WillItSurvive
YC Spring 2026 · United States

Tolmo

Tolmo is an early-stage startup building AI agents that detect, triage, and fix security issues in code and cloud.

Losing its protection
Assessed 27 July 2026 · Evidence as of 27 July 2026
The structural protection is eroding.
On the recordSince 27 July 2026 · Checkable from Q3 2027 · Every call on the record Checkpoint: 15-month checkpoint on named design partners, pricing model, and published effectiveness metrics
The call

Tolmo has credible security founders and a live category, but it competes against Datadog, Snyk, and Cycode, all of whom shipped similar agentic features in the same mid-2026 window, with no customers or pricing model disclosed yet.

Tolmo is a young company that uses artificial intelligence to find and fix security problems in software code and systems. The company was started by people who previously built security tools at companies like Datadog, so they know the space well. The hard part for Tolmo is that bigger, established companies like Datadog are already building very similar AI security tools and have huge advantages: they already know where your systems run (through their monitoring software) and billions of dollars to spend on development. Tolmo's main bet is that it can build something so custom and locked into each customer's workflow that those big companies cannot easily copy it, but the company has roughly 12 to 18 months to prove this works before competitors bundle similar features into their existing products, which would make Tolmo much less valuable.

Why
01
AI pressure: Datadog's Bits AI autonomous security agents. Datadog shipped Bits AI in 2026 to autonomously triage and fix security issues, the same job Tolmo's agents are built to do. Could AI do the core job? Only partly.
02
Bigger players: Datadog. Datadog already owns the production telemetry data Tolmo's graph depends on, and it acquired the founders' last company, Sqreen, in 2021. Could a giant copy it? Yes, easily.
03
What protects it. A planned 'Production Knowledge Graph' meant to create workflow lock-in, but it is unproven and has zero disclosed customers so far.
What would change this call
Datadog's Bits AI ships autonomous remediation features matching Tolmo's pitch within suite. Shows Datadog can bundle the outcome, shrinking Tolmo's differentiation window.
Tolmo announces 3-5 named enterprise design partners with disclosed CLI or graph usage. Would be first real evidence of workflow lock-in rather than demo interest.
Tolmo publishes false-positive or mean-time-to-remediation metrics versus Cycode's 94% claim. Would signal it can compete on credibility, not just founder pedigree.
Key numbers
  • Seed round reported as $22M or $30M, sources conflict (2026-06-25)
  • 12-person team (2026-06)
  • Zero disclosed customers, still pre-GA (2026-06)
Named risks
  • No disclosed revenue, customers, or enterprise logos as of June 2026 launch. Severity: high
  • Datadog and Snyk already shipping comparable autonomous remediation agents in same 2026 window. Severity: high
  • Conflicting seed round figures ($22M vs $30M) suggest unresolved or unverified fundraising claims. Severity: medium
  • Frontier AI labs could ship native persistent infrastructure connectors, eroding Tolmo's graph moat. Severity: medium
  • No published effectiveness metrics (false-positive rate, mean-time-to-remediation) to prove differentiation. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
DatadogcontestingOwns production telemetry Tolmo needs; shipped Bits AI agents 2026; acquired founders' Sqreen 2021-04-12
SnykcontestingLaunched agentic remediation tool 'Assist' March 2026, same buyer segment as Tolmo
CycodecontestingFunded agentic security peer active as of 2026-05-27, touts 94% false-positive reduction (vendor claim)
OnyxcontestingLaunched Guardian Agent with $40M funding, per SecurityWeek 2026-03-13
RiliancontestingRaised $17.5M for AI-native security orchestration product Caspian, 2026-04-23
Noma Securitygaining onRaised $100M Series B in July 2025, well ahead of Tolmo's seed stage
Questions people ask
Is Tolmo profitable in 2026?
No. Tolmo has disclosed zero revenue or customer counts as of its June 24, 2026 YC Launch debut. It is a pre-GA, seed-stage startup still in waitlist/early-access with no public pricing, so profitability is not applicable yet.
Who owns Tolmo and who funds it?
Tolmo is privately held and venture-backed. It came out of stealth June 18, 2026 with a seed round led by Accel and participation from Y Combinator. Round size is disputed: $22M per Inforcapital (2026-06-16) versus $30M per Script Capital (2026-06-25).
Could AI replace Tolmo's product?
Tolmo itself sells AI agents, so the risk runs the other way: incumbents like Datadog (Bits AI) and Snyk (Assist, March 2026) are shipping similar autonomous detect-triage-remediate agents that could bundle Tolmo's core workflow into existing suites within 12-18 months.
Who is Tolmo's biggest competitor?
Datadog is the most direct threat: it acquired the founders' prior company Sqreen in April 2021 and now ships its own autonomous security agents (Bits AI, 2026), owning the production telemetry graph Tolmo is trying to build as its core moat.
How much money has Tolmo raised?
Tolmo raised a seed round led by Accel with Y Combinator participation, announced June 18, 2026. Reported size conflicts across sources: $22M (Inforcapital, 2026-06-16) versus $30M (Script Capital, 2026-06-25); no primary press release confirms an exact figure.
What does Tolmo actually build?
Tolmo builds an agent-native security platform that deploys fleets of AI agents across code, CI/CD, and cloud to autonomously triage, verify, and remediate security issues, using a 'Production Knowledge Graph' fusing infrastructure, deployment, and vendor data, per its June 18, 2026 Accel investment post.
Timeline
  • 2026-06-25Script Capital reports Accel led $30M seed round (conflicting figure)
  • 2026-06-24Tolmo publicly launches on Y Combinator Launch platform
  • 2026-06-18Accel publishes blog announcing seed investment in Tolmo
  • 2026-06-16Inforcapital lists Tolmo seed round at $22M led by Accel
  • 2026-05-29Tolmo CLI documentation published describing SQL/Cypher graph queries
  • 2021-04-12Datadog completes acquisition of founders' prior company Sqreen
Revision history
27 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources