Fall 2026

Stacktrace

See and control what your agents actually do

Visit website

What they do

control layer that sees, bounds and stops risky agent actions

How close to us

4, very close

sees what agents do and enforces limits; checks only, no cost or output tracking mentioned.

Wedges

  • W2 Seeing whether your AI agents actually produce direct
  • W1 Trusted 24/7 coding for small startup teams adjacent
  • W8 The other 90% of an AI skill adjacent
L1 Company brain (knows the organisation) 0, none
L2 Agent team (runs agents, tools, approvals) 2, clear
L3 Does and learns (finishes, checks, measures, updates the brain) 1, light

Who buys

Firm size
not known
Buyer type
developer
Role
head of engineering or security; a developer can start alone with the free tier
UK
not known
Their own description (from YC)

Agents will do most of the work in the future, but only if teams can trust them unsupervised.
Stacktrace is the control layer for every agent: it sees every action, detects risky behavior, enforces the bounds your team sets, and steps in when an agent drifts from intent.

Full teardown

Stacktrace (YC Fall 2026): teardown vs XMarts

In one line: Stacktrace is a control layer for coding agents. It watches what each agent did, flags risky or broken runs, sets one rulebook for the team, and alerts in Slack [site] [yc]. Threat: 2, because it is the closest rival to W2 and has strong founders, but it is three people, brand new, names no customer and checks only (it does not do or measure the work) [site] [yc].

1. Fact file

Item Finding Source
What they say "Run unsupervised intelligence with confidence." YC line: "See and control what your agents actually do." [site] [yc]
Founded, team, funding Founded 2026, YC Fall 2026, 3 people, San Francisco. Funding: UNVERIFIED (YC's standard deal is likely, inference; no round is announced). [yc]
Founders Vinod Kone (CEO): ex VP Engineering at Harness, ex Senior Director at Twilio Segment, Apache Mesos PMC Chair, PhD. Micheal Benedict: ex Head of Infrastructure, Security and AI Platforms at Airtable, earlier Databricks, Pinterest, Twitter. Prasanth Ganta: Amazon engineering leader 2011 to 2026, built GenAI systems at Amazon Ads. What YC likely saw: three people who ran large infrastructure and security teams, building for the people who hold that job today (inference). [yc] [site]
Customers None named. No logos, case studies or quotes. Live counters read "0 agent sessions observed" and "0 installations" at the time of the visit. [site]
Price Fleet Team plan is free for unlimited users, up to 100 agents and 200 session-hours a month. Enterprise and Gateway: custom pricing, billed annually, volume priced on session-hours. Job ads: none listed. [site] [yc]
Path Open-source scanner "OpenACA" (an Agent BOM scanner, V0 in a July 2026 review) is now listed under "Open source" in their docs next to "OpenAIDR" (reads agent sessions). The YC data lists OpenACA as a former name; their About page does not mention it. Product today: Fleet, Personal Agent Gateway (preview), in-browser Sandbox. [yc] [docs] [blog]

2. Their proposition, reverse engineered

Part What they do
Who buys A head of engineering or security running coding agents across laptops, CI and cloud [site]. Gateway: a company that owns an MCP server and has customers arriving with personal agents [site].
The pain Agents leave the terminal, run longer and multiply, so bad behaviour and drift go unseen [site]. Teams can not trust agents "unsupervised" [yc].
The promise See what ran, set limits ahead of time, step in when an agent drifts [site].
How it works A small program (a sidecar) runs next to each agent and reads its session files and MCP logs, read-only. It is not in the agent's path. Ten rules check each session. An optional gateway, inside LiteLLM or Envoy, sits inline and can block a tool call [site] [docs].
The output A "finding" with the rule, the evidence and a fix. Shown in a local console, Slack and the running Claude Code session. One org-wide policy. An inventory of MCP servers, plugins and skills with a "blast radius" view [site].
Proof style Rule counts (ten live rules) and demo screenshots. No outcome number: no money saved, no failures prevented [site].
Who sells it Self-serve: paste a prompt into Claude Code and it installs itself. Demo calls for Enterprise and Gateway, with "Talk to the founders" as the main call to action [site] [docs].
Price model Free local sidecar. Free Team tier with caps. Enterprise priced on session-hours, annual commit [site].
The story Trust is the limit on agent work: see it, bound it, step in. Built "by people who've run the systems" [site]. Their enemy is unobserved drift and risky actions (security first).

3. Positioning

  • Category they claim: "control layer for every agent" [yc]. Control plane for coding agents [site].
  • Category a YC partner would put them in: agent security and monitoring (DevSecOps), next to Wato, Salus-style behaviour checkers and Nessie (inference from the brief's list and their YC tags).
  • What they want to be known for: the control point for every agent a company runs.
  • Where they sit on the map: layers L1/L2/L3 = 0 / 2 / 1, buyer = unknown size, developer.

4. Three layers vs ours

Layer Them (score + evidence) Us (Marton's logs show)
L1 Company brain 0. No memory of the company. The component inventory lists tools (MCP servers, plugins, skills), not knowledge or decisions [site]. A vault of about 1,400 pages, 112 call transcripts and about 8,700 customer quotes, searchable by meaning.
L2 Agent orchestration 2. One policy for many agents, with "require approval before a consequential action" and held actions in the Gateway [site]. They govern other people's agents. They do not run or route a team of agents. Scored 2 on the lens words "several agents with approvals", with that limit noted. About 5,600 jobs across three AI makers (Codex 4,756, Claude 839, Gemini 46) on three Macs, each build checked by a different AI.
L3 Execution and learning 1. "Checks only": it reads sessions and raises findings. It does not do the work or measure whether work landed. Steering of drifting runs is "Coming soon" [site]. Rules ship only after their findings get acted on, a small learning habit [site]. A heartbeat reports what is stuck, silently stopped and what it costs. About 160 incident records, each with an automatic check. But only about 15% of jobs reached main.

5. Same and different

Topic Same or different Them Us
Core belief Same Agents are only useful if teams can trust them [yc]. Same: agents make a lot of work, teams trust little of it (brief, W2 and W1).
Question answered Different "Did the agent do something risky or broken?" Actions, secrets, destructive commands [site]. W2: "Did the agent actually produce, and what did it cost?" Output and spend (brief).
What they read Same Agent session files and logs, read-only [docs]. Marton's logs show the fleet reads its own job queue and incident records.
Failure examples Same Retry storms, blocked and throttled calls, quota blocks [site]. Marton's logs show stuck runs, silent stops and a cost incident (39% of a week's Claude budget in 14 hours).
Cost tracking Same, later Cost rules are "coming soon" [site]. Marton's logs show a cost ledger exists, labelled "uncalibrated".
Engines covered Different Claude Code live. Devin and Codex in preview [site]. Docs say Claude Code only [docs]. Marton's logs show Codex ran 4,756 of 5,641 jobs.
Buyer Different Head of engineering or security. Free self-serve start [site]. W2 buyer: teams already running Codex or Claude Code in loops (inventory). No buyer yet.
Price Different Free to start, session-hour pricing at scale [site]. Not set. A free rival makes "alerts" a hard thing to charge for (inference).
Delivery Different A product with installer, plugin and console [site]. Mac-bound and wired to Marton's paths; nobody else has run it (inventory).
Proof Different Rule counts, no customers [site]. Five months of named failures from one real fleet (inventory). No outside customer.
Founders Different Three infrastructure and security leaders from Harness, Airtable, Amazon [yc]. A product person and a sales and finance operator (brief). Neither writes production code at their level (inference from the brief).

6. Wedge overlap

Wedge Fit Why
W2 Seeing whether your AI agents actually produce direct Same problem family (stuck runs, silent failures, cost) and the same buyer (a team running coding agents). They frame it as risk and safety; W2 frames it as output and spend [site] (brief).
W1 Trusted 24/7 coding for small startup teams adjacent They sell the "trust" ingredient (limits and alerts) to the same kind of team. They do not run the agents or deliver the shipped work [site].
W8 The other 90% of an AI skill adjacent They inventory skills, plugins and MCP servers and watch them for vulnerabilities [site]. That is security upkeep, not feedback-driven improvement of skills (UNVERIFIED that no such feature is planned).

7. Whitespace (where they stop)

  • Layer gap: they check, they do not do or measure the work. A finding says "this was risky", never "this landed" or "this cost £X to produce" [site]. To own it we need a decoupled W2 tool, run by 3 outside teams, that links agent runs to merged work and spend.
  • Number gap: no outcome number in their proof, and cost rules are "coming soon" [site]. To own it we need one number a head of engineering would sign: for example silent failures caught per week, or cost per merged change, over 4 weeks on a real team.
  • Not true, so left out: price gap (the Team tier is free) [site]; speed gap (install is one pasted prompt) [docs]. Buyer gap is weak: they start at one developer and reach up to Enterprise [site]. An engine gap exists today (Claude Code only live), but it is a roadmap item for them, not whitespace (inference).

8. For the YC application

  • Proven today: Marton's logs show his system tracks what is stuck, what silently stopped and what it costs across three AI makers (5,641 jobs, Codex 4,756, Claude 839, Gemini 46), with about 160 failure records that each added an automatic check. Stacktrace's public pages describe risk rules on Claude Code sessions, ten live, and no outcome or cost measure yet [site].
  • Draft answer to "how are you different from Stacktrace?": DRAFT. "Stacktrace watches what agents do and blocks the risky ones. We track whether the work actually landed and what it cost, because we run a fleet of agents every day and that was our pain." Founders say it their own way.
  • Future claim (needs proof): "Teams running agent loops see, in one place, which runs produced merged work and what each cost." Needs 3 outside teams on a decoupled W2 for 4 weeks with a before/after number, and the tool running off Marton's Macs.
  • What we understand that they don't: the buyer's daily question is "is my fleet producing?", not only "is it safe?" needs proof with an outside buyer; Marton's logs show the failure classes come from his own five months of running a fleet.
  • Copyability (M3): easy. Reading session files is what they already do [docs]. Cost rules are already announced [site]. Linking runs to merged work is a small extra step, and the CEO ran engineering at a CI and delivery company (Harness) (inference). Wanting to is also likely, since it fits their buyer. M3 can not score above 3 against Stacktrace.
  • Why now (M4): None found. Do not use "agents are everywhere now": that is general AI progress.
  • Do not claim: that Stacktrace ignores cost or stuck runs (they have retry-storm rules and cost "coming soon") [site]. That W2 is a shipped product (it is Mac-bound and unused by anyone else). That our edge is hard to copy. That we can out-build three infrastructure veterans on monitoring itself.

M2 (what YC funds now) is NOT judged here. It comes from the themes of many companies in Pass 3.

9. Ideas worth taking

  1. A browser sandbox where you drop in a session file and nothing leaves the tab. A zero-install, zero-trust demo [site].
  2. "Rules ship only once their findings get acted on" [site]. Same spirit as our ratchets: a check earns its place by being used.
  3. Install by pasting one prompt into the agent itself [docs]. Fast first value.

10. Unknowns

  • Any customer, revenue or install count. Counters read zero. Look at the GitHub plugin repo and their X account for first users after launch.
  • Funding terms beyond YC. Look for a seed announcement after Demo Day.
  • When cost and steering ship, and when Codex goes from preview to live. Watch docs.stacktrace.ai "Coming soon" page.
  • Whether OpenACA was the company's earlier name or a separate project. The YC data says former name; their About page is silent.
  • UK or EU presence. Nothing on the site.

Sources

Technical detail
Slug
stacktrace
Lens hash
179096c479
Pass
deep
Stale
no