What it sells
Verify that the expected person is in control before key actions.
Business model breakdown
Buyer: who owns the budget?
UnverifiedSecurity / fraud / product-security teams at companies with sensitive in-app actions.
Trigger: what makes them buy now?
Valid session can be hijacked or driven by someone else (or an agent) at the moment of a consequential action; login only proves earlier identity.
Workflow: what inputs become what output?
Browser SDK captures interaction timing (pointer, keystroke, scroll) into a tenant-scoped Brainprint; before a sensitive action GrayPass returns a decision the app enforces.
Distribution: how it reaches customers
Evaluation-led: "Request Evaluation" batches (current batch until 10/22), demo console, research content.
Funding history and coverage
| Round date | Stage | Amount | Investors | Source |
|---|---|---|---|---|
| — | Y Combinator Fall 2026 | — | Y Combinator | ycombinator.com |
Profiles summarize public reporting and company websites. Business-model notes are MaxBC's reading of that material, not confirmed facts; unknowns are left blank rather than guessed. Updated 2026-10-12.