[ { "id": 9, "name": "WireOver", "slug": "wireover", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://wireover.com", "all_locations": "Cambridge, MA, USA", "long_description": "WireOver is a desktop application that leverages peer-to-peer technology for sending files privately. It's free and unlimited, solving an unmet need for sending large files easily. Pro accounts get incredibly strong security, with end-to-end encryption.", "one_liner": "Really secure file sending for big files.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Productivity", "launched_at": 1322045564, "tags": [ "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2012", "status": "Inactive", "industries": [ "B2B", "Productivity" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/wireover", "api": "https://yc-oss.github.io/api/batches/winter-2012/wireover.json" }, { "id": 49, "name": "Authy", "slug": "authy", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/ff56b0d3df7e01477d520a86db8ab9169a0839bb.png", "website": "http://authy.com", "all_locations": "San Francisco, CA, USA", "long_description": "Authy provides strong authentication for the connected world, protecting people and the enterprise against malicious attacks. Our two-factor authentication (2FA) security solution enables organizations to minimize risk while enhancing the user experience.\r\n\r\nAuthy 2FA provides a fast-to-implement, highly scalable and proven 99.999 % reliable alternative to passwords. Used by 11,000+ websites serving 2 million consumers worldwide, it's designed to give users the ability to self-service or easily manage their own 2FA experience. Coinbase, CloudFlare, Humble Bundle and Twitch.tv are just some Authy clients. \r\n\r\nAuthy is a Twilio company. Follow us on:\r\nTwitter at @Authy\r\nFacebook at https://www.facebook.com/authysec\r\nGoogle+ at https://plus.google.com/+Authy\r\nGitHub at https://github.com/authy", "one_liner": "Authy is a Two-Factor Authentication platform for developers", "team_size": 201, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1322045942, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2012", "status": "Acquired", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/authy", "api": "https://yc-oss.github.io/api/batches/winter-2012/authy.json" }, { "id": 55, "name": "Documents.Me", "slug": "documents-me", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://documents.me", "all_locations": "Santa Clara, CA, USA", "long_description": "Nouvou offers mobile file sharing and encryption solutions for enterprises. The company was founded in 2011 and is based in Santa Clara, California", "one_liner": "Client-side encryption for your devices and the cloud.", "team_size": 0, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1322046002, "tags": [ "Security", "Privacy" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2012", "status": "Inactive", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/documents-me", "api": "https://yc-oss.github.io/api/batches/winter-2012/documents-me.json" }, { "id": 183, "name": "AeroFS", "slug": "aerofs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/26b425639c740c8e014304e1ad6412f83c2d1dba.png", "website": "http://aerofs.com", "all_locations": "Palo Alto, CA, USA", "long_description": "AeroFS enterprise file sync and share & collaboration solution deploys on your infrastructure. Your files remain secured by your own security protocols, removing the risk associated with relying on your vendors to secure your data.\r\n\r\nThe service has a Dropbox like user experience. Now, both the end user and the IT team can both get what they are looking for out of a file sharing tool.\r\n\r\nWe are funded by some of Silicon Valley's best investors and entrepreneurs:\r\n\r\nAvalon Ventures\r\nA16Z Seed\r\nYCombinator\r\nSVAngel\r\nChris Sacca (Lowercase Capital)\r\nMaynard Webb (COO eBay)\r\nJerry Yang (Founder Yahoo!)\r\nPaul Buchheit (Founder FriendFeed)\r\n\r\nWe're hiring! https://aerofs.com/company/careers\r\nYou will have the opportunity to work as part of a small team. This means that you will be \"CEO\" of whatever you create. Our size gives us agility in ways that large companies do not have: We push out code almost daily (on a desktop platform!) to thousands of users.\r\n\r\nWe're not just building a company; we're building a family. Many of us are new to the area, so company trips, get togethers, and BBQs are par for the course!", "one_liner": "Secure Enterprise Collaboration.", "team_size": 40, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1326790113, "tags": [ "Collaboration", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2010", "status": "Acquired", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/aerofs", "api": "https://yc-oss.github.io/api/batches/summer-2010/aerofs.json" }, { "id": 407, "name": "Mattermost", "slug": "mattermost", "former_names": [ "SpinPunch" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1828c07e7e0127350a2a1ce95943239d48691aaa.png", "website": "http://mattermost.com", "all_locations": "Palo Alto, CA, USA; Remote", "long_description": "Mattermost provides secure collaboration for technical and operational teams that work in environments with complex nation-state level security and trust requirements. We serve technology, public sector, national defense and financial services industries with customers ranging from tech giants, to the world’s largest banks, to the U.S. Department of Defense and governmental agencies around the world. \r\n\r\nOur self-hosted and cloud offerings provide team messaging, file sharing, integrations, audio and screen share, workflow automation and project management on an open source platform deployed by the world’s most secure and mission critical organizations. We co-build the future of collaboration with over 4,000 open source project contributors who’ve provided over 30,000 code improvements towards our shared product vision, which is translated into 20 languages. ", "one_liner": "Secure Collaboration for Technical Teams", "team_size": 120, "industry": "B2B", "subindustry": "B2B -> Productivity", "launched_at": 1695156681, "tags": [ "DevSecOps", "Collaboration", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2012", "status": "Active", "industries": [ "B2B", "Productivity" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/mattermost", "api": "https://yc-oss.github.io/api/batches/summer-2012/mattermost.json" }, { "id": 494, "name": "Meldium", "slug": "meldium", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://meldium.com", "all_locations": "San Francisco, CA, USA", "long_description": "The easiest way for companies to connect their empoyees to the apps they need.\n\nMeldium is a YC-backed startup helping teams & companies manage accounts & passwords for cloud apps. From shared passwords to user provisioning, Meldium is a central dashboard that connects to every cloud app and makes it simple to create, edit and remove user accounts across all of them. All without IT.", "one_liner": "Simple password & identity management for teams. Acquired by LogMeIn…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Productivity", "launched_at": 1354492800, "tags": [ "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2013", "status": "Acquired", "industries": [ "B2B", "Productivity" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/meldium", "api": "https://yc-oss.github.io/api/batches/winter-2013/meldium.json" }, { "id": 599, "name": "Kuna Systems", "slug": "kuna-systems", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://getkuna.com", "all_locations": "San Francisco, CA, USA; Burlingame, CA, USA", "long_description": "Stop break-ins before they happen. Kuna is the first effective break-in prevention solution for home security. Kuna is a smart Wi-Fi camera and video intercom built into an elegant outdoor light. It detects people at your door and lets you see and interact with them through your smartphone. Think of it as a digital doorman. And the best part, it's super easy to install. No need to run power wires or drill holes. Just replace your old light fixture.\n\nCheck us out at www.getkuna.com, spread the word and help us bring Kuna to the world. Thanks.", "one_liner": "We're making a smart, front door camera with intercom that lets you…", "team_size": 11, "industry": "Consumer", "subindustry": "Consumer -> Consumer Electronics", "launched_at": 1384978780, "tags": [ "Smart Home Assistants", "IoT", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2014", "status": "Acquired", "industries": [ "Consumer", "Consumer Electronics" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/kuna-systems", "api": "https://yc-oss.github.io/api/batches/winter-2014/kuna-systems.json" }, { "id": 654, "name": "Bannerman", "slug": "bannerman", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b608533ba4dfdf9610d953d7d6faf8b3a2d29638.png", "website": "https://www.bannerman.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Bannerman helps businesses hire and manage security guard services. Our technology eliminates busywork and human errors so we can provide a more reliable security experience. Our customers have total transparency into the guard schedules, attendance, and incident reporting. We’re the only place where you can instantly book security guard services in all 50 states. ", "one_liner": "Security Guard Company Marketplace", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Office Management", "launched_at": 1398907598, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2014", "status": "Inactive", "industries": [ "B2B", "Office Management" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/bannerman", "api": "https://yc-oss.github.io/api/batches/summer-2014/bannerman.json" }, { "id": 743, "name": "Final", "slug": "final", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a9f9365e5ac7dcefbab5bfab9129637279050427.png", "website": "http://getfinal.com", "all_locations": "Oakland, CA, USA", "long_description": "At Final, we are re-building the credit card from the ground up. \r\n\r\nFinal is issuing a credit card that gives consumers total control over their merchant relationships, transparency in their spending, and piece of mind across all payment experiences. Rather than a single, 16-digit card number, Final generates multiple card numbers and manages them automatically.\r\n\r\nIt works everywhere you buy; online, and offline, and integrates with digital wallets like Google Wallet and ApplePay with zero updates to the payment infrastructure. Bottom line - with Final, you’ll never lose access to your spending ability from a breach, fraud, cancelled or stolen card ever again.", "one_liner": "A credit card that drastically reduces payment fraud and gives…", "team_size": 11, "industry": "Fintech", "subindustry": "Fintech -> Payments", "launched_at": 1415700217, "tags": [ "Payments", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Acquired", "industries": [ "Fintech", "Payments" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/final", "api": "https://yc-oss.github.io/api/batches/winter-2015/final.json" }, { "id": 750, "name": "Smyte", "slug": "smyte", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://smyte.com", "all_locations": "San Francisco, CA, USA", "long_description": "Smyte stops spam, scams, harassment and credit card fraud for marketplaces and social networks. We automatically classify your website and mobile app's event data and stop bad actors at scale.", "one_liner": "Smyte stops bad actors on social networks and marketplaces.", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1416218728, "tags": [ "Security", "Fraud Detection" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/smyte", "api": "https://yc-oss.github.io/api/batches/winter-2015/smyte.json" }, { "id": 828, "name": "Rescue Forensics", "slug": "rescue-forensics", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://rescueforensics.com", "all_locations": "Nashville, TN, USA", "long_description": "Rescue Ops is a digital forensic that archives massive quantities of data from classified advertisement websites specializing in commercial sex ads for law enforcement agencies to use in anti-trafficking investigations.", "one_liner": "Actionable human trafficking intelligence", "team_size": 0, "industry": "Government", "subindustry": "Government", "launched_at": 1416310126, "tags": [ "Analytics", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2015", "status": "Inactive", "industries": [ "Government" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/rescue-forensics", "api": "https://yc-oss.github.io/api/batches/winter-2015/rescue-forensics.json" }, { "id": 909, "name": "Appcanary", "slug": "appcanary", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/812e3473cee76ddf3c226c05edc2883848c5fb14.png", "website": "http://appcanary.com", "all_locations": "Toronto, ON, Canada", "long_description": "Never run vulnerable software again.\r\nWe monitor your servers, and notify you when you need to update. \r\n\r\nTry us for free: https://appcanary.com", "one_liner": "Appcanary tracks the dependencies you use in your apps and servers…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1430156121, "tags": [ "Security", "Monitoring" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2015", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/appcanary", "api": "https://yc-oss.github.io/api/batches/summer-2015/appcanary.json" }, { "id": 1032, "name": "Castle", "slug": "castle-2", "former_names": [ "Castle.io", "Castle", "Castle Intelligence" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8d7fdbafd7f8ab52a136ccd6f568c251351c96b8.png", "website": "https://castle.io", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Instantly stop automated and human-originated account takeovers, fake accounts, and any behavior that violates your platform policies.", "one_liner": "Block bots & bad behavior", "team_size": 20, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447566615, "tags": [ "Developer Tools", "SaaS", "Security", "Fraud Detection" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/castle-2", "api": "https://yc-oss.github.io/api/batches/winter-2016/castle-2.json" }, { "id": 1040, "name": "Patchwork Security", "slug": "patchwork-security", "former_names": [], "small_logo_thumb_url": "/company/thumb/missing.png", "website": "http://patchworksecurity.com", "all_locations": "Oakland, CA, USA", "long_description": "We’re taking everything we know as security engineers, automating it, and making it easy for everyone to use.", "one_liner": "Security patch notifications for servers. Build it, deploy it, and…", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1447568415, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/patchwork-security", "api": "https://yc-oss.github.io/api/batches/winter-2016/patchwork-security.json" }, { "id": 1214, "name": "AmberBox Gunshot Detection", "slug": "amberbox-gunshot-detection", "former_names": [ "Sinclair Fire", "AmberBox" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4520c6bfa42649fe08afe6ca716089765076d7c3.png", "website": "https://amberbox.com", "all_locations": "San Francisco, CA, USA", "long_description": "AmberBox is the most advanced indoor gunshot detection and response system used in the US today. AmberBox automates emergency processes to significantly reduce response time and remove human error.\r\n\r\nAmberBox detectors utilise a patented gunshot detection algorithm to respond immediately following a firearm discharge. With tri-factor authentication (percussion, audio and infrared), detectors are able to instantly determine a firearm signature with a near-zero false alarm rate. Upon activation, detectors alert first responders through our reporting network, and can integrate with other security systems, such as cameras, access control systems and mass notification to initiate.", "one_liner": "Detect Gunshots | Inform Law Enforcement | Empower First Responders", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1588692019, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2016", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/amberbox-gunshot-detection", "api": "https://yc-oss.github.io/api/batches/winter-2016/amberbox-gunshot-detection.json" }, { "id": 1487, "name": "Ambient.ai", "slug": "ambient-ai", "former_names": [ "Ambient" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/624d0ce6f387431048bed692cfded210ffc7d139.png", "website": "https://ambient.ai", "all_locations": "San Francisco, CA, USA; San Jose, CA, USA", "long_description": "Ambient.ai is a computer vision intelligence company transforming enterprise security operations to prevent security incidents before they happen. The Ambient.ai platform applies AI and computer vision intelligence to existing sensor and camera infrastructure to deliver continuous physical security monitoring and automate the immediate dispatch of human resources. Ambient.ai is the first platform that goes beyond basic motion detection and image recognition to achieve near-human perception with automated situational context. \r\n\r\nWith physical security incidents on the rise and physical security organizations left under-resourced, Ambient.ai’s computer intelligence platform comes at a time of critical need, which is why the company has raised over $50 million from venture capital investors led by a16z. Today, large enterprises, schools and organizations – including many of the largest US tech companies and other Fortune 500 companies – use Ambient.ai to secure property, people, and assets from the most harrowing physical security threats.\r\n\r\nThe company was founded in 2017 by experts in artificial intelligence from Stanford who previously built iconic products at Apple, Google, Microsoft and Dropbox. We are backed by Andreessen Horowitz (a16z), SV Angel, Y Combinator, and visionary angels like Jyoti Bansal, Mark Leslie and Elad Gil.", "one_liner": "AI company transforming enterprise physical security to prevent…", "team_size": 95, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1478224835, "tags": [ "Computer Vision", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/ambient-ai", "api": "https://yc-oss.github.io/api/batches/winter-2017/ambient-ai.json" }, { "id": 1521, "name": "Apozy", "slug": "apozy", "former_names": [ "Apozy" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2234c64915e488afac0fff43bf91257681089931.png", "website": "https://www.apozy.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Apozy is a browser defense platform powered by \"Native Browser Isolation\" technology. It neutralizes phishing, malware, and impersonation attacks in real-time by sandboxing dangerous websites at the time of click. This creates a safe \"read-only\" environment for browsing, even if the original website is malicious. Businesses use Apozy Airlock to protect their employees from online threats and prevent data breaches.\r\n", "one_liner": "Apozy makes every website safe to browse", "team_size": 9, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1478663435, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/apozy", "api": "https://yc-oss.github.io/api/batches/winter-2017/apozy.json" }, { "id": 1630, "name": "Upfort", "slug": "upfort", "former_names": [ "Paladin Cyber" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/00594b41a6ca6cb9abcc26aadf60196e866c0990.png", "website": "https://www.upfort.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Upfort is a leading platform for cyber security and insurance that provides holistic protection from evolving cyber threats. Founded in 2017 to expand global access to cyber resilience, Upfort makes cyber risk easy to manage and simple to insure. Upfort delivers turnkey security proven to proactively mitigate risk and comprehensive cyber insurance from leading insurers. With proprietary data and intelligent automation, Upfort’s AI anticipates risk and streamlines mitigation for hassle-free underwriting. Insurers, brokers, and risk advisors partner with Upfort to offer clients resilience and peace of mind against cyber threats.", "one_liner": "Turnkey security & hassle-free cyber insurance from leading insurers", "team_size": 38, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1493398718, "tags": [ "Next-gen Network Security", "Security", "Insurance", "Cyber Insurance" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2017", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/upfort", "api": "https://yc-oss.github.io/api/batches/summer-2017/upfort.json" }, { "id": 1691, "name": "Templarbit", "slug": "templarbit", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/388bf404240294f2fa8cff1b093bc8030dcd540c.png", "website": "https://www.templarbit.com", "all_locations": "San Francisco, CA, USA", "long_description": "Developer-oriented security platform, helping small and large companies protect their software from malicious activityDeveloper-oriented security platform, helping small and large companies protect their software from malicious activity", "one_liner": "Protecting applications from malicious activity", "team_size": 11, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1495673434, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2017", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/templarbit", "api": "https://yc-oss.github.io/api/batches/summer-2017/templarbit.json" }, { "id": 1727, "name": "Quantstamp", "slug": "quantstamp", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/2dc377e8276c3eddb8f99613f0b90ed45fea6ee7.png", "website": "https://quantstamp.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Quantstamp has protected billions in digital assets from hackers on our mission to secure web3. As a global team of security professionals, we have honed our technology and expertise through hundreds of audits and gained the trust of our clients to keep their innovative products safe.\r\n\r\nIn addition to providing an array of security services, we facilitate the growth and longevity of the web3 space through strategic investments and acting as a trusted advisor to help projects scale. Quantstamp is honored to have worked with some of the top projects in the industry including Aave, Compound, Maker, OpenSea, Polygon and many more.\r\n\r\nAs the leading blockchain security company in this emerging industry, we are always looking for team members that love taking initiative and solving challenging problems. Join the team and help us secure the future of web3.\r\n", "one_liner": "Security auditing for Web3", "team_size": 80, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1509562863, "tags": [ "Crypto / Web3", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/quantstamp", "api": "https://yc-oss.github.io/api/batches/winter-2018/quantstamp.json" }, { "id": 1781, "name": "Vanta", "slug": "vanta", "former_names": [ "Vanta" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0660fb546ece5e50a895e790c299dcaaeeefad32.png", "website": "https://vanta.com", "all_locations": "San Francisco, CA, USA", "long_description": "About Vanta\r\nVanta (YC W18) is the leading automated compliance and trust management platform designed to simplify and centralize compliance and security workflows for organizations of all sizes.\r\n\r\nWhy YC Startups Need Vanta\r\nAs a YC company, proving your security compliance is crucial for hitting new milestones—from finding product market fit, to selling to bigger customers. We would know, we’ve been there—and we’ve helped over 10,000 customers do just that! Vanta's all-in-one solution, combined with expert service partners, helps you quickly and painlessly achieve and maintain compliance with top frameworks—like SOC 2 and ISO 27001—and build a strong security foundation, so you can close bigger deals and scale faster. Learn more at vanta.com.\r\n\r\nYC Companies get Exclusive Discounts on Vanta’s packages:\r\nVanta’s packages for startups are designed to make security and compliance easier, faster, and more cost-effective. Whether you’re closing your first deal or gearing up for growth, our all-in-one solution provides the tools necessary to become compliant quickly, demonstrate your security posture, and build a strong security foundation.\r\n\r\nWhy Vanta?\r\n\r\nBuilt for startups: Vanta knows startups. We went through YC in 2018 and have since helped thousands of startups, including YC companies Supabase (YC S20), Fern (YC W23), and Newfront (YC W18) achieve and maintain compliance quickly. Startups like Charityvest (YC S20), BreachRX, and Flo Health have gone from zero to SOC 2 Type I or ISO 27001 certification in 10 days or less with Vanta.\r\n\r\nFuture-proof, feature-rich, automated platform: Vanta’s modular platform is built for the needs of today and tomorrow, including:\r\n* 35+ frameworks spanning security, privacy, industry, geographic, and custom frameworks\r\n* 375+ integrations that automate evidence collection for these frameworks\r\n* 1,200+ automated, hourly tests to ensure real, continuous security—not just at audit time, but all the time\r\n* Pre-built policy templates, lightweight agent for security checks, background checks, cyber insurance, cookie consent management, auditor portal, user access reviews, security awareness training, risk assessments, vendor security reviews, managing vulnerabilities, and more\r\n* Tailored support for early-stage companies: Vanta offers internal, no-cost Customer Success and GRC (compliance) experts, robust technical support, detailed documentation, and a 24/7 chatbot for frequently asked questions.\r\n* (Optional) Purchase Vanta with auditors experienced in your framework and the Vanta platform, or choose from a range of MSP/consulting partners for additional services like penetration tests and virtual CISO support—some at no cost. We don’t force vendor lock-in.\r\n* Transparent pricing and promises: Vanta strives to do what it says on the tin: we believe in setting and meeting customer expectations. We offer flexible contracts, fair and transparent pricing, and publish our support metrics. We prefer to focus on helping customers succeed and let them explain why they chose us over others—check out our G2 reviews and customer case studies!\r\n\r\nProven market leader and well-funded: Vanta was founded in 2018 and has raised $350M with over 700 employees. We’ve guided over 10,000 customers through their first or multiple audit cycles for various frameworks. These customer learnings and our funding help drive a fast pace of product development to delight customers and ensure Vanta will be there for you in the future.\r\n\r\nInterested in seeing why Upflow (YC W20), Tailor (YC S22), and hundreds of other YC companies trust Vanta to automate compliance so they can focus on scaling? Reach out to our team at yc@vanta.com to get started!", "one_liner": "Vanta—the proven leader in automated compliance helping startups…", "team_size": 700, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1509678272, "tags": [ "B2B", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/vanta", "api": "https://yc-oss.github.io/api/batches/winter-2018/vanta.json" }, { "id": 1786, "name": "EnvKey", "slug": "envkey", "former_names": [ "EnvKey", "Plandex" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1e132ca0e6ddbcae5090360eedff8684f41d05ef.png", "website": "https://envkey.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "EnvKey is a developer-friendly, cross-platform, end-to-end encrypted configuration and secrets manager. It can be used to store API keys, database credentials, and other application config securely. \r\n\r\nEnvKey makes it easy to grant least-privilege access to the developers and servers that need it from a user-friendly UI. Integration takes minutes.\r\n\r\nUsing EnvKey ensures that no 3rd party, including EnvKey itself, ever has access to your secrets. \r\n\r\nIt takes a part of your system that used to be error-prone and insecure and makes it just work.", "one_liner": "End-to-end encrypted configuration and secrets management", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1509724938, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Inactive", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/envkey", "api": "https://yc-oss.github.io/api/batches/winter-2018/envkey.json" }, { "id": 1793, "name": "Sqreen", "slug": "sqreen", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d891f44fe59b3c6d5bbb6ce15c0d60af544b9b8.png", "website": "https://www.sqreen.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Sqreen is the application security platform for the modern enterprise. More than 800 organizations trust Sqreen to protect, observe and test their applications, APIs and microservices. As opposed to pattern-based approaches, Sqreen analyses in-app execution in real time to deliver more robust security without compromising performance.", "one_liner": "Sqreen is the application security platform for the modern enterprise", "team_size": 120, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1510027359, "tags": [ "DevSecOps", "B2B", "Security" ], "tags_highlighted": [], "top_company": true, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/sqreen", "api": "https://yc-oss.github.io/api/batches/winter-2018/sqreen.json" }, { "id": 1863, "name": "Anjuna", "slug": "anjuna", "former_names": [ "Anjuna Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b5b0d847ce1f2270b7fa71e371516e2163c704ac.png", "website": "https://www.anjuna.io", "all_locations": "Palo Alto, CA, USA", "long_description": "Anjuna makes hardware-grade application and data protection simple, fast and enterprise-ready. Anjuna software enables IT to “lift and shift” applications and data into the hardware-encrypted confines of a secure enclave, protecting them from malicious software, insiders, and bad actors. Available from every major chip, cloud, and system vendor, secure enclaves are the data security gold standard. Unlike point memory-only enclave solutions that require expensive and complicated software rewrites, Anjuna enables enterprises to achieve managed enterprise-class enclave protection that span memory, storage, networks, and clouds in minutes--without recoding. Anjuna is based in Palo Alto, California.", "one_liner": "Anjuna enabled organizations to trust any infrastructure", "team_size": 55, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1512586952, "tags": [ "Cloud Workload Protection", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2018", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/anjuna", "api": "https://yc-oss.github.io/api/batches/winter-2018/anjuna.json" }, { "id": 1903, "name": "Federacy", "slug": "federacy", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/92f7e4043272afb2d32ff9d60730c4894c817ea3.png", "website": "http://www.federacy.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Penetration testing and bug bounty platform.", "one_liner": "Penetration testing and bug bounty platform.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1524625566, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2018", "status": "Active", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/federacy", "api": "https://yc-oss.github.io/api/batches/summer-2018/federacy.json" }, { "id": 1942, "name": "Tall Poppy", "slug": "tall-poppy", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/dea1b3e7cb043f7da1f6f8f5cf22b81184391a3d.png", "website": "https://tallpoppy.com", "all_locations": "San Francisco, CA, USA; Ottawa, ON, Canada", "long_description": "Tall Poppy is building tools and services to make personal digital safety accessible to everyone. Founded in 2018, we work both proactively to help prevent harassment from escalating, and also provide expert incident response services when people come under attack.", "one_liner": "Protecting your employees against online harassment", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Human Resources", "launched_at": 1525143912, "tags": [ "Security", "HR Tech" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2018", "status": "Active", "industries": [ "B2B", "Human Resources" ], "regions": [ "United States of America", "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/tall-poppy", "api": "https://yc-oss.github.io/api/batches/summer-2018/tall-poppy.json" }, { "id": 11921, "name": "Fuzzbuzz", "slug": "fuzzbuzz", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8e18fbf6ea3daeba8a461bb43e6d3c1a33db734b.png", "website": "", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "Fuzzing as a Service", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1540951464, "tags": [ "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2019", "status": "Acquired", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/fuzzbuzz", "api": "https://yc-oss.github.io/api/batches/winter-2019/fuzzbuzz.json" }, { "id": 11962, "name": "Dyneti Technologies", "slug": "dyneti-technologies", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5968cca6e04e884fd577a2dfa8625bff7bd3a262.png", "website": "http://www.dyneti.com", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "Reduce payment fraud", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1541124184, "tags": [ "Payments", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2019", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/dyneti-technologies", "api": "https://yc-oss.github.io/api/batches/winter-2019/dyneti-technologies.json" }, { "id": 12070, "name": "Doppler", "slug": "doppler", "former_names": [ "Doppler Technologies", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/66a107c5c83003596991722f8d3d73d13a0b6da2.png", "website": "https://doppler.com", "all_locations": "Remote", "long_description": "Your central source of truth from local development to production for every language, stack, and infrastructure. Doppler simplifies secrets management so you can automate security, eliminate config drift, and deliver reliable software fast.", "one_liner": "Secure secrets. Prevent breaches. Keep teams moving.", "team_size": 25, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1592193583, "tags": [ "Developer Tools", "DevSecOps", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2019", "status": "Active", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/doppler", "api": "https://yc-oss.github.io/api/batches/winter-2019/doppler.json" }, { "id": 12615, "name": "LunaSec", "slug": "lunasec", "former_names": [ "Refinery Labs" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/acc3150187be7fce01784994ec62525354b915cd.png", "website": "https://www.lunasec.io", "all_locations": "Seattle, WA, USA; Remote", "long_description": "LunaSec is dead, fyi. Please email me personally to get in touch!\r\n\r\n-----\r\n\r\nLunaTrace isn't just another security scanner that blasts you with vulnerabilities. LunaSec has developed a hosted Open Source dependency security tool that is smarter, faster, and quieter than any other. It's backed by a team of security experts who monitor the latest attacks, write remediation guides, and help you patch in hours instead of weeks.\r\n\r\nIn under 2 minutes, for free, you can generate your own vulnerability report to gain insight into the security + compliance of your software by clicking here: https://lunatrace.lunasec.io/\r\n\r\nEmail us at: contact@lunasec.io\r\nOur GitHub: https://github.com/lunasec-io/lunasec", "one_liner": "An Open Source dependency security tool that is smarter than the rest", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1556642382, "tags": [ "Developer Tools", "DevSecOps", "Security Orchestration, Automation and Response (SOAR)", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2019", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/lunasec", "api": "https://yc-oss.github.io/api/batches/summer-2019/lunasec.json" }, { "id": 13177, "name": "Visual One", "slug": "visual-one", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6a78220f8f6def3c3319ea972ceaee2aae0b7150.png", "website": "https://www.visualone.tech", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "AI for security cameras", "team_size": 4, "industry": "Consumer", "subindustry": "Consumer -> Consumer Electronics", "launched_at": 1583965888, "tags": [ "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2020", "status": "Inactive", "industries": [ "Consumer", "Consumer Electronics" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/visual-one", "api": "https://yc-oss.github.io/api/batches/winter-2020/visual-one.json" }, { "id": 13311, "name": "Riot", "slug": "riot", "former_names": [ "Riot Security Inc.", "Riot Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/36131ce5d03d467ffcb131f3d5407fb52c9be6d9.png", "website": "https://tryriot.com/", "all_locations": "Paris, Île-de-France, France", "long_description": "Riot is a SaaS platform to easily set up a cybersecurity awareness program for teams. We're making tools to protect your employees, and therefore protecting your company.", "one_liner": "Cybersecurity awareness for fast growing companies", "team_size": 150, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1584494110, "tags": [ "SaaS", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/riot", "api": "https://yc-oss.github.io/api/batches/winter-2020/riot.json" }, { "id": 21885, "name": "Swif.ai", "slug": "swif-ai", "former_names": [ "BlaBla EdTech", "BlaBla Live", "Swifteam", "Inc.", "Swifteam", "Swif" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3f00f6931229f64701cd737b9839f92f72e20005.png", "website": "https://www.swif.ai", "all_locations": "Sunnyvale, CA, USA", "long_description": "Swif.ai is a real-time device compliance and security platform that keeps every Mac, Windows, and Linux endpoint secure and audit-ready. Our lightweight agent enforces policies (encryption, patching, app controls) as people work, auto-remediates drift, and streams audit evidence to tools like Vanta and Drata. Unlike legacy MDM or “after-the-fact” compliance software, Swif.ai delivers enforcement—not just reports—plus device-level Shadow IT/AI governance to detect and block risky or unauthorized SaaS and LLM tools.\r\n\r\nEnterprises choose Swif.ai for true multi-OS coverage in a single pane of glass, one-click remediation, and fast time-to-value via silent installers and native integrations with Okta, Microsoft Entra ID, and Google Workspace (conditional access by device posture). The result is fewer tools to manage, shorter audits, and stronger security with lower operational burden. Swif.ai is SOC 2 Type II. Our near-term roadmap adds Safe-AI controls for regulated industries, AI-agent monitoring, and integrated vulnerability detection with one-click fixes—expanding our lead as the enforcement layer for endpoint compliance and AI security.", "one_liner": "The guardrail for AI on every device", "team_size": 20, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597360094, "tags": [ "SaaS", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2020", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": true, "url": "https://www.ycombinator.com/companies/swif-ai", "api": "https://yc-oss.github.io/api/batches/summer-2020/swif-ai.json" }, { "id": 21917, "name": "Vectrix", "slug": "vectrix", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9315542ed06d8a722e5739c5365aceb689b1d937.png", "website": "https://www.vectrix.io", "all_locations": "San Francisco, CA, USA", "long_description": "As organizations around the world continue to rapidly adopt SaaS applications as the way they run their businesses, many are left without a way to manage the security of those same applications.\r\n\r\nCorporate IT and security teams are left asking questions like:\r\n- How will I know if someone shares a sensitive Google Doc publicly?\r\n- What if one of our employees doesn't have two-factor authentication enabled in Zoom?\r\n- Will I know when a new user is added to Slack?\r\n- What happens if our Salesforce minimum password setting isn't strong enough?\r\n\r\nWith Vectrix's easy-to-use SaaS security scanning, organizations everywhere can quickly identify security issues and risks like these across their entire suite of SaaS apps, including Google Workspace, Microsoft 365, Slack, Zoom, GitHub, and more.\r\n\r\nWhen new issues arise, IT and security teams can be alerted in real-time so that further action can be taken right away.\r\n\r\nFounded by former security professionals from Autodesk, Vimeo, and PlanGrid, Vectrix is committed to providing teams of all sizes an efficient and reliable way to stay secure in the public cloud.\r\n\r\nGet started at https://www.vectrix.io", "one_liner": "Scan your SaaS apps and instantly identify security issues", "team_size": 7, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1597513135, "tags": [ "SaaS", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2020", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/vectrix", "api": "https://yc-oss.github.io/api/batches/summer-2020/vectrix.json" }, { "id": 22632, "name": "authzed", "slug": "authzed", "former_names": [ "Petricorp", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/ee578b781cb190a51362b9fda6dc57b36d74972d.png", "website": "https://authzed.com", "all_locations": "New York, NY, USA; Remote", "long_description": "We build the tools companies need to provide performant and scalable authorization for their applications.\r\n\r\nWe’re founded by 3 successful entrepreneurs with expertise in enterprise software, most recently as leaders at Red Hat. Jake and Joey met on the APIs team at Google in 2010. They went on to found Quay, where Jimmy joined as their first hire. Over the past decade, they’ve changed the landscape for building and deploying software.", "one_liner": "Authorization Infrastructure securing AI at OpenAI, Zoom, & more", "team_size": 31, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1624982412, "tags": [ "Artificial Intelligence", "Developer Tools", "Security", "Open Source", "Data Engineering" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/authzed", "api": "https://yc-oss.github.io/api/batches/winter-2021/authzed.json" }, { "id": 22696, "name": "SlashAuth", "slug": "slashauth", "former_names": [ "Debrief LLC", "Debrief", "Slashauth" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/55dabb2d8e44ccdfc31cc1dc05a399fd89a0cfc9.png", "website": "https://www.slashauth.com", "all_locations": "San Francisco, CA, USA", "long_description": "Slashauth builds a developer platform for web3 enabled apps. Slashauth’s platform provides login functionality, role based access control, data storage, and more to any web3 enabled application.", "one_liner": "The solution for fine-grained access control in web3", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1615518240, "tags": [ "Crypto / Web3", "B2B", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Inactive", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/slashauth", "api": "https://yc-oss.github.io/api/batches/winter-2021/slashauth.json" }, { "id": 22698, "name": "Observa", "slug": "observa", "former_names": [ "21 Ravens", "Crucial Detection", "Observa Intel" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8638f021fb4b288aa57f3981a3a65637300055bc.png", "website": "https://www.observa.com", "all_locations": "Remote", "long_description": "", "one_liner": "Catch accidental database exposures before the bad guys", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1621265976, "tags": [ "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/observa", "api": "https://yc-oss.github.io/api/batches/winter-2021/observa.json" }, { "id": 22781, "name": "Cyble", "slug": "cyble", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f1559fe73a2c1a1b683d40299a231a3a0becfe24.png", "website": "https://cyble.com/", "all_locations": "San Francisco, CA, USA", "long_description": "To reimagine cybersecurity with an AI-native platform that unifies detection, protection and remediation across the digital attack surface\r\n\r\nHeadquartered in Alpharetta, Georgia, and with offices in Australia, Malaysia, Singapore, Dubai, Saudi Arabia and India, Cyble has a global presence. To learn more about Cyble, visit www.cyble.com.  ", "one_liner": "Cyble - World’s First Intelligence-Driven, AI-Native Security…", "team_size": 197, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1613603669, "tags": [ "SaaS", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/cyble", "api": "https://yc-oss.github.io/api/batches/winter-2021/cyble.json" }, { "id": 23174, "name": "Feroot Security", "slug": "feroot-security", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1070c02900596bd056caf454feb7a0bd8add2715.png", "website": "https://www.feroot.com", "all_locations": "Toronto, ON, Canada", "long_description": "Feroot (YC W21) is the leading compliance and security platform for b2b websites that helps you easily achieve and maintain compliance with PCI DSS 4.0.1, CCPA, CIPA, HIPAA and 50+ data privacy regulations.", "one_liner": "AI-powered Compliance Platform for PCI 4, CCPA, HIPAA, CIPA, 50+ laws", "team_size": 24, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1630247607, "tags": [ "Compliance", "Security", "Privacy" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/feroot-security", "api": "https://yc-oss.github.io/api/batches/winter-2021/feroot-security.json" }, { "id": 23978, "name": "Rootly", "slug": "rootly", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/458bec513b681478458c39da4795bf6502d09edb.png", "website": "https://rootly.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Rootly is a modern on-call and incident management platform used by top YC companies like Dropbox, Lattice, Webflow, Faire, but also Figma, LinkedIn, NVIDIA and 100s more.", "one_liner": "AI-native on-call and incident response carefully crafted to help…", "team_size": 75, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1625761934, "tags": [ "AIOps", "Developer Tools", "SaaS", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/rootly", "api": "https://yc-oss.github.io/api/batches/summer-2021/rootly.json" }, { "id": 24207, "name": "Keyri", "slug": "keyri", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9d204b37489e1bf0407fdab24bd4c6ec609fffd5.png", "website": "https://keyri.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Keyri helps companies implement simple, secure anti-fraud and authentication solutions to delight users and keep bad actors off their platform. Keyri's mobile application and browser fingerprinting suite ties user identities to trusted devices, preventing fraudulent activity such as account opening, account takeovers, bot attacks, and referral/promo abuse. Keyri is able to establish an immutable device fingerprint for every device, alerting companies of any suspicious devices during sign up, log in, or subsequent authentication events.\r\n\r\nKeyri also offers a passwordless authentication suite that leverages Passkeys, WebAuthn, and QR codes to enable biometric authentication on all platforms and devices, providing a seamless user experience, strengthening multi-factor account security, and reducing reliance on other tedious and unsecure authentication methods.", "one_liner": "Secure fraud prevention and authentication platform for developers", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1627569946, "tags": [ "SaaS", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/keyri", "api": "https://yc-oss.github.io/api/batches/summer-2021/keyri.json" }, { "id": 24275, "name": "Cloudanix", "slug": "cloudanix", "former_names": [ "Cloudanix Inc" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1209d6739765a764083573c7a354abcbce2fe009.png", "website": "https://www.cloudanix.com", "all_locations": "Sunnyvale, CA, USA", "long_description": "We help DevOps teams to improve the security of their Cloud infrastructure. Our solution value increases for companies using multi-cloud (like GCP, Azure, AWS) or have multi-accounts (like Dev, Test, Prod)", "one_liner": "Cloud and Container Security Platform", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1625633604, "tags": [ "Cloud Workload Protection", "DevSecOps", "Identity", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/cloudanix", "api": "https://yc-oss.github.io/api/batches/summer-2021/cloudanix.json" }, { "id": 24604, "name": "Telivy", "slug": "telivy", "former_names": [ "Telivy", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c2b737c315b075b967ccb0e8aa0683e1b37cef2.png", "website": "https://www.telivy.com", "all_locations": "San Francisco, CA, USA", "long_description": "Telivy helps small and medium businesses purchase the best cyber insurance coverage. Our proprietary ML-based risk platform assesses insurability gaps, offers remediation plans and brokers insurance quotes from A+ rated carriers. ", "one_liner": "Automate your cyber security risk assessments", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1629349306, "tags": [ "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/telivy", "api": "https://yc-oss.github.io/api/batches/summer-2021/telivy.json" }, { "id": 24679, "name": "idemeum", "slug": "idemeum", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/114a9a76a8ee453baff49fa40d74bd24651c0907.png", "website": "https://www.idemeum.com", "all_locations": "Palo Alto, CA, USA; Remote", "long_description": "AI agents analyze every application execution on Windows and macOS. You decide what is allowed to run. ", "one_liner": "AI-powered Application Control", "team_size": 10, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626910054, "tags": [ "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/idemeum", "api": "https://yc-oss.github.io/api/batches/summer-2021/idemeum.json" }, { "id": 24725, "name": "ContraForce", "slug": "contraforce", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/432a4f78b4ff1733ad967eccea1a465f5a83c959.png", "website": "https://www.contraforce.com", "all_locations": "McKinney, TX, USA; Remote", "long_description": "ContraForce delivers a first-of-its-kind Security Delivery Platform that automates security engineering, AI-operator workflows, and multi-tenant incident response for Service Providers and Teams. Our platform orchestrates supervised or autonomous AI agents to run triage, investigation, response, and documentation at scale.", "one_liner": "Security Delivery Platform to orchestrate AI agents for Service…", "team_size": 15, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1626391321, "tags": [ "SaaS", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/contraforce", "api": "https://yc-oss.github.io/api/batches/summer-2021/contraforce.json" }, { "id": 24787, "name": "Squire.ai", "slug": "squire-ai", "former_names": [ "Codex", "CODEOWNERS", "CODEOWNERS (fka Codex)", "EchoLayer", "EchoLayer (fka Codex)", "Squire.ai (fka EchoLayer)" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8972703d81fdbb75413d24021353cf5ed0937ec2.png", "website": "https://squire.ai", "all_locations": "San Francisco, CA, USA; Canada", "long_description": "Squire is a devtool that works with you by writing pull request descriptions, reviewing PRs, and writing code to implement code review feedback.", "one_liner": "Never code alone.", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1627487920, "tags": [ "Artificial Intelligence", "Developer Tools", "SaaS", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2021", "status": "Inactive", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "United States of America", "Canada", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/squire-ai", "api": "https://yc-oss.github.io/api/batches/summer-2021/squire-ai.json" }, { "id": 25061, "name": "Optery", "slug": "optery", "former_names": [ "Optery", "Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/02ca984c664acd671be4123ea5824a7fbc55c95c.png", "website": "https://www.optery.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Optery is automated opt out software, and we serve individuals, families and businesses. With Optery, you can remove yourself from hundreds of data brokers that are posting and selling your home address, phone number, email and other private information on the internet. \r\n\r\nOptery received the “Editors’ Choice” award by PCMag as the most outstanding product in the personal data removal category in 2022, 2023, 2024, 2026 and 2026, the Cybersecurity Excellence Awards for Attack Surface Management, Digital Footprint Management, and Employee Privacy Protection in 2024 and 2025, Cyber Defense Magazine’s Top InfoSec Innovator and Best Attack Surface Management awards in 2024 and 2025, the 2025 Fortress Cybersecurity Award for Privacy Enhancing Technologies, and Fast Company’s Next Big Things in Tech award for security and privacy in 2023. In 2025, Optery was also listed by Business Insider as one of 30 early-stage startups most likely to become a unicorn.\r\n\r\nOptery prevents phishing and social engineering, identity theft and fraud, online stalking and harassment, ransomware, doxxing, and prevents people's private information from showing up in Google search results. \r\n\r\nAnyone can create a free account to receive a personalized Exposure Report with live screenshots summarizing where your information is being posted and sold online. Optery then provides free tools for self-service removals, or you can upgrade to a paid plan, and Optery will remove the profiles for you.\r\n\r\nOptery for Business serves enterprises removing personal information from the internet for their employees and executives, and offers an API enabling application developers to embed data broker scanning and removal technology into their applications.", "one_liner": "Opt out software that removes your private info from the internet", "team_size": 55, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1634074023, "tags": [ "SaaS", "Consumer", "Security", "Privacy", "Enterprise Software" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/optery", "api": "https://yc-oss.github.io/api/batches/winter-2022/optery.json" }, { "id": 25275, "name": "Strac", "slug": "strac", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5810f2cdca1ab3fedc5a811643be13d5387e300c.png", "website": "https://www.strac.io/", "all_locations": "Seattle, WA, USA", "long_description": "Strac is an agentless Data Discovery (aka DSPM - Data Security Posture Management), Data Classification & DLP (Data Leak Prevention) that automatically discovers, classifies and remediates sensitive data (alert, label, redact, mask, block, delete). \r\n\r\nStrac protects SaaS, Cloud, Gen AI, Browsers, On-Prem and Endpoints like O365, Slack, GDrive, AWS, Salesforce, ChatGPT, Jira, Mac, Zendesk, Azure, On-Prem (On-Prem, MS SQL SAP) and 40+ integrations. \r\n\r\nStrac protects enterprise companies like UiPath, Databricks, thredUP, B Capital, Crypto (dot) com!", "one_liner": "Data Discovery, DLP, DSPM for SaaS, Cloud, Gen AI & Endpoints", "team_size": 8, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1641604614, "tags": [ "Generative AI", "SaaS", "Security", "Enterprise", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/strac", "api": "https://yc-oss.github.io/api/batches/winter-2022/strac.json" }, { "id": 25306, "name": "WorldQL", "slug": "worldql", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/77812b9a6c46bc50c4a0b0326c080c241d029714.png", "website": "https://www.worldql.com/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "", "one_liner": "Custom AI harnesses for enterprises", "team_size": 4, "industry": "B2B", "subindustry": "B2B", "launched_at": 1648654841, "tags": [ "Artificial Intelligence", "Reinforcement Learning", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/worldql", "api": "https://yc-oss.github.io/api/batches/winter-2022/worldql.json" }, { "id": 25433, "name": "JumpWire", "slug": "jumpwire", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/077148a8281f282d5a5d6825d93aedf0b71c08b4.png", "website": "https://jumpwire.io", "all_locations": "New York, NY, USA; Remote", "long_description": "JumpWire is a data protection platform that adds advanced data security controls between APIs, applications and databases. JumpWire automatically identifies sensitive properties inside large data sets and gives developers full control over which people and applications can access or update records containing sensitive info.\r\n\r\nExamples uses include restricting who can read customer PII to members of the customer service team, giving on-call engineers elevated access to production, or splitting user records between regions for GDPR purposes.\r\n\r\nJumpWire’s approach to securing data in-place minimizes the risk of data leaks exposing sensitive information or mishandling by other applications and vendors. The exact security scheme applied to data is defined by policies that align with an organization’s existing InfoSec program.\r\n\r\nJumpWire helps companies who maintain information security with compliance programs such as SOC or HIPAA. They are processing sensitive data, often from their own customers, and exceed security best practices as a competitive advantage. JumpWire provides defense at depth to data and sits alongside access controls and Layer 4 encryption to provide a comprehensive data security solution.\r\n\r\nJumpWire is unique from solutions such as data vaults by installing inside our customers’ own infrastructure and clouds. It is interoperable with existing applications and databases, which eliminates the need for large data migrations or code refactoring. Lower-level approaches to data security, such as encryption at rest, are too blunt and lack the ability to differentiate between properties in the data itself. Its scope is limited to physical storage, and security is lost as soon as an application or query loads the data.", "one_liner": "Dynamic access controls for all data and databases", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1644446688, "tags": [ "Security", "Data Labeling", "Databases" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/jumpwire", "api": "https://yc-oss.github.io/api/batches/winter-2022/jumpwire.json" }, { "id": 25552, "name": "Firezone", "slug": "firezone", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/d77ec2f6117521699894a917f49c85927da9cf8f.png", "website": "https://www.firezone.dev", "all_locations": "San Francisco, CA, USA", "long_description": "Firezone connects your workforce to the computing resources they need, wherever they are, securely. Unlike traditional VPNs, Firezone uses a least-privileged approach to access control known as Zero Trust Access.\r\n\r\nConnect your identity provider and define granular policies in minutes, then rejoice in the IT support requests you won't receive due to our lightweight, WireGuard-powered clients which work great on all platforms.", "one_liner": "Easiest way to set up Zero Trust Access for your team", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1646247402, "tags": [ "DevSecOps", "Next-gen Network Security", "B2B", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/firezone", "api": "https://yc-oss.github.io/api/batches/winter-2022/firezone.json" }, { "id": 25583, "name": "Bunkyr", "slug": "bunkyr", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/bab71568a30f64680488b01543947e165355c6d6.png", "website": "https://bunkyr.com", "all_locations": "Denver, CO, USA", "long_description": "Bunkyr enables companies to protect their users’ data with a simple, hardware-secured API. When a user forgets their password, applications using Bunkyr can provide them a familiar, robust recovery method to restore access to encrypted data.\r\n\r\nZero-Knowledge architectures and end-to-end encryption are the only true safeguards against data breaches, but come with large user-experience burdens and engineering overhead. Bunkyr eliminates these obstacles in a way that is friendly to both developers and users, cost-effective, and extremely fast.\r\n\r\nUsers won’t even know Bunkyr exists, while their data stays protected against both breaches and lost passwords.", "one_liner": "Zero-Knowledge security without seed phrases or backup codes", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1646850303, "tags": [ "Developer Tools", "SaaS", "Crypto / Web3", "B2B", "Security" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/bunkyr", "api": "https://yc-oss.github.io/api/batches/winter-2022/bunkyr.json" }, { "id": 25589, "name": "Palitronica Inc", "slug": "palitronica-inc", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f4754ff74fb207d2ef16e60bc4582800b2583251.png", "website": "https://palitronica.com", "all_locations": "Kitchener, ON, Canada; Remote", "long_description": "Palitronica builds and deploys cutting-edge solutions to defend critical physical infrastructure and its supply chain.\r\n\r\nBy using side-channel information from endpoints, Palitronica provides a safe attack detection capability retrofittable to critical systems.", "one_liner": "Detect cyber attacks on critical physical infrastructure", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1639062247, "tags": [ "Hard Tech", "Hardware", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Canada", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/palitronica-inc", "api": "https://yc-oss.github.io/api/batches/winter-2022/palitronica-inc.json" }, { "id": 25696, "name": "Agency", "slug": "agency", "former_names": [ "Achilleion" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0b9732a89bf577bd80a0c7d0b377bd35fcce86ce.png", "website": "https://GetAgency.com", "all_locations": "New York, NY, USA", "long_description": "Agency replaces traditional security and compliance headcount with AI without replacing your existing tools.\r\n\r\nOur platform is operated by forward-deployed engineers who run your entire security and compliance program including full virtual CISO coverage on your behalf. All powered by our proprietary AI agents.\r\n\r\nAgency is a vertically integrated AI platform and services company that enables organizations to achieve and maintain SOC 2, ISO 27001, CMMC 2.0, HIPAA, GDPR, FedRAMP, HITRUST, ISO 42001, and more without building internal teams. We integrate with leading GRC platforms like Vanta and Drata and security tools like CrowdStrike.\r\n\r\nAt its core is our proprietary cybersecurity and GRC orchestration layer powering a suite of AI systems that execute end-to-end security and compliance operations: control implementation, evidence collection, monitoring, vendor risk, penetration testing, and audit coordination — across complex environments like BYODs, contractor fleets, and multi-party systems. Things that GRC automation platforms can't do.\r\n\r\nWe deliver this through two distinctly separate products:\r\n\r\nAgency Comply — forward-deployed engineers who operate the platform, implement controls, run compliance programs, and manage security end-to-end\r\n\r\nAuditsuisse Assurance — our US and Swiss licensed CPA firm, powered by Auditsuisse AI, delivering independent SOC and global audits with speed and rigor. (Auditsuisse does not audit Agency Comply customers).\r\n\r\nAgency serves startups through enterprises building in high-stakes environments — AI, defense, aerospace, fintech, and healthcare — replacing fragmented tools and large internal teams with a single AI-driven system of execution.", "one_liner": "Agency replaces traditional security and compliance headcount with AI.", "team_size": 50, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1641532353, "tags": [ "SaaS", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/agency", "api": "https://yc-oss.github.io/api/batches/winter-2022/agency.json" }, { "id": 25697, "name": "Prembly (formerly Identitypass)", "slug": "prembly", "former_names": [ "Identitypass", "Prembly" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/c11b529afd406376db5eecdb08ae765601c28526.png", "website": "https://prembly.com/", "all_locations": "Lagos, LA, Nigeria; Remote", "long_description": "We are making it possible for digital businesses to easily verify individuals and businesses within seconds across Emerging Markets.", "one_liner": "Identity Verification API for Emerging Markets", "team_size": 80, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1640573428, "tags": [ "B2B", "Identity", "Security", "API" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "Nigeria", "Africa", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/prembly", "api": "https://yc-oss.github.io/api/batches/winter-2022/prembly.json" }, { "id": 25937, "name": "Argument Computer Corporation", "slug": "argument-computer-corporation", "former_names": [ "Yatima Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/b018aec0c7e89471028397fc469f207047365435.png", "website": "https://argument.xyz", "all_locations": "Boston, MA, USA; Remote", "long_description": "Argument combines zero-knowledge cryptography, formal verification and distributed consensus technologies to build systems for unbreakable, scalable, private, decentralized software.", "one_liner": "Accelerate verifiable computing", "team_size": 8, "industry": "B2B", "subindustry": "B2B", "launched_at": 1648223638, "tags": [ "Crypto / Web3", "Security", "Cryptography" ], "tags_highlighted": [ "Crypto / Web3" ], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/argument-computer-corporation", "api": "https://yc-oss.github.io/api/batches/winter-2022/argument-computer-corporation.json" }, { "id": 26296, "name": "Reality Defender", "slug": "reality-defender", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5de4d57756c747e087b70e720cbfdb09672b0cc7.png", "website": "http://www.realitydefender.com", "all_locations": "New York, NY, USA", "long_description": "Reality Defender is the market leader in deepfake detection, protecting enterprises and governments from realtime deepfake and agentic fraud. Sign up for free access at https://www.realitydefender.com/api\r\n\r\nWebsite: www.realitydefender.com\r\nContact: ask@realitydefender.com\r\nYC AMA: https://news.ycombinator.com/item?id=30766050\r\n\r\nAwards:\r\n2025 - Gartner: Recognized as Market Leader in Deepfake Detection\r\n2025 - JPMorgan: Inducted into Hall of Innovation\r\n2025 - World Economic Forum: Named Technology Pioneer\r\n2025 - USA DIU + Japan MOD: 1st Place \"Global Innovation Challenge\"\r\n2024 - RSA Conference: 1st Place “Most Innovative Startup”\r\n2024 - SINET16 Innovator Award\r\n2023 - SXSW 1st Place \"Artificial Intelligence, Voice, & Robotics Technologies\"", "one_liner": "Enterprise Deepfake Detection", "team_size": 54, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1647888631, "tags": [ "Artificial Intelligence", "SaaS", "Deepfake Detection", "Security", "Privacy" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/reality-defender", "api": "https://yc-oss.github.io/api/batches/winter-2022/reality-defender.json" }, { "id": 26654, "name": "Wolfia", "slug": "wolfia", "former_names": [ "Inbox Infinity" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/6aca6b5b0b9f6220fccaff77654ee7c479236f62.png", "website": "https://wolfia.com", "all_locations": "Austin, TX, USA; Remote", "long_description": "We help security, legal and sales teams get answers in seconds without depending on subject-matter experts.\r\n\r\nOur AI agent connects to every source that already holds the truth (Google Drive, Notion, Slack, email, website, trust center, SOC 2 docs, etc.). It keeps that knowledge graph fresh on its own and drafts, validates, and formats responses to customer questions, security questionnaires, and RFPs, all in the background, so your team just reviews and ships.", "one_liner": "We help security, legal and sales teams answer customer questions", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Sales", "launched_at": 1658875414, "tags": [ "Generative AI", "Security", "Sales", "LegalTech" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Sales" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/wolfia", "api": "https://yc-oss.github.io/api/batches/summer-2022/wolfia.json" }, { "id": 26847, "name": "Slauth.io", "slug": "slauth-io", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/004f2f17d69c6a7d9b09c060c1c5711e24251d97.png", "website": "https://slauth.io/", "all_locations": "Tel Aviv-Yafo, Tel Aviv District, Israel", "long_description": "Slauth.io generates and rightsizes IAM policies in order to save engineering time and secure the organization. We use PR's to suggest what good functional and secure IAM policies should look like and integrate with IaC (Terraform) to have a seamless end-to-end IAM policy creation and deployment. Save hundreds of DevOps engineering time each year and increase your security to scale faster. \r\n", "one_liner": "The IAM Policy Copilot", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1659357857, "tags": [ "Developer Tools", "DevSecOps", "Productivity", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2022", "status": "Inactive", "industries": [ "B2B", "Infrastructure" ], "regions": [ "Israel", "Middle East and North Africa", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/slauth-io", "api": "https://yc-oss.github.io/api/batches/summer-2022/slauth-io.json" }, { "id": 27162, "name": "Oneleet", "slug": "oneleet", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/35b93ab2671a1397037aa92e0703d5f6c2ec0fba.png", "website": "https://www.oneleet.com/?utm_source=yc&utm_medium=bookface", "all_locations": "", "long_description": "Oneleet helps companies become secure and compliant through an all-in-one solution that combines automated tools and human expertise.\r\n\r\nOneleet has built the second generation of security compliance automation software, providing tools that go beyond what is classically provided for just compliance alone. Tools like a code security scanner, attack-surface management, access reviews and trust portal are all built in.\r\n\r\nAs the most popular, highest rated and most frequently used platform in the YC community, Oneleet has quickly established itself as the preferred and superior alternative to other incumbents.\r\n\r\nThe founder behind Oneleet has spent the past 10+ years helping companies become more secure by performing penetration tests.", "one_liner": "YC's most popular security compliance platform (SOC 2, ISO 27001,…", "team_size": 60, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1657281241, "tags": [ "SaaS", "B2B", "Compliance", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/oneleet", "api": "https://yc-oss.github.io/api/batches/summer-2022/oneleet.json" }, { "id": 27258, "name": "AccessOwl", "slug": "accessowl", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f47d40efa2ec60ceb6de3d5dad85ab504f1c80f.png", "website": "https://www.accessowl.io/", "all_locations": "Berlin, Berlin, Germany; Remote", "long_description": "AccessOwl automates employee SaaS account provisioning and permissioning for any tool. IT teams from companies like Zeplin and Sary save 30 minutes on every request.\r\n\r\nAccess management used to be an enterprise problem. With work from home, exploding SaaS usage and the need for SOC2 certifications startups have the same problems as enterprises. \r\n\r\nMathias and Philip have built several startups and teams before and experienced the same problems around access management over and over again. Philip was the CEO and Co-Founder of blik, an award winning IoT solution that was used by Volkswagen and BMW. Mathias built the leading private payment infrastructure provider in Germany as well as the first digital car insurance as Co-Founder and CTO. Based on these experiences we decided to build a solution we wish we could have used when building our former companies.\r\n\r\nAccessOwl can be deployed within minutes instead of weeks by simply installing a Slack application. We save companies that use AccessOwl 30 minutes for every access request, on- and offboarding. ", "one_liner": "Managing your Employees' Access to SaaS", "team_size": 15, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1655853975, "tags": [ "SaaS", "B2B", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2022", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "Germany", "Europe", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/accessowl", "api": "https://yc-oss.github.io/api/batches/summer-2022/accessowl.json" }, { "id": 27664, "name": "Infisical", "slug": "infisical", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/e613a0916d0e99cf2fa52a3c8be726a00bd6c51a.png", "website": "https://infisical.com", "all_locations": "San Francisco, CA, USA", "long_description": "Infisical is the all-in-one security infrastructure platform for secrets, certificates, and privileged access management.\r\n\r\nInfisical stores your secrets and injects them back into your development workflow, CI/CD pipelines, and cloud infrastructure. It comes with secrets versioning, point-in-time recovery, audit logging, automatic secret rotation capabilities, and more.", "one_liner": "Unified platform for secrets, certs, and privileged access management", "team_size": 50, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1674066953, "tags": [ "Developer Tools", "SaaS", "B2B", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/infisical", "api": "https://yc-oss.github.io/api/batches/winter-2023/infisical.json" }, { "id": 27672, "name": "Blyss", "slug": "blyss", "former_names": [ "Spiral" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a070a3276443496b8e98455f7edba47028991034.png", "website": "https://blyss.dev/", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Blyss is an AI model provider built on strong security guarantees. We run AI workloads in GPU-based secure enclaves, which keep data encrypted even while it's being processed. Our customers get a privacy model similar to on-premises deployment, without ever having to think about AI infrastructure or GPU supply. \r\n\r\nThe Blyss team has strong experience in cryptography and AI from Stanford, Apple, Nvidia, and more. We think data privacy is fundamental to safe, trustworthy AI, so it's our job to make end-to-end encrypted AI a no-compromise option - just like Signal and WhatsApp did for messaging.", "one_liner": "End-to-end encrypted AI.", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1677026433, "tags": [ "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Inactive", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/blyss", "api": "https://yc-oss.github.io/api/batches/winter-2023/blyss.json" }, { "id": 27809, "name": "EdgeBit", "slug": "edgebit", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/129c0d512b87fa767fbbc001172d26269d9a0ab0.png", "website": "https://edgebit.io", "all_locations": "San Francisco, CA, USA", "long_description": "EdgeBit was acquired by FOSSA in July 2025: https://fossa.com/blog/fossa-acquires-edgebit/\r\n\r\nEdgeBit enables engineering teams to ship security updates 10x faster with confidence by automating dependency update analysis. Our platform turns weeks of manual review into minutes, helping teams find and fix security vulnerabilities while maintaining a secure, up-to-date software supply chain without compromising productivity.", "one_liner": "Autofix your software dependencies", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1672965227, "tags": [ "DevSecOps", "B2B", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2023", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/edgebit", "api": "https://yc-oss.github.io/api/batches/winter-2023/edgebit.json" }, { "id": 28216, "name": "Escape", "slug": "escape", "former_names": [ "Escape", "Escape - GraphQL Security", "Escape", "Escape - GraphQL Security", "Escape - Modern Application Security" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/0210bbcb75b7ba7c4519705bd24c324666b9538b.png", "website": "https://escape.tech", "all_locations": "New York, NY, USA", "long_description": "Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows.", "one_liner": "Offensive security for the teams that are 100x outnumbered", "team_size": 29, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1674779031, "tags": [ "Developer Tools", "Security", "API", "GraphQL" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Growth", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/escape", "api": "https://yc-oss.github.io/api/batches/winter-2023/escape.json" }, { "id": 28778, "name": "Xeol", "slug": "xeol", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3d8557d5066f2f1e94f1be8ddc427697b79cc8d1.png", "website": "https://www.xeol.io/", "all_locations": "New York, NY, USA", "long_description": "Pronounced Zee-O-L. \r\n\r\nEnd-of-life (EOL) and outdated software are a black box of vulnerabilities with very limited remediation paths. These 2 factors combine to make managing them a necessary proactive practice. Xeol enables enterprises and Fortune 500s to create a proactive EOL management program that directly contributes to better vulnerability management and lower cyber insurance. ", "one_liner": "Close your outdated dependency attack vector", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1689618282, "tags": [ "Artificial Intelligence", "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2023", "status": "Acquired", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/xeol", "api": "https://yc-oss.github.io/api/batches/summer-2023/xeol.json" }, { "id": 28862, "name": "Corgea", "slug": "corgea", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4f659e1a5051b790e28f097f1c858880dc797b7f.png", "website": "https://www.corgea.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Corgea is an autonomous application security platform that finds and validates vulnerabilities, then generates safe code fixes developers can apply in their existing workflow. In production customers like Zapier and Yageo, see ~20% more true positives and ~90% fewer false positives (vs their prior tooling), reducing triage and speeding remediation without adding headcount.\r\n", "one_liner": "Corgea finds, and fixes insecure code and packages autonomously. ", "team_size": 6, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1686005960, "tags": [ "Developer Tools", "SaaS", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/corgea", "api": "https://yc-oss.github.io/api/batches/summer-2023/corgea.json" }, { "id": 28958, "name": "Rimward", "slug": "rimward", "former_names": [ "Quack AI", "Sourcepulse" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/bd215af97ab581709a04ff6284c6091f29c2058e.png", "website": "https://rimward.ai/", "all_locations": "Paris, Île-de-France, France", "long_description": "Rimward helps operators of solar farms and other remote outdoor infrastructure detect intrusions from existing camera networks. We turn existing CCTV into operator-ready alerts with video verification, so security teams can reduce false alarms, respond faster, and avoid heavy hardware retrofits.\r\n\r\nWe are focused on sites where recurring theft, perimeter intrusion, and low staffing make traditional monitoring noisy and operationally weak. Our approach is software-heavy, field-oriented, and built to work with real site constraints.", "one_liner": "Low-false-positive intrusion detection for remote outdoor sites", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1691807496, "tags": [ "Machine Learning", "Computer Vision", "B2B", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2023", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "France", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/rimward", "api": "https://yc-oss.github.io/api/batches/summer-2023/rimward.json" }, { "id": 29186, "name": "Tesseral", "slug": "tesseral", "former_names": [ "Codomain Data", "Okapi", "SSO Ready", "ssoReady", "SSOReady" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/85992f888276408373d1f33710dd92fd60ae187a.png", "website": "https://tesseral.com", "all_locations": "San Francisco, CA, USA", "long_description": "Tesseral is the open source platform for managing identity and access in business software. It provides enterprise-grade capabilities, including SAML single sign-on, SCIM provisioning, role-based access control, managed API keys, and audit logs, implemented in just a few lines of code. \r\n\r\nTesseral unifies access management for employees, customers, services, and AI agents, giving organizations the flexibility to adapt to any deployment model and the authority to enforce security policies with precision.\r\n\r\nYou can learn more by reading our docs at https://tesseral.com/docs or by checking out our GitHub at https://github.com/tesseral-labs/tesseral.", "one_liner": "The open source platform for managing identity in business software", "team_size": 5, "industry": "B2B", "subindustry": "B2B", "launched_at": 1708399745, "tags": [ "Developer Tools", "SaaS", "Security", "Open Source", "API" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Inactive", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/tesseral", "api": "https://yc-oss.github.io/api/batches/winter-2024/tesseral.json" }, { "id": 29246, "name": "Tracecat", "slug": "tracecat", "former_names": [ "neometrics.ai", "Neometrics" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/13bc35dc5fca68051b65f9b77d4198acae677418.png", "website": "https://tracecat.com", "all_locations": "New York City, NY, USA", "long_description": "Tracecat helps AI-native security teams build agents and automate work.\r\n\r\nUsed by the most demanding security teams in mission-critical environments across defense, finance, federal and more. Open source and community driven at it's core: https://github.com/TracecatHQ/tracecat", "one_liner": "The open source AI-native security automation platform", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1704382841, "tags": [ "Artificial Intelligence", "Security", "Open Source", "Enterprise", "Automation" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/tracecat", "api": "https://yc-oss.github.io/api/batches/winter-2024/tracecat.json" }, { "id": 29324, "name": "PromptArmor", "slug": "promptarmor", "former_names": [ "Board Security Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/f85e50382b3869e84b292235c05317d5db4ab8cd.png", "website": "https://promptarmor.com/", "all_locations": "San Francisco, CA, USA", "long_description": "", "one_liner": "LLM Security and Compliance", "team_size": null, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1702083397, "tags": [ "Generative AI", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/promptarmor", "api": "https://yc-oss.github.io/api/batches/winter-2024/promptarmor.json" }, { "id": 29362, "name": "Pazi", "slug": "pazi", "former_names": [ "GPT Pilot", "Pythagora (GPT Pilot)", "Pythagora" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/39be77a3f81a0c68f20c5bdfe6e6a34a1979d88c.png", "website": "https://pazi.ai/", "all_locations": "", "long_description": "Pazi enables people to build agents that run all operations in a company. You create an agent for a position (eg. developer, devops, social media manager, SDR, etc.), you give it a goal (eg. reach 10k followers on X) and let it create a plan, start checking in with you, oversee how the goal is coming up.", "one_liner": "Platform where autonomous companies are built", "team_size": 7, "industry": "B2B", "subindustry": "B2B -> Engineering, Product and Design", "launched_at": 1709274350, "tags": [ "Developer Tools", "Security", "Web Development", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Engineering, Product and Design" ], "regions": [ "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": true, "url": "https://www.ycombinator.com/companies/pazi", "api": "https://yc-oss.github.io/api/batches/winter-2024/pazi.json" }, { "id": 29374, "name": "Superagent", "slug": "superagent", "former_names": [ "Superagent.sh" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/a5fb7dd012389ddf81869040550578bb786988ed.png", "website": "https://superagent.sh/", "all_locations": "San Francisco, CA, USA", "long_description": "Superagent helps developers make their AI apps safe.\r\n\r\nWe offer:\r\n- Red team testing — specialized attack agents probe your production AI for data leaks, harmful outputs, and unwanted actions\r\n- Structured reports with findings, evidence, and remediation guidance\r\n- A Safety Page to prove it to your customers — use it in sales, procurement reviews, and security questionnaires\r\n\r\nBuilt for companies selling AI into enterprises and regulated industries.", "one_liner": "Red teaming for AI agents", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1701445003, "tags": [ "Artificial Intelligence", "Security", "Open Source", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/superagent", "api": "https://yc-oss.github.io/api/batches/winter-2024/superagent.json" }, { "id": 29405, "name": "Risotto", "slug": "risotto", "former_names": [ "IntelliServe", "OttoHelm" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/490dc349e37f4a2e0e1693e480f1a2993cdb31aa.png", "website": "https://tryrisotto.com", "all_locations": "San Francisco, CA, USA; Remote", "long_description": "Want to apply AI to your IT Helpdesk queue? Risotto helps you grant software access, limit access/permission grants by time, serve knowledge, and get approvals from people like managers. All using natural language directly in chat (AKA \"ChatOps\")\r\n\r\nIT teams spend too much time manually provisioning software and answering the same question repeatedly. We help them improve resolution times, reduce SaaS spend, and enhance security with 24/7 automated software access and IT support. Check us out at: https://www.tryrisotto.com", "one_liner": "Risotto auto-solves IT support requests using AI", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Operations", "launched_at": 1709248167, "tags": [ "Artificial Intelligence", "B2B", "Compliance", "Security", "Enterprise" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Winter 2024", "status": "Active", "industries": [ "B2B", "Operations" ], "regions": [ "United States of America", "America / Canada", "Remote", "Fully Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/risotto", "api": "https://yc-oss.github.io/api/batches/winter-2024/risotto.json" }, { "id": 29729, "name": "Clearly AI", "slug": "clearly-ai", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/9c287d41c131d5c10886a84c3cd7fd46b393f7af.png", "website": "https://clearly-ai.com", "all_locations": "Seattle, WA, USA", "long_description": "Clearly AI automates security and privacy reviews with AI. We performed hundreds of reviews at Amazon and Moveworks and now we're building the product we wish we had. Our users complete reviews in minutes instead of days.\r\n\r\nEmily and Joe are technical co-founders and senior engineers. We met in 2019 while working on an Alexa security review.", "one_liner": "Automate security and privacy reviews", "team_size": 12, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1722269171, "tags": [ "Artificial Intelligence", "Generative AI", "Security", "Privacy", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": true, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": true, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/clearly-ai", "api": "https://yc-oss.github.io/api/batches/summer-2024/clearly-ai.json" }, { "id": 29750, "name": "winfunc", "slug": "winfunc", "former_names": [ "Stition", "Asterisk" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/758cce64094ba9a7250a8b613b368074620a74f5.png", "website": "https://winfunc.com", "all_locations": "San Francisco, CA, USA", "long_description": "Winfunc (winfunc.com) is an AI Hacker that autonomously finds, verifies, and patches security vulnerabilities in codebases, just like a human security engineer would. \r\n\r\nWinfunc can find business logic errors with context-aware scanning and automate the full auditing cycle to generate reports with zero false positives.\r\n\r\nWinfunc's agent has found vulnerabilities in Google, Supabase, Sentry, Cal, Gumroad, Bun, Hoppscotch, etc.", "one_liner": "ai-native security engineering for mission critical codebases", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1723094847, "tags": [ "Artificial Intelligence", "SaaS", "B2B", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/winfunc", "api": "https://yc-oss.github.io/api/batches/summer-2024/winfunc.json" }, { "id": 29812, "name": "ZeroPath", "slug": "zeropath", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/fd70ee2d072b5f54e3fd3fc0e2531e49708b3fa7.png", "website": "https://zeropath.com", "all_locations": "San Francisco, CA, USA", "long_description": "ZeroPath is a developer tool that autonomously detects, verifies, and submits fixes for vulnerabilities in your code. Engineers can use ZeroPath to find security problems that they might only otherwise catch in pentests or from bug bounty researchers.", "one_liner": "Automatically find and fix your software vulnerabilities", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1718222641, "tags": [ "Artificial Intelligence", "Developer Tools", "B2B", "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/zeropath", "api": "https://yc-oss.github.io/api/batches/summer-2024/zeropath.json" }, { "id": 30087, "name": "Gecko Security", "slug": "gecko-security", "former_names": [ "Gecko Security Inc." ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/475ae1459a273ef4827fe78aeed097961151b782.png", "website": "https://gecko.security", "all_locations": "London, United Kingdom", "long_description": "We built Gecko for teams that want to build secure code quickly without wasting time on security tools that don’t deliver results, or relying on one-time human pentests that quickly become outdated. Gecko uses AI to understand how your application should work, simulates relevant attacks to find critical vulnerabilities, and then verifies these vulnerabilities by exploiting them. It also helps you understand the risk of these vulnerabilities and applies a working fix to keep your code secure.", "one_liner": "The AI Security Engineer to Find and Fix Vulnerabilities ", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1729014786, "tags": [ "SaaS", "B2B", "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2024", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United Kingdom", "Europe", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/gecko-security", "api": "https://yc-oss.github.io/api/batches/fall-2024/gecko-security.json" }, { "id": 30407, "name": "Golf", "slug": "golf", "former_names": [ "authed", "Authed", "authed", "Authed" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/cb627188af8a389c044d02fc9024aae3ea05cdd3.png", "website": "https://golf.dev/", "all_locations": "San Francisco, CA, USA", "long_description": "Golf gives enterprises visibility into shadow AI and control over AI agents and MCP. See what's connected, enforce policies, and generate audit trails - all from one place.", "one_liner": "Agentic AI Security and Governance", "team_size": 1, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1745255607, "tags": [ "Artificial Intelligence", "Developer Tools", "Security", "Infrastructure" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/golf", "api": "https://yc-oss.github.io/api/batches/spring-2025/golf.json" }, { "id": 30452, "name": "Better Auth", "slug": "better-auth", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1f768f164c4dd92121e70abbd42713af3118834a.png", "website": "https://better-auth.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Better Auth is a comprehensive authentication framework for TypeScript that lets you implement everything from simple auth flows to enterprise-grade systems directly on your own database, embedded in your backend. It’s loved by developers all over the world and endorsed by leading voices in the ecosystem.\r\n\r\nOn top of the framework, Better Auth also provides an infrastructure layer to help you scale with user management and analytics, bot and fraud detection, transactional email and SMS, global session storage and more.", "one_liner": "The authentication framework for TypeScript", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1744888506, "tags": [ "Developer Tools", "Security", "Open Source" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/better-auth", "api": "https://yc-oss.github.io/api/batches/spring-2025/better-auth.json" }, { "id": 30456, "name": "Tinfoil", "slug": "tinfoil", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/1fb98a08722d6b4a90ad914611f5c3579c0f3558.png", "website": "https://tinfoil.sh", "all_locations": "San Francisco, CA, USA", "long_description": "Tinfoil makes it easy to make your AI workloads secure and provably private. You get the privacy of on-prem deployments, while running on the cloud. It's like end-to-end encrypted messaging but for your AI applications. \r\n\r\nWe’ve built a full-stack platform on top of the latest NVIDIA GPUs offering confidential computing capabilities, meaning that you don’t have to trade off performance for privacy. We integrate a suite of recent advances in secure hardware technologies, in particular NVIDIA’s confidential compute mode available on Hopper and Blackwell. When combined with Tinfoil’s software stack, companies can prove their security claims like \"we can't see and don’t log your queries.” Tinfoil guarantees that all data always stays private and cannot be accessed by anyone other than the end user -- not even by Tinfoil or the cloud provider it’s processed on. Everything can be made end-to-end encrypted and private with Tinfoil. \r\n\r\nThe founding team combines deep academic and industry experience in security and Internet protocols. Tanya was previously a systems engineer at Cloudflare, where she built Internet security protocols used by billions, and contributed to the Workers AI platform. Jules and Sacha hold PhDs from MIT, where they worked on secure hardware, cryptography, and privacy technologies. Jules has also worked at NVIDIA on their confidential computing team. Tinfoil was born from our personal frustration with the false choice between access to powerful AI and the massive data privacy implications of deeply integrated AI.\r\n\r\nAI is a universal tool that becomes part of our personal lives and business workflows. In the process, it needs access to all personal, private, and proprietary data. Right now, the only solutions are data processing agreements (i.e., \"pinky promises\"), band-aids like PII redaction that don't work in practice, or AI locally/on-prem, which doesn't scale. Tinfoil promises to unlock significantly deeper AI adoption and integrations by making it easy to obtain true privacy, just as TLS on the Internet enabled e-commerce to flourish by securing credit cards on the network.\r\n\r\nToday we offer several self-serve products: \r\n\r\n- A consumer-facing chatbot that keeps your chats end-to-end encrypted and provides zero-access inference with powerful open-source models like Kimi, Gemma, and GLM. You can try it out for free: https://chat.tinfoil.sh\r\n\r\n- A developer-friendly API that allows you to build AI applications where all user data is kept private and we as the inference provider cannot see any of the prompts. Our SDKs make sure that all relevant security measures are checked for you before even sending a single byte of data. Learn more:https://docs.tinfoil.sh \r\n\r\n- An advanced confidential computing platform we call Tinfoil Containers that allows you to secure any Docker application. We make it easy to deploy your own logic and applications inside secure enclaves and prove to the world what code is running inside. This enables attested workloads and publicly verifiable privacy policies for sensitive applications. Learn more: https://tinfoil.sh/containers ", "one_liner": "Encrypted AI with verifiable privacy", "team_size": 5, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1744845895, "tags": [ "Artificial Intelligence", "Developer Tools", "Security", "Privacy", "Cloud Computing" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/tinfoil", "api": "https://yc-oss.github.io/api/batches/spring-2025/tinfoil.json" }, { "id": 30535, "name": "Cotool", "slug": "cotool", "former_names": [ "Holtzman" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/206decabd9d62821656d84ac331ecdfb83854063.png", "website": "https://cotool.ai", "all_locations": "San Francisco, CA, USA", "long_description": "Cotool is an agentic security platform that eliminates manual and repetitive work for security teams.\r\n\r\nToday’s cybersecurity teams remain bogged down by alert fatigue, context switching, and documentation overhead. Security teams don't need more dashboards with \"AI-powered insights\" — they need their time back.\r\n\r\nCotool empowers teams to build security their way. Our platform provides an AI co-pilot that automatically assembles context across tools, a no-code agent builder that transforms successful investigations into reusable automations, and automated report generation, providing comprehensive documentation in seconds.\r\n\r\nUnlike solutions that force teams to adapt to vendor workflows, Cotool puts the power of AI directly in practitioners' hands, letting them shape tools around their unique processes. Early users have already cut time spent on investigation and detection engineering by 70%.", "one_liner": "AI Agents for Security Operations Teams", "team_size": 4, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1747110142, "tags": [ "SaaS", "Compliance", "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/cotool", "api": "https://yc-oss.github.io/api/batches/spring-2025/cotool.json" }, { "id": 30651, "name": "Alter", "slug": "alter", "former_names": [ "Alter AI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/3a30946452aaca1a7c8b4b8fefafd9807f194243.png", "website": "https://alterauth.com", "all_locations": "New York, NY, USA", "long_description": "Alter is a zero-trust identity and access control platform purpose-built for AI agents. It wraps every tool call in strong authentication, fine-grained authorization, and real-time guardrails, so agents can move fast without breaking things.\r\n\r\nEach request is verified at the parameter level, authorized against granular policies, executed with least-privilege access, and fully audited in real time. Unsafe actions, whether it’s a rogue DROP TABLE or a payment above policy limits, are blocked before they touch production. Behind the scenes, Alter manages credentials, issuing ephemeral, scope-narrowed access for every interaction, then rotating or expiring it in seconds. The result: no long-lived secrets, no blind spots, and no surprises in audit.\r\n\r\nWith Alter, teams can move fast on AI agent initiatives while staying fully compliant with SOC 2, HIPAA, GDPR, and internal security standards. A CISO-ready dashboard delivers real-time visibility, detailed audit logs, and compliance-ready controls, removing silos, eliminating excessive permissions, and providing complete oversight of every agent workflow.", "one_liner": "Secure access control and authorization platform for agent workflows", "team_size": 2, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1752476002, "tags": [ "AIOps", "Developer Tools", "DevSecOps", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/alter", "api": "https://yc-oss.github.io/api/batches/summer-2025/alter.json" }, { "id": 30702, "name": "TwentyTwo", "slug": "twentytwo", "former_names": [ "Muon", "Mohi" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/5be6b2304553a4bca9bfa1f2953ae02638a8d430.png", "website": "https://twentytwo.bio/", "all_locations": "New York, NY, USA", "long_description": "AI is making biology easy to engineer. Life-saving drugs and therapies are accelerating, but so is the ability for bad actors to create a pandemic. TwentyTwo is working on the defensive stack to prevent the next pandemic.", "one_liner": "AI infrastructure for biosecurity", "team_size": 3, "industry": "Healthcare", "subindustry": "Healthcare -> Industrial Bio", "launched_at": 1753262535, "tags": [ "Artificial Intelligence", "Synthetic Biology", "Biotech", "Compliance", "Security" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2025", "status": "Active", "industries": [ "Healthcare", "Industrial Bio" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/twentytwo", "api": "https://yc-oss.github.io/api/batches/summer-2025/twentytwo.json" }, { "id": 30875, "name": "Veria Labs", "slug": "veria-labs", "former_names": [], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/4a840ecd92ea1ebab3e7fa406ce9389683fe9208.png", "website": "https://verialabs.com", "all_locations": "San Francisco, CA, USA", "long_description": "Veria Labs is developing AI agents that hack better than the best human hackers. Founded by members of the #1 US competitive hacking team, we've already found critical bugs in AI tools, operating systems, fintech and billion dollar crypto exchanges. \r\n\r\nNow we're scaling that expertise through AI-native security tooling that operates faster than human researchers while finding deeper, more complex vulnerabilities that traditional tools miss.", "one_liner": "Continuous AI pentesting that finds and fixes vulnerabilities", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1758644249, "tags": [ "Security", "Cybersecurity", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/veria-labs", "api": "https://yc-oss.github.io/api/batches/fall-2025/veria-labs.json" }, { "id": 30900, "name": "LogosGuard", "slug": "logosguard", "former_names": [ "Logos AI" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/028016b5518081901c8e2d5a5483ea0f04a88946.png", "website": "https://logosguard.com/", "all_locations": "San Francisco, CA, USA", "long_description": "Use AI tools like ChatGPT, Claude, and Gemini safely without leaking sensitive data. LogosGuard redacts your private information before the prompt ever leaves your device.", "one_liner": "The sensitive data redaction layer for AI", "team_size": 2, "industry": "B2B", "subindustry": "B2B", "launched_at": 1762810607, "tags": [ "Artificial Intelligence", "B2B", "Compliance", "Security", "Cybersecurity" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Fall 2025", "status": "Active", "industries": [ "B2B" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/logosguard", "api": "https://yc-oss.github.io/api/batches/fall-2025/logosguard.json" }, { "id": 31506, "name": "Tolmo", "slug": "tolmo", "former_names": [ "Droid Factory" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/8b1fe60a254c3f83e0d218298337418aad753714.png", "website": "https://www.tolmo.com", "all_locations": "San Francisco, CA, USA", "long_description": "Tolmo is an agent-driven security platform that secures every layer — code, CI, cloud applications at the speed of AI changes.\r\n\r\nCodebases are growing faster than ever, at a rate humans can’t keep up with. Tolmo deploys fleets of AI security agents on a live production knowledge graph that connects data from cloud services, containers, databases, and third-party providers (Observability, Security, etc.).\r\n\r\nTolmo agents triage, verify impact, and remediate security issues autonomously, escalating to humans only when truly necessary.", "one_liner": "Tolmo is the AI security platform that secures every layer of cloud…", "team_size": 12, "industry": "B2B", "subindustry": "B2B -> Security", "launched_at": 1781726326, "tags": [ "DevSecOps", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Spring 2026", "status": "Active", "industries": [ "B2B", "Security" ], "regions": [ "United States of America", "America / Canada", "Remote", "Partly Remote" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/tolmo", "api": "https://yc-oss.github.io/api/batches/spring-2026/tolmo.json" }, { "id": 32286, "name": "Bylaw", "slug": "bylaw", "former_names": [ "Ledgix" ], "small_logo_thumb_url": "https://bookface-images.s3.amazonaws.com/small_logos/553f76678219d35e34302add5de43fb39448c22c.png", "website": "https://www.usebylaw.com", "all_locations": "San Francisco, CA, USA", "long_description": "Bylaw is a check that runs before an AI agent writes to your systems. If the agent is about to act on evidence that is wrong, outdated, or don’t agree across sources, we block the action or send it to a human first. \r\n\r\nWe all met our first year at the University of Waterloo studying computer science. We have previously interned at Meta, Optiver, and BitGo, places where making decisions on unverified data could have lethal reprecussions. We kept running into the same failure deploying agents: the agent was allowed to call the tool, but nobody had verified the facts behind the call.\r\n\r\nGuardrails ask “can this agent use this tool?” Evals catch mistakes after the fact. Neither checks whether chat, docs, CRM, and tool results actually agree at the moment of the write. That’s why the same refund or CRM mistake keeps coming back even after you fix the prompt.\r\n\r\nThis is hard because evidence lives in five places at once, goes stale between lookup and action, and every write needs different proof. It hasn’t been productized because agent teams ship fast and patch with prompts; platforms build one-off checks instead of a reusable gate in front of every sensitive tool call.\r\n\r\nThe same way finance built approval gates before money moves, every company giving agents write access will need this layer.", "one_liner": "Guarantee your agents use the right evidence before they act.", "team_size": 3, "industry": "B2B", "subindustry": "B2B -> Infrastructure", "launched_at": 1782681224, "tags": [ "SaaS", "Compliance", "Security", "AI" ], "tags_highlighted": [], "top_company": false, "isHiring": false, "nonprofit": false, "batch": "Summer 2026", "status": "Active", "industries": [ "B2B", "Infrastructure" ], "regions": [ "United States of America", "America / Canada" ], "stage": "Early", "app_video_public": false, "demo_day_video_public": false, "app_answers": null, "question_answers": false, "url": "https://www.ycombinator.com/companies/bylaw", "api": "https://yc-oss.github.io/api/batches/summer-2026/bylaw.json" } ]