in <5 min. Full inventory of every AI app, MCP, and skill across your devices within 30 minutes.\n* Discover shadow AI and see exactly how each agent connects to your data sources.\n* Real-time controls: warn and block unsafe actions (like uploading a client list to a chatbot) before they happen.\n* Open-source MCP pentesting: we also built [mcp-xray](https://github.com/traceforce/mcp-xray) to dynamically detect vulnerable MCPs — try it today.\n\n\\\n**Traction**\n\n* Securing 6000+ employee devices across 10+ enterprises.\n* Customer quote from a leading database provider with over 500 employees: “To govern AI, we need full visibility into AI usage before we can place any type of controls. Traceforce gives us both visibility and control we needed”.\n* 40+ Active pilots including multiple Fortunate 500 enterprises.\n\n\\\n\\\n**Our ask**\n\n* **Intros** to security engineers, security architects, DevSecOps teams, or CISOs securing AI adoption. (We're the ex-Clumio team — that's usually enough to get a conversation.)\n* **Try Traceforce free** on your own laptop — <5 min to install, and we want candid feedback, good or bad.\n* **Challenge us:** tell us which AI apps, MCPs, or workflows we should support next.\n* **Share** with anyone wrestling with security over ChatGPT, Claude, Cursor, Claude Code, or custom MCPs.", "url": "https://www.ycombinator.com/launches/RxE-traceforce-catch-risky-agent-actions-your-security-gateway-will-never-spot", "votes": 7, "created_at": "2026-07-28T16:50:42.184Z" } ] }, { "id": 33047, "name": "Decawork", "slug": "decawork", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/44fee5cae005d704af84e7ed5ed7418d4ca0580c.png", "website": "https://decawork.ai/", "all_locations": "San Francisco, CA, USA", "long_description": "An agent’s access should depend on the task it is doing. The same action can be appropriate for one task and wrong for another. Access decisions need to adapt in real time as the agent works, but companies can’t turn every business judgment into a fixed rules or have people manually approve every step.\r\n\r\nWe train small, company-specific models that approve AI actions in real time. They consider the company’s policies and interests, the agent’s current task, and its past actions to decide whether each proposed action should be allowed. Access is specific to the task at hand and reassessed as the agent works.\r\n\r\nCompanies will rent intelligence from AI labs or run open-source models to power their agents. They’ll own the models that keep their entire AI workforce acting in their interests. Decawork is building those models.", "one_liner": "Training company-specific models that approve AI actions.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1785265630, "tags": [ "B2B", "Security", "Infrastructure", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/decawork", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/decawork.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/decawork-ai/", "x_url": "https://twitter.com/decawork", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/44fee5cae005d704af84e7ed5ed7418d4ca0580c.png", "app_video_url": null, "dday_video_url": null, "company_photos": [ "https://bookface-images.s3.us-west-2.amazonaws.com/attachments/bea64bca8f89d0506e06952dbd00022b772363d1.png" ], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 1632535, "full_name": "Aman Raj", "title": "Founder/CEO", "founder_bio": "- Built AI compliance platform at Barclays used by internal teams globally\n- Founded a fintech and scaled it to 52K families and $1.5M AUM\n- Led product at a consumer AI startup, scaled to 100K+ MAU (Google Play Best App 2024)\n- IIT Kharagpur", "is_active": true, "linkedin_url": "https://linkedin.com/in/aman-raj-84636a158", "x_url": "https://x.com/arxneo14", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/2ae56b87789485359a28cd015856039060019efe.jpg" }, { "user_id": 1049492, "full_name": "Sarthak Aggarwal", "title": "Founder/CTO", "founder_bio": "- AI systems at NVIDIA (deployed at OpenAI, Meta)\n- Enterprise AI at Ema (used by Microsoft, Hitachi)\n- Led Conquest, Asia's largest student-run accelerator\n- Google Code-In Global Winner + Open source since the age of 12\n- BITS Pilani", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/sarthak-agg/", "x_url": "https://x.com/_sarthak4", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/f93e2ff857332071c545c3c16f569835408cf579.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 109883, "title": "Decawork - Training company-specific models that approve every AI action", "tagline": "Our small AI models decide agent access in real time, task by task, based on your company’s interests.", "body": "Hi everyone 👋 - we're Aman and Sarthak, founders of Decawork.\\\n\\\n**TL;DR:** AI agents shouldn’t have permanent access to company systems. The same action can be appropriate for one task and wrong for another, but companies can’t turn every business judgment into fixed rules or manually approve every step. Decawork trains small, company-specific AI models that approve every agent action in real time, based on company policies and interests, the agent’s task, and its past actions. Access is granted for the task at hand and revoked when it’s done.\\\n\\\nLaunch video: [Watch it here](https://www.youtube.com/watch?v=SanpHIyFcV4)\\\n\\\n🚧 **The Problem & Why now?**\\\nCompanies are putting long-running, more autonomous agents to work on broader tasks and goals. These agents need access to critical company systems, but their actions can be unpredictable and may not serve the company’s interests.\n\nOpenAI’s agents have already hacked Hugging Face during testing with reduced safeguards. Replit’s agent deleted data from a live application’s database.\n\nAn agent’s access should depend on the task it is doing. The same action can be appropriate for one task and wrong for another. Permanent access lets an agent keep using permissions even when they are no longer appropriate for its task.\n\nAs agents take on more work independently, access decisions need to happen in real time. But companies can’t turn every business judgment into a fixed rule or have people manually approve every step.\\\n\\\n✅ **How we solve this?**\\\nDecawork gives AI agents access for the task at hand and revokes it when the task is done.\n\n* Connect your agents. Route API requests and MCP tool calls through Decawork to see activity and manage access in one place.\n* Set company policies. Write policies in plain English, specify when human approval is required, and connect your existing identity and IT service management systems.\n* Deploy a company-specific policy model. We deploy small models that approve actions in real time using your company’s policies and priorities, task context, and past actions. Your agents do the work. Decawork evaluates each proposed action and enforces the access decision before it runs.\n\n🚀 **Team**\\\nSarthak built AI systems at NVIDIA that were deployed at OpenAI and Meta, and worked on enterprise AI agents at Ema.\n\nAman built the AI compliance platform at Barclays used by internal teams globally, then led product at a consumer AI startup serving 100K+ monthly users, hand-wiring credentials for the agents he shipped.\n\nEvery one of those deployments came down to the same questions: what can it access, who approved it, and what did it do? We kept solving agent access by hand - so we quit to build the system we wished we’d had.\n\n![uploaded image](/media/?type=post&id=109883&key=user_uploads/1632535/0ef2784e-ab45-422f-91b9-960473f11dd5)\n\n🙏 **Our Ask**\n\n* If you’re on an IT team or know someone who’s worried about AI agents accessing or misusing company systems, talk to us: or [founders@decawork.ai](mailto:founders@decawork.ai)", "url": "https://www.ycombinator.com/launches/SaJ-decawork-training-company-specific-models-that-approve-every-ai-action", "votes": 152, "created_at": "2026-08-12T16:30:00.369Z" } ] }, { "id": 33179, "name": "Verdict Machine", "slug": "verdict-machine", "former_names": [ "TxAI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/efc3c74e529cc296ebd75ff470655d005300ddf0.png", "website": "https://verdictmachine.com", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Verdict Machine uses AI to understand each financial institution's complete on-chain environment, assess its cyber risk and generate tailored controls. The same live model powers transaction prevention, continuous cyber diligence, security posture and cost-efficient wallet screening. Before execution, Verdict Machine evaluates proposed transactions against the institution's active policies.\n\nIn our first weeks, we started POCs with asset managers and digital-asset infrastructure providers whose systems move billions of dollars every week for financial institutions. We're now in active evaluations with digital-asset teams at some of the world's largest banks.\n\nThe founding team launched and led blockchain security at Check Point (NASDAQ: CHKP).", "one_liner": "AI cybersecurity for financial institutions' digital assets", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1786374737, "tags": [ "Crypto / Web3", "Security", "AI" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Israel", "Middle East and North Africa" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/verdict-machine", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/verdict-machine.json", "year_founded": 2026, "city": "Tel Aviv-Yafo", "country": "IL", "linkedin_url": "https://www.linkedin.com/company/verdict-machine/", "x_url": "", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/efc3c74e529cc296ebd75ff470655d005300ddf0.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Brad Flora", "url": "https://www.ycombinator.com/people/brad-flora" }, "founders": [ { "user_id": 85721, "full_name": "Dan Danay", "title": "Founder/CEO", "founder_bio": "Co-founder and CEO at Verdict Machine (YC S26). Previously Head of Blockchain Security at Check Point (NASDAQ:CHKP), launching their digital assets division. Founded keyTango (MPC-powered crypto clearing house) and Airmada (YC W16, automated drone stations). MIT Sloan MBA. Captain in Israeli Navy, commanded missile ship and naval electronics school.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/dandanay/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/821ae7bdee6621edf11f400f8aee456ae9e5b649.jpg" }, { "user_id": 3784711, "full_name": "Isaac Grossman", "title": "Founder", "founder_bio": "Co-founder and CTO at Verdict Machine (YC S26). Previously VP Engineering at Fhenix, where he led development of an FHE-enabled L2, and at SCRT Labs, where he helped scale Secret Network to a top-100 crypto asset. Co-founded keyTango, an MPC-powered crypto clearing house.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/itzik-grossman", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/729b4a4e5f449d069ff7dde45b6a9d7af5cb6e7c.jpg" }, { "user_id": 3784793, "full_name": "Liran Kogan", "title": "Founder/CPO", "founder_bio": "Co-founder and CPO at Verdict Machine (YC S26). Previously launched and led blockchain-security products at Check Point (NASDAQ: CHKP), and led payments and FX products at Payoneer (NASDAQ: PAYO). NYU + INSEAD.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/liran-kogan/", "x_url": "", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/b8ffca19f9687957470301ec575fb6f9cab05b65.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 110493, "title": "Verdict Machine: AI cybersecurity for financial institutions’ digital assets", "tagline": "AI that understands each institution's complete on-chain environment, assesses its cyber risk, and generates tailored controls to prevent hacks", "body": "Hey all! We are Dan, Liran, and Isaac. Before Verdict Machine, we launched blockchain security at Check Point (NASDAQ: CHKP).\n\n**TL;DR:** Blockchain is becoming critical infra for all finance. More than $3.4B in digital assets was stolen in 2025. Verdict Machine is AI cybersecurity for financial institutions' digital assets. We use AI to understand each institution's environment, assess cyber risk and generate tailored controls that prevent hacks.\n\n**Building for:** banks, asset managers, DeFi protocols and infra, companies that use stablecoins or RWAs. If that’s you, email us at [founders@verdictmachine.com](mailto:founders@verdictmachine.com).\n\n\n\n### Signed is not safe\n\nSophisticated hackers don’t need to compromise a wallet to steal funds. They only need to trick an authorized operator into approving one malicious transaction.\n\nOn-chain, settlement is final. There is no chargeback and no reversal. The security decision has to happen before the transaction executes.\n\nAttackers are sophisticated and see the entire institution, while existing security tools see fragments:\n\n* Hidden dependencies. Vendors, protocols, bridges and infrastructure are assessed separately or not at all.\n* Limited context. Controls check a transaction, not the institution behind it.\n* Stale controls. Rules are written once and reviews run once, while the institution and its risk keep changing.\n\n \n\n### How Verdict Machine works\n\nVerdict Machine uses AI to secure each client end to end.\n\n**Inventory.** It builds the complete inventory of a client’s on-chain environment: assets, wallets, smart contracts, users, vendors, counterparties, and transaction patterns.\n\n**Posture.** It quantifies cyber risk and recommends tailored controls to minimize exposure.\n\n**Enforce controls.** Before execution, it evaluates each proposed transaction to prevent attacks in real time.\n\nThe same live model powers every workflow:\n\n**Real time prevention.** Security and compliance teams secure their most critical transactions.\n\n**Continuous cyber diligence.** Asset managers and risk teams underwrite the cyber risk of protocols, vendors, and counterparties before and after capital is deployed.\n\n**Wallet screening.** Payments and stablecoin teams screen for fraud, unauthorized transactions, and risky wallets.\n\n### Why now\n\nInstitutions are racing to launch stablecoin and tokenized-asset products. MiCA and DORA are in force, so the people who own this risk now have to show their work. Attackers punish under-protected organizations.\n\nFireblocks and Chainalysis reached $8B valuations for digital asset custody and compliance. Cybersecurity for on-chain finance is a bigger opportunity. Every financial institution is going to use digital assets and therefore will require digital-asset cybersecurity.\n\n### Traction\n\nWe left Check Point the day before Y Combinator started. We already have POCs with asset managers and digital-asset infrastructure providers moving billions of dollars weekly for financial institutions, and we are in active evaluations with a digital-asset team at one of the world's largest banks.\n\n### Why us\n\nWe previously launched and led blockchain security at Check Point (NASDAQ: CHKP). Our CTO Isaac is a cyber veteran from Matzov, Israel’s cryptography unit. We are crypto natives with many years building infra for crypto and fintech. We built Verdict Machine to bring AI-native, institution-specific security to on-chain finance.\n\nManaging or deploying crypto, stablecoins, or tokenized assets? Talk to us.\n\n[verdictmachine.com](http://verdictmachine.com) · [founders@verdictmachine.com](mailto:founders@verdictmachine.com)", "url": "https://www.ycombinator.com/launches/Sk9-verdict-machine-ai-cybersecurity-for-financial-institutions-digital-assets", "votes": 24, "created_at": "2026-08-17T15:00:01.008Z" } ] }, { "id": 33936, "name": "Conifer", "slug": "conifer", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1cd2adb8270db80170ab62b4140817892372538a.png", "website": "https://www.conifer.build", "all_locations": "San Francisco, CA, USA", "long_description": "There are thousands of models, providers, and harnesses, each with its own pricing and strengths, leaving an overwhelming number of choices when it comes to managing token spend and intelligence. Conifer uses intelligent routing and orchestration logic to handle the full path of each query: model selection, provider choice, and cache management. It all runs inside your existing harness, so tools like Claude Code and Codex work without changing your setup. By centralizing where inference occurs, Conifer lets companies save on their inference bill while leaving teams free to focus on what they are building.", "one_liner": "Least cost routing system to reduce 70%+ token spend", "team_size": 4, "industry": "B2B", "subindustry": "B2B", "launched_at": 1783524440, "tags": [ "Developer Tools", "B2B", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": null, "url": "https://www.ycombinator.com/companies/conifer", "api": "https://devasheeshg.github.io/yc-api/batches/summer-2026/conifer.json", "year_founded": 2026, "city": "San Francisco", "country": "US", "linkedin_url": "https://www.linkedin.com/company/coniferbuild/posts/?feedView=all", "x_url": "https://x.com/coniferbuild", "fb_url": null, "cb_url": null, "github_url": null, "logo_url": "https://bookface-images.s3.amazonaws.com/small_logos/1cd2adb8270db80170ab62b4140817892372538a.png", "app_video_url": null, "dday_video_url": null, "company_photos": [], "primary_partner": { "name": "Gustaf Alstromer", "url": "https://www.ycombinator.com/people/gustaf-alstromer" }, "founders": [ { "user_id": 2679506, "full_name": "Charles Muehlberger", "title": "Founder/CTO", "founder_bio": "Founder at Conifer. Engineering researcher at Princeton, accelerating multi-modal inference on edge devices and designing physics simulation software for coupled laser reservoirs and machine learning with physical neural networks. Previously built custom edge AI devices for RF-based brain injury modeling at DoW, and helped engineer the world record holding fastest electric speedboat at PES.", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/charlesmuehl/", "x_url": "https://x.com/charles_v11", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/409f2cd05975613a17cb1fd3e79e3a7f552feca0.jpg" }, { "user_id": 3664042, "full_name": "Michael Jeffords", "title": "Founder/CGO", "founder_bio": "Co-founder at Conifer (YC S26). Previously co-founded The HeartCheck Foundation, scaling free hypertension screenings to 20+ barbershops and over 10,000 individuals. Engineered an ML-driven computer vision pipeline using pose estimation for early-onset ALS and Parkinson's detection. Former clinical researcher at the Dell Med Institute of Vascular Surgery and UTHSC, specializing in hematopoetic stem cell transplantation, achieving infiltration levels >90% in mouse models. ", "is_active": true, "linkedin_url": "https://www.linkedin.com/in/michael-bryan-jeffords/", "x_url": "https://x.com/michaelbjeff", "avatar_thumb_url": "https://bookface-images.s3.us-west-2.amazonaws.com/avatars/58eb17d9512cddea2d8c88e01b06698b9d88a191.jpg" } ], "jobs": [], "news": [], "launches": [ { "id": 105897, "title": "Conifer: Local-first least cost routing system", "tagline": "Stop paying cloud prices for every token. We route 80% of requests to your hardware at no cost", "body": "Hi all 👋, We’re Michael and Charles, founders of Conifer.\n\n**TLDR:** Conifer is one interface for both local and cloud models, available today as **Juniper**, our consumer-facing app. It routes each request to the most cost-effective option, beginning with your own hardware. Most requests are processed locally without API fees, reducing paid token volume by up to 80%.\n\n**📺 Launch Video:**[ https://www.youtube.com/watch?v=QLVNISmtet0](https://www.youtube.com/watch?v=QLVNISmtet0)\n\n**❓ The problem**: Model labs direct every request to the cloud, with no incentive to route your queries to a cheaper competitor or a free, on-device model. That may benefit them, but it’s unnecessarily costly for you. Whether it’s a simple typo fix or a complex architecture problem, the request is sent to a data center, exposing your data to third parties and increasing your monthly spend. This quickly adds up for teams running coding agents, customer support, and other high-volume workloads. When handling financials, patient records, or customer data, teams must also trust that a cloud provider’s security is as robust as promised.\n\n![uploaded image](/media/?type=post&id=105897&key=user_uploads/3664042/6dbc9654-b4df-453d-a02e-3ea71302316d)\n\n**🔨 What Conifer does:** Conifer routes every request from the bottom up:\n\nTier 0: Your own hardware, with $0 in API fees\n\nTier 1: An efficient cloud model\n\nTier 2: A frontier model for the most demanding queries\n\nThe majority of requests are processed locally, ensuring that cloud pricing applies only when actually necessary, drastically reducing paid token volume. Additionally, Conifer consolidates disparate subscriptions, dashboards, and API keys within a single unified interface.\n\nFor sensitive workloads 🕵️, **local-only mode** disables cloud routing entirely, so all conversations and data remain completely on-device.\n\n🏃‍♂️ **Ensuring the local tier is fast enough:** This routing only works if the local tier is reliable, so we built Conifer's inference engine from the ground up in Rust. On Apple Silicon, decode speeds reach up to 60% faster than llama.cpp.\n\n![uploaded image](/media/?type=post&id=105897&key=user_uploads/3664042/79b464dc-667b-48af-a1ba-5cdd089b1dc8)\n\nOn-device operation with Conifer is now the default starting point for inference, rather than a feature limited to hobbyist use.\n\n**Asks:**\n\n1. Try Juniper with a one-click download @[ conifer.build](http://conifer.build), or reach out to us at [contact@conifer.build](mailto:contact@conifer.build) to have a model running in under two minutes.\n2. Introduce us to teams with high monthly token spend. If teams are incurring significant API costs and want to optimize unit economics without rebuilding their stack, we would like to connect.", "url": "https://www.ycombinator.com/launches/RY1-conifer-local-first-least-cost-routing-system", "votes": 10, "created_at": "2026-07-15T22:29:01.603Z" } ] } ]