ZeroPath

Corgea is an autonomous application security platform that finds and validates vulnerabilities, then generates safe code fixes developers can apply in their existing workflow. In production customers like Zapier and Yageo, see ~20% more true positives and ~90% fewer false positives (vs their prior tooling), reducing triage and speeding remediation without adding headcount.

shared product terms: security, find, vulnerabilitie, code; shared product theme: developer infrastructure, security and compliance; same category: Developer tools; shared affiliation: Y Combinator

Winfunc (winfunc.com) is an AI Hacker that autonomously finds, verifies, and patches security vulnerabilities in codebases, just like a human security engineer would. Winfunc can find business logic errors with context-aware scanning and automate the full auditing cycle to generate reports with zero false positives. Winfunc's agent has found vulnerabilities in Google, Supabase, Sentry, Cal, Gumroad, Bun, Hoppscotch, etc.

shared product terms: autonomously, find, verifie, security; shared product theme: security and compliance; shared affiliation: Y Combinator

MindFort is building fully autonomous AI agents powered by their in-house models that can find, exploit, and patch complex vulnerabilities in web applications at massive scale. MindFort agents use the same principles as human penetration testers to understand their target and figure out the best ways to work together to exploit it. We can do fully autonomous AI web pentesting and bring offensive security to teams out numbered. While security teams were already behind with legacy tools and proces

shared extracted concept terms: pentest; shared product terms: find, vulnerabilitie, pentest, security; shared product theme: security and compliance; shared affiliation: Y Combinator

VotingWorks is a non-partisan non-profit founded on the powerful idea that the operating system of our democracy should be publicly owned. Every citizen’s vote is sacred, and every citizen deserves evidence that our elections are free and fair. Forty states use voting machines that are over ten years old. Their technology is outdated, their source code proprietary and their security vulnerabilities – described in detail by the security community over many years – are left unpatched. It’s not sur

shared product terms: vulnerabilitie, code, security; shared product theme: developer infrastructure, security and compliance; same category: Developer tools; shared affiliation: Y Combinator

Nebula Security is an AI-native cybersecurity company founded by world-class hackers. Nebula Security provides Mythos-level cybersecurity reviews and product security auditing, conducted by our state-of-the-art AI agent and world-class hackers themselves, covering everything from code-level vulnerabilities to architectural weak points. We were the first team to build an nginx RCE and the first to root Android 17. Our co-founders include members of the world’s No. 1 CTF team, DEF CON winners, Bla

shared product terms: vulnerabilitie, code, security; shared product theme: developer infrastructure, security and compliance; shared affiliation: Y Combinator

Hex Security builds AI agents that run continuous penetration tests against your apps and infrastructure. Instead of a once-a-year penetration test, Hex Security's agents works 24/7 to find and verify critical vulnerabilities so you can prevent them before attackers.

shared product terms: vulnerabilitie, find, security; shared product theme: developer infrastructure, security and compliance; shared affiliation: Y Combinator