Hex Security
Hex Security is a YC Winter 2026 (W26) company. Based in San Francisco, CA, USA. Team of 3.
About Hex Security
Summary
Hex Security deploys AI agents that probe web apps, APIs, and cloud infrastructure around the clock for exploitable vulnerabilities, replacing the traditional annual penetration test, a weeks-long, six-figure engagement that delivers a static PDF. Security and engineering teams get continuously verified, proof-of-concept findings instead of a once-a-year snapshot that is outdated before it is acted on.
Business model
Subscription access to the Parameter platform, with a book-a-call sales motion
Go-to-market
Targets security and engineering teams at fintech and healthcare companies with compliance obligations (PCI DSS, HIPAA, SOC 2, FedRAMP); prospects book a call and see initial findings within 24 hours, blending self-serve onboarding with a sales-assisted motion.
From the Y Combinator listing
Agentic Offensive Security at Scale
Hex Security builds AI agents that run continuous penetration tests against your apps and infrastructure. Instead of a once-a-year penetration test, Hex Security's agents works 24/7 to find and verify critical vulnerabilities so you can prevent them before attackers.
Facts
- B2B / B2B -> Security
- San Francisco, CA, USA
- 3
- Active
- Early
Founders (3)
Score every batch against your own thesis
GPAgent's sourcing agent reads every company in a batch, scores each one against your fund's thesis in a private workspace, and lines up the founders worth meeting before Demo Day. You decide who to contact. Your scores, notes, and pipeline never appear on these pages.
How Accelerator intelligence works