GrayPass
GrayPass is a YC Fall 2026 (F26) company. Based in Toronto, ON, Canada. Team of 2.
About GrayPass
Summary
GrayPass verifies that the authenticated user is still in control of a session at the moment a consequential action executes, closing the gap between login and action. It analyzes cognitive biometrics, including keystroke timing, pointer movement, and scroll patterns, alongside session and device context to assess continuous control. Before an action such as a payment approval, permission change, sensitive data export, or AI agent execution proceeds, GrayPass returns an allow, challenge, hold, or deny decision and generates signed proof tied to that specific action.
Business model
Omit this field when the sources do not say how the company charges.
Go-to-market
GrayPass targets developers and security teams at B2B software companies, offering an evaluation program as the entry point for new customers.
From the Y Combinator listing
Verify the expected person is still in control before sensitive…
Login tells you who signed in. GrayPass helps apps check who’s behind sensitive actions and whether they’re authorized before those actions go through. It combines identity, device and session context with behavioral signals like typing rhythm, cursor movement and scrolling. Before a sensitive action goes through, GrayPass evaluates that evidence against your team’s policy and returns a decision: allow, challenge, hold or deny. Your app enforces the decision. This applies to actions like exporting sensitive data, changing admin permissions or allowing an AI agent to act on someone’s behalf. Allowed actions receive short-lived, signed proof tied to the exact action and your app. Your existing login and authentication stack stays in place.
Facts
- B2B / B2B -> Infrastructure
- Toronto, ON, Canada
- 2
- Active
- Early
Founders (2)
Score every batch against your own thesis
GPAgent's sourcing agent reads every company in a batch, scores each one against your fund's thesis in a private workspace, and lines up the founders worth meeting before Demo Day. You decide who to contact. Your scores, notes, and pipeline never appear on these pages.
How Accelerator intelligence works