What it sells
Autonomous offensive security agents. The best defense is offense
Business model breakdown
Buyer: who owns the budget?
UnverifiedEngineering/security leads at fast-shipping startups (named logos include TraceRoot, Userlens).
Trigger: what makes them buy now?
Need continuous pentesting, PR review and cloud exposure mapping without a human pentest team.
Workflow: what inputs become what output?
Agents map routes/inputs/auth, build candidate attack paths, replay each from a clean session, and file only reproduced findings with proof; one-click retest.
Economics: what it saves and how it charges
Plan sized to number of apps, repositories and cloud accounts; SOC 2 audited.
Distribution: how it reaches customers
Self-serve free trial connecting a repo, cloud account or URL, plus demo for team/enterprise.
Funding history and coverage
| Round date | Stage | Amount | Investors | Source |
|---|---|---|---|---|
| — | Y Combinator Summer 2026 | — | Y Combinator | ycombinator.com |
Profiles summarize public reporting and company websites. Business-model notes are MaxBC's reading of that material, not confirmed facts; unknowns are left blank rather than guessed. Updated 2026-10-12.