WillItSurvive
YC Summer 2026 · United States

Fabraix

Two-person YC startup building AI agents that hack other companies' AI agents.

Losing its protection
Assessed 27 July 2026 · Evidence as of 27 July 2026
The structural protection is eroding.
On the recordSince 27 July 2026 · Checkable from around January 2027 · Every call on the record Checkpoint: YC S26 Demo Day, likely triggering funding news or acquisition interest
The call

Fabraix sells AI agent hacking as a two-person team, in a space three big security vendors already bought their way into.

Fabraix builds software to test AI systems for weaknesses before they go live, using a library of known attacks and an automated testing tool called Nyx. The problem is that Cisco, Palo Alto Networks, and Check Point have all bought their own AI safety companies in the last year, and there are free open-source tools doing similar work, so Fabraix's testing library and methods are not unique or hard to copy, especially as new AI models get smarter and make old attack libraries less useful. The one thing that could save the company is if its other product, Arx, actually gets adopted by real enterprise customers in the next six months, proving the approach works at scale; without that, it will likely be bought up for its small team rather than survive as an independent business.

Why
01
AI pressure: Frontier model labs hardening models against jailbreaks (e.g. GPT-5.6 Sol). Every new model release makes Nyx's jailbreak library stale, forcing constant rebuilds just to keep pace. Could AI do the core job? Yes, likely.
02
Bigger players: Cisco (AI Defense/Robust Intelligence), Palo Alto Networks (Protect AI), Check Point (Lakera). Three big security vendors already sell AI agent testing and defense bundled into products, live in the same market Fabraix just entered. Could a giant copy it? Yes, easily.
03
What protects it. None verified yet: no named customers, no proof its jailbreak library beats rivals, just an early product and YC backing.
What would change this call
Whether Fabraix names a Fortune 500 or enterprise customer running Arx in production within 6 months. Would show real workflow lock-in rather than one-off scans or unverified claims.
Whether Mindgard or HiddenLayer is acquired by a major security vendor in the next 6 to 12 months. Would show incumbents closing the independent-vendor window Fabraix depends on.
Whether independent researchers replicate or contradict the 78 percent AgentHarm benchmark result. Would show whether Fabraix's core performance claim holds up outside its own marketing.
Key numbers
  • 2 employees confirmed, YC S26 batch (2026-07-19)
  • Claims 78% attack success vs 67% for rival model (2026-07-20)
  • Check Point bought Lakera, third such deal since 2024 (2026-06-12)
Named risks
  • Two-person team with no disclosed funding competing against well-funded rivals and incumbents. Severity: high
  • All traction and benchmark claims are vendor-self-reported with no named customers or independent verification. Severity: high
  • Three major incumbents (Cisco, Palo Alto, Check Point) already consolidated comparable AI red-teaming specialists. Severity: high
  • Jailbreak library and offensive tactics depreciate with each new frontier model release. Severity: medium
  • Arx runtime defense is REST-only with no confirmed production integration or workflow lock-in. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Cisco (Robust Intelligence, AI Defense)gaining onAcquired Robust Intelligence 2024, folded into Cisco AI Defense platform
Palo Alto Networks (Protect AI)gaining onAcquired Protect AI, bundling AI red-teaming into broader platform, reported by 2026-06-12
Check Point (Lakera)gaining onAcquired Lakera in November 2025, absorbing a direct red-teaming peer
MindgardcontestingPositioned as continuous automated AI red-teaming leader as of 2026-05-16
HiddenLayercontestingOffers broader multi-layer AI security platform vs Fabraix's narrower agent focus, 2026-06-12
Questions people ask
Is Fabraix profitable in 2026?
No revenue figures are disclosed. Fabraix is a 2-person Y Combinator S26 startup with no named customers, only a vendor claim of finding bugs at 'dozens of Fortune 500 companies' as of July 2026, and no confirmed funding beyond YC's own program.
Who owns Fabraix?
Fabraix is privately held and part of Y Combinator's Summer 2026 batch. No external investors, valuation, or funding round beyond the YC program itself were found as of July 2026; the company remains founder-owned at 2 employees.
Could AI replace Fabraix?
Fabraix's own product, Nyx, is an AI agent that automates work once done by human penetration testers, so it is itself an AI-replacement case. Its jailbreak library and offensive tactics also depreciate with each new frontier model release, as of July 2026.
Who is Fabraix's biggest competitor?
Fabraix competes with funded pure-plays Mindgard and HiddenLayer, plus free open-source tools like PyRIT and garak, while incumbents Cisco, Palo Alto Networks, and Check Point have already absorbed comparable specialists via acquisition as of 2024-2025.
Has Fabraix raised any funding?
No independent funding round, investor names, or valuation were found as of July 2026 beyond Fabraix's participation in Y Combinator's S26 batch, which typically provides seed capital in exchange for equity.
Is Fabraix the same company as Fabrix Security?
No. Fabraix is a San Francisco AI red-teaming startup in YC S26. Fabrix Security is an unrelated Tel Aviv identity/access startup founded March 2025 that raised $8M seed in September 2025 and was acquired by Silverfort in April 2026.
Timeline
  • 2026-07-20Fabraix launches on Launch YC, claims Nyx beats 'GPT-5.6 Sol' 78% to 67% on AgentHarm
  • 2026-07-19YC jobs page confirms Fabraix headcount at 2 employees, SF based
  • 2026-07-12Playground gamified red-teaming platform profiled, offers $100K+ weekly rewards
  • 2026-05-07Fabraix profiled on chatgate.ai; Arx described as REST-only with SDK on roadmap
  • 2026-04-28Unrelated company Fabrix Security acquired by Silverfort, causing name confusion
  • 2025-11Check Point acquires Lakera, consolidating AI red-teaming/guardrails market
  • 2024Cisco acquires Robust Intelligence, folded into Cisco AI Defense
Revision history
27 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources