Y Combinator

Riot develops of a security platform designed for fighting phishing attempts. Riot's security platform runs fake phishing campaigns on employees and secures products and internal tools by two-factor authentications, enabling companies to educating their employees about security breaches.

Vanta is security-in-a-box for technology companies, covering everything from laptops to infrastructure, and using a suite of simple, effective, and easy-to-deploy tools.

SafeBase, Inc. is a San Francisco-based company that specializes in cloud-based security software designed to assist businesses in establishing effective security programs. Founded in 2020, SafeBase offers tools that streamline the security assessment process, enabling B2B SaaS companies to expedite enterprise deals. The primary product, SafeBase Inspected, provides a badge for websites that links to a customized security status page, enhancing customer trust and credibility. Additionally, the software includes features such as custom security checklists, continuous monitoring of security systems, and the ability to configure security policies, all aimed at giving sales teams a competitive advantage in presenting their security measures.

Salt Security, Inc. is a cybersecurity company based in Palo Alto, California, specializing in API security. Founded in 2016, the company offers a platform designed to prevent zero-day API breaches by utilizing machine learning and artificial intelligence. This platform can be deployed quickly, learning the specific behavior of a company’s APIs without the need for configuration or customization. It automatically and continuously identifies potential threats, enabling clients to block API attacks effectively. The company aims to protect the essential APIs that underpin modern applications, helping organizations safeguard their digital assets against emerging cyber threats. Salt Security was previously known as SECful, Inc. before rebranding in June 2018.

Munily, a proptech software, Is redefining security and administration in residential communities by centralizing all communications.

Digital identity management & verification

Telivy empowers SAAS platforms and insurance agencies with an embedded multi-carrier cyber insurance solution, providing the fastest and easiest solution to get cyber insurance for their small business customers. We are licensed to do business in 48 US states.

Salt Security, Inc. is a cybersecurity company based in Palo Alto, California, specializing in API security. Founded in 2016, the company offers a platform designed to prevent zero-day API breaches by utilizing machine learning and artificial intelligence. This platform can be deployed quickly, learning the specific behavior of a company’s APIs without the need for configuration or customization. It automatically and continuously identifies potential threats, enabling clients to block API attacks effectively. The company aims to protect the essential APIs that underpin modern applications, helping organizations safeguard their digital assets against emerging cyber threats. Salt Security was previously known as SECful, Inc. before rebranding in June 2018.

Vanta is security-in-a-box for technology companies, covering everything from laptops to infrastructure, and using a suite of simple, effective, and easy-to-deploy tools.

Cyble Pty Ltd., established in 2019 and based in Melbourne, Australia, specializes in providing a platform for cyber threat and risk management. The company offers a SaaS solution that leverages machine learning and human analysis to deliver real-time insights into cyber threats within supply chains. By utilizing intelligence gathered from both open and closed sources, including OSINT and dark web monitoring, Cyble enables organizations to assess the security of their suppliers effectively. This platform allows clients to respond swiftly to potential threats and enhances their overall resilience against cyber breaches. Additionally, Cyble provides out-of-the-box threat intelligence capabilities to its subscribers, reinforcing its commitment to enabling organizations to navigate the complexities of cybersecurity.

Salt Security, Inc. is a cybersecurity company based in Palo Alto, California, specializing in API security. Founded in 2016, the company offers a platform designed to prevent zero-day API breaches by utilizing machine learning and artificial intelligence. This platform can be deployed quickly, learning the specific behavior of a company’s APIs without the need for configuration or customization. It automatically and continuously identifies potential threats, enabling clients to block API attacks effectively. The company aims to protect the essential APIs that underpin modern applications, helping organizations safeguard their digital assets against emerging cyber threats. Salt Security was previously known as SECful, Inc. before rebranding in June 2018.

SafeBase, Inc. is a San Francisco-based company that specializes in cloud-based security software designed to assist businesses in establishing effective security programs. Founded in 2020, SafeBase offers tools that streamline the security assessment process, enabling B2B SaaS companies to expedite enterprise deals. The primary product, SafeBase Inspected, provides a badge for websites that links to a customized security status page, enhancing customer trust and credibility. Additionally, the software includes features such as custom security checklists, continuous monitoring of security systems, and the ability to configure security policies, all aimed at giving sales teams a competitive advantage in presenting their security measures.

Anjuna Security Inc. is a cybersecurity company based in Palo Alto, California, that specializes in a data-in-use platform designed to protect sensitive data during processing, transit, and at rest. Founded in 2017, Anjuna's technology enables organizations to secure their applications and key management systems in the cloud without requiring any changes to existing code. The platform creates a software perimeter around applications, delivering hardware-grade security that allows sensitive workloads to operate safely in public cloud environments. This approach eliminates the need for securing or patching the underlying infrastructure, as it protects applications even against threats from users with root or physical access. By seamlessly encrypting data end-to-end with secure enclaves, Anjuna empowers enterprises to run their most critical operations while maintaining robust security against insider threats.

Cyberdontics provides advanced dental drill services.

Skypher SAS, incorporated in 2019 and based in Paris, France, specializes in automating the development and response process of security questionnaires for companies. The software solutions offered by Skypher include automating security questionnaire responses, building a knowledge base, and tracking compliance. With a team experienced in the challenges of implementing information security practices, Skypher addresses the complexities faced by organizations, particularly SaaS providers, in meeting customer and regulatory security requirements. Their tools aim to simplify security reviews, enhancing efficiency across the organization.

Riot develops of a security platform designed for fighting phishing attempts. Riot's security platform runs fake phishing campaigns on employees and secures products and internal tools by two-factor authentications, enabling companies to educating their employees about security breaches.

Sublime Black is an automating cybersecurity platform that develops artificial intelligence-based security technology. The company's technology is primarily focused on automating cybersecurity incident response. It is based in Rockville, Maryland, USA.

MedCrypt is a cybersecurity company focused on protecting medical devices by providing data security as a service to medical device original equipment manufacturers (OEMs). Founded in 2016 and based in Encinitas, California, MedCrypt's platform incorporates essential security features that ensure medical devices, such as pacemakers and surgical robots, operate only on instructions from trusted sources. The company's solutions include user authentication, data encryption, and transaction monitoring, which help hospitals and health systems prevent unauthorized access and misuse of medical devices. By enabling engineers to integrate these security measures swiftly and efficiently, MedCrypt allows them to concentrate on developing innovative clinical features that can enhance patient care.

Sqreen SAS specializes in developing software-as-a-service (SaaS) solutions for application security. Founded in 2015 and headquartered in Saint Cloud, France, the company offers a platform that provides real-time protection and monitoring for web-based applications without requiring modifications to the source code. Sqreen's technology serves various systems, mobile devices, and cloud environments, enabling over 500 organizations to enhance their security posture. The platform integrates application security management needs into a single solution, allowing developers and security teams to maintain engineering efficiency while scaling their security measures. Sqreen was established by a team of security experts with prior experience in offensive security at Apple.

MedCrypt is a cybersecurity company focused on protecting medical devices by providing data security as a service to medical device original equipment manufacturers (OEMs). Founded in 2016 and based in Encinitas, California, MedCrypt's platform incorporates essential security features that ensure medical devices, such as pacemakers and surgical robots, operate only on instructions from trusted sources. The company's solutions include user authentication, data encryption, and transaction monitoring, which help hospitals and health systems prevent unauthorized access and misuse of medical devices. By enabling engineers to integrate these security measures swiftly and efficiently, MedCrypt allows them to concentrate on developing innovative clinical features that can enhance patient care.

Castle provides advanced fraud detection and prevention solutions tailored for online businesses of all sizes. By offering technology that was once exclusive to banks and large financial institutions, Castle enables various customer-facing applications—including e-commerce platforms, mobile apps, and cryptocurrency services—to safeguard user accounts against unauthorized access. The company's APIs facilitate account hijack protection by monitoring user behavior through device fingerprinting, keystroke analysis, browsing history, and numerous other indicators. In the event of suspicious activity, both administrators and account owners receive immediate alerts, empowering them to respond swiftly and effectively to potential threats.

Paladin Cyber provides cyber protection as a service for Small Businesses. The company was founded in 2017 and is based in San Francisco, California.

Federacy Cypher, Inc. is a company that specializes in providing an online security platform tailored for startup businesses. Founded in 2018, it focuses on offering a bug bounty service, enabling startups to identify and address security vulnerabilities effectively. The company is headquartered in San Francisco, California, and aims to enhance the security posture of emerging companies by leveraging the expertise of security researchers.

Tall Poppy Security Inc., operating as Tall Poppy, is a San Francisco-based company founded in 2018 that specializes in security awareness training and compassionate care services for employees facing online threats. The company offers a comprehensive platform that combines proactive security training with threat monitoring and incident response, specifically designed to protect individuals from online harassment and abuse. Tall Poppy's services are particularly beneficial for high-profile or executive staff who are at greater risk, providing them with tailored support and resources. Additionally, the platform educates employees about relevant laws across various states to empower them in safeguarding their personal and professional lives.

Vanta is security-in-a-box for technology companies, covering everything from laptops to infrastructure, and using a suite of simple, effective, and easy-to-deploy tools.

Anjuna Security Inc. is a cybersecurity company based in Palo Alto, California, that specializes in a data-in-use platform designed to protect sensitive data during processing, transit, and at rest. Founded in 2017, Anjuna's technology enables organizations to secure their applications and key management systems in the cloud without requiring any changes to existing code. The platform creates a software perimeter around applications, delivering hardware-grade security that allows sensitive workloads to operate safely in public cloud environments. This approach eliminates the need for securing or patching the underlying infrastructure, as it protects applications even against threats from users with root or physical access. By seamlessly encrypting data end-to-end with secure enclaves, Anjuna empowers enterprises to run their most critical operations while maintaining robust security against insider threats.

Sqreen SAS specializes in developing software-as-a-service (SaaS) solutions for application security. Founded in 2015 and headquartered in Saint Cloud, France, the company offers a platform that provides real-time protection and monitoring for web-based applications without requiring modifications to the source code. Sqreen's technology serves various systems, mobile devices, and cloud environments, enabling over 500 organizations to enhance their security posture. The platform integrates application security management needs into a single solution, allowing developers and security teams to maintain engineering efficiency while scaling their security measures. Sqreen was established by a team of security experts with prior experience in offensive security at Apple.

Hunter2 is an online learning platform for software engineers. Hunter2 teaches modern secure coding practices through interactive web apps that developers exploit and patch. Hunter2's training labs center around real-world scenarios to teach engineers how modern web apps can be hacked, and how to avoid these vulnerabilities. Hunter2 launched out of Y Combinator's winter 2018 class.

Castle provides advanced fraud detection and prevention solutions tailored for online businesses of all sizes. By offering technology that was once exclusive to banks and large financial institutions, Castle enables various customer-facing applications—including e-commerce platforms, mobile apps, and cryptocurrency services—to safeguard user accounts against unauthorized access. The company's APIs facilitate account hijack protection by monitoring user behavior through device fingerprinting, keystroke analysis, browsing history, and numerous other indicators. In the event of suspicious activity, both administrators and account owners receive immediate alerts, empowering them to respond swiftly and effectively to potential threats.

NuCypher is a San Francisco-based company founded in 2015 that specializes in developing a data-centric zero-trust encryption platform focused on protecting sensitive information. The company offers a product designed for sharing sensitive data while ensuring compliance with governance and residency requirements. Its encryption layer allows organizations to implement military-strength encryption to safeguard large and distributed data sets, whether stored in the cloud or on-premises. By utilizing existing access policies, NuCypher enhances the security of big data applications against internal and external threats. Additionally, the company is committed to creating privacy-preserving infrastructure and protocols, further advancing its mission in the field of cryptography.

Stealth Worker specializes in Cyber Security. Rather than hiring for full-time employment roles, their Stealth Workers are contractors. You can hire them for projects or long term roles, from as little as 5 hours to as many as 40 hours per week.

Patchwork was founded by two security engineers with the goal of bringing automation and expert security processes to the wider software market.

Salt Security, Inc. is a cybersecurity company based in Palo Alto, California, specializing in API security. Founded in 2016, the company offers a platform designed to prevent zero-day API breaches by utilizing machine learning and artificial intelligence. This platform can be deployed quickly, learning the specific behavior of a company’s APIs without the need for configuration or customization. It automatically and continuously identifies potential threats, enabling clients to block API attacks effectively. The company aims to protect the essential APIs that underpin modern applications, helping organizations safeguard their digital assets against emerging cyber threats. Salt Security was previously known as SECful, Inc. before rebranding in June 2018.

Castle provides advanced fraud detection and prevention solutions tailored for online businesses of all sizes. By offering technology that was once exclusive to banks and large financial institutions, Castle enables various customer-facing applications—including e-commerce platforms, mobile apps, and cryptocurrency services—to safeguard user accounts against unauthorized access. The company's APIs facilitate account hijack protection by monitoring user behavior through device fingerprinting, keystroke analysis, browsing history, and numerous other indicators. In the event of suspicious activity, both administrators and account owners receive immediate alerts, empowering them to respond swiftly and effectively to potential threats.

Cymmetria is a cybersecurity company at the forefront of deception technology. Cymmetria’s deception products, MazeRunner and ActiveSOC, give organizations the ability to hunt attackers, detect lateral movement inside the perimeter, automate incident response, and mitigate attacks. The company also offers deception as a service, enabling organizations to customize deception technologies for their business environment. Founded in 2014 by security expert Gadi Evron, Cymmetria is changing the asymmetry of cybersecurity, giving defenders the upper hand.

Cymmetria is a cybersecurity company at the forefront of deception technology. Cymmetria’s deception products, MazeRunner and ActiveSOC, give organizations the ability to hunt attackers, detect lateral movement inside the perimeter, automate incident response, and mitigate attacks. The company also offers deception as a service, enabling organizations to customize deception technologies for their business environment. Founded in 2014 by security expert Gadi Evron, Cymmetria is changing the asymmetry of cybersecurity, giving defenders the upper hand.

Cyberfend offers a robust security solution to protect your web and mobile applications from sophisticated attacks and fraudulent activity. Cyberfend uses a new security paradigm – human cognitive science combined with advanced machine learning. The solution detects account takeover, payment fraud and stolen credentials, in real time with near zero false positives. Cyberfend's Cognitive Security Engine solves several challenging problems with zero false positives. Cyberfend's BotFender is the most comprehensive bot/automation detection service available in the market today.

CryptoSeal provides Virtual Private Networks (VPNs) as a service.

Enernetics is the web's largest digital trustmark provider.