Skip to content
Fabraix logo

Fabraix

Fabraix is a YC Summer 2026 (S26) company. Based in San Francisco, CA, USA. Team of 2.

  • Artificial Intelligence
  • Reinforcement Learning
  • Cybersecurity

About Fabraix

GPAgent's own fund-neutral profile, written from public information. Updated Oct 4, 2026.

Summary

Fabraix builds automated red-teaming agents that continuously find security vulnerabilities in customer-facing AI agents. Its product, Nyx, replaces periodic, manual red-team engagements by running multimodal adversarial attacks through controlled replicas of SaaS products and websites, inserting malicious payloads into pages, documents, files, and tool outputs to probe how a target agent behaves. Enterprise security and AI teams use it to test every model, prompt, or permission change as it happens, not just at a point in time.

Business model

Priced below a traditional seven-figure red-teaming engagement, with continuous automated testing replacing one-time point-in-time engagements.

Go-to-market

Fabraix targets enterprise companies, including Fortune 500 firms, that deploy AI agents in customer-facing products and need to keep pace with continuous changes to those agents.

From the Y Combinator listing

How Fabraix describes itself in Y Combinator's public directory.

The world's frontier hacker for AI agents.

Fabraix builds state-of-the-art AI red-teaming agents that continuously detect security vulnerabilities in customer-facing AI. Our product, Nyx, has already found vulnerabilities in agents at dozens of Fortune 500 companies. On AgentHarm, the leading benchmark for offensive AI security, Nyx achieved a 78% attack success rate, compared with 67% for GPT-5.6 Sol. AI agents can change more often than teams can test them. A new model, prompt, tool, permission, or data source can change what an agent does, even when the application code stays the same. And AI is also increasing how much software companies produce and how often it changes. We built Nyx to automate the work required to red-team AI agents. It is multi modal by design and interacts with the target indirectly through controlled replicas of SaaS products and websites that we maintain, placing malicious payloads in webpages, documents, files, messages, and tool outputs to test how an agent behaves under different conditions. Nyx often finds its first vulnerability within minutes or hours rather than days or weeks. Because the work is fully automated, companies can repeat the test with every change and at a much lower cost than what a 7-figure red-teaming (and point-in-time) engagement would require. We're also the team behind ACE (Adversarial Cost to Exploit), a benchmark that measures AI security in terms of how much it costs attackers to break an AI system; providing a game-theoretic framework to understand how motivated a rational attacker would be in exploiting the system.

Facts

Industry
B2B / B2B -> Security
Location
San Francisco, CA, USA
Team size
2
Status
Active
Stage
Early

Founders (2)

Score every batch against your own thesis

GPAgent's sourcing agent reads every company in a batch, scores each one against your fund's thesis in a private workspace, and lines up the founders worth meeting before Demo Day. You decide who to contact. Your scores, notes, and pipeline never appear on these pages.

How Accelerator intelligence works