Strix

Trident (Esprit Labs Inc.) is a San Francisco-based AI security company founded in 2025 and part of Y Combinator Summer 2026. Its autonomous AI agents continuously pentest web apps and APIs, review pull requests for n-day vulnerabilities and logic flaws before merge, and map cloud attack paths across AWS, Azure and GCP, delivering reproducible proof-of-exploit findings with remediation guidance.

Paris-based Fleuret AI builds an agentic AI penetration-testing platform in which specialized agents discover the external attack surface, exploit and escalate, and produce audit-grade reports backed by replayable proofs of concept, turning pentesting into a continuous process. Positioned as a European sovereign option for DORA/NIS2-regulated firms; clients include Brevo, Stoïk and Yogosha.

Astha.ai is a Palo Alto, California-based company founded in 2025 that provides runtime-aware security and compliance for AI agent infrastructure. It leads the SAFE Agentic Framework and initiated the open-source SAFE-MCP project to map, assess and mitigate attack paths in AI agents and Model Context Protocol (MCP) deployments, offering continuous assessment, scanning, identity and access control, and audit-ready compliance evidence mapped to NIST, the EU AI Act and SOC 2, alongside an AI Agentic Security (AIAS) Practitioner certification.

Formal is a data access security company building a protocol-aware reverse proxy that enforces least privilege at the wire-protocol level across databases, data warehouses, SSH/Kubernetes and MCP servers, resolving identities, authorizing individual queries, masking sensitive data and auditing access for both human and AI-agent traffic. The Y Combinator-backed company is based in San Francisco; customers include Gusto, Notion and Ramp.

NuGuard AI, based in San Jose, California, offers an open-source and SaaS AI Trust Platform for agentic AI applications, providing AI-SBOM generation, behavioral policies and automated red-teaming so enterprises can find prompt injection, MCP tool misuse and data leakage risks before production.

Hadrian, founded in 2021 in Amsterdam (with an office in London) by ethical hackers, builds an offensive security platform: Atlas continuously maps the external attack surface and Nova runs on-demand agentic penetration tests, using AI agents to discover and validate exploitable vulnerabilities. Customers include McKesson, NBCUniversal, TotalEnergies and Damen Shipyards.