WillItSurvive
YC Fall 2025 · United States

Veria Labs

3-person YC startup building AI agents that pentest code continuously via CI/CD.

Losing its protection
Assessed 27 July 2026 · Evidence as of 27 July 2026
The structural protection is eroding.
On the recordSince 27 July 2026 · Checkable from Sep 10, 2026 · Every call on the record Checkpoint: ISC2 East Bay Chapter speaking event, watch for messaging shift toward crypto/agent security vertical
The call

Veria sits in a horizontal pentesting market XBOW already dominates with Microsoft's distribution, leaving a narrow crypto or AI-agent vertical as the only unclaimed space.

Veria Labs helps companies find security bugs in their code using artificial intelligence instead of hiring traditional security testers. The problem is that a company called XBOW, backed by Microsoft, already does this and has way more money, customers, and partnerships. Veria has no special advantage that competitors cannot copy, like exclusive data or exclusive access to major software platforms. The one thing that could turn this around is if Veria stops trying to compete head-to-head with XBOW and instead focuses on a narrower specialty, like protecting cryptocurrency or AI systems, where their specialized research experience actually gives them an edge.

Why
01
AI pressure: XBOW. XBOW already ships autonomous pentesting with Microsoft Security Copilot and Sentinel integration, the same buyer Veria needs. Could AI do the core job? Yes, likely.
02
Bigger players: Microsoft (GitHub Advanced Security). If GitHub ships autonomous pentesting natively inside Advanced Security, Veria's horizontal pitch loses its reason to exist. Could a giant copy it? Yes, easily.
03
What protects it. Founders' CTF-ranked hacking background and disclosed bugs in Aleo, Pydantic, and Jolt zkVM give them credibility to sell into crypto and AI-agent security, niches XBOW's training data does not cover well.
What would change this call
Veria's website/pitch shifts from 'pentest your code' to 'secure your zk protocol' or 'secure your agent' language. Founders abandon horizontal market, pivot to crypto/AI-agent vertical where they have credibility.
GitHub Advanced Security announces native autonomous pentesting features. Horizontal AI-pentesting space closes, making Veria's current positioning unviable.
Veria announces next funding round from crypto-native or AI-security-focused funds versus generic seed extension. Confirms strategic pivot to defensible vertical niche rather than horizontal competition.
Key numbers
  • $3.2M seed round, 15 participating funds (Dec 2025 or Feb 2026)
  • XBOW valued over $1B, raised roughly $230M+ (2026)
  • Veria team size: 3, no open job postings (Jul 2026)
Named risks
  • Roughly 70x capital disadvantage against category leader XBOW ($150M+ raised in 2026 vs Veria's $3.2M). Severity: high
  • No proprietary data, compliance certification, or workflow lock-in disclosed as a durable moat. Severity: high
  • Only 3-person team with no disclosed customers, revenue, or active hiring as of mid-2026. Severity: medium
  • Conflicting public reports on seed round size and closing date (Dec 2025 vs Feb 2026) unresolved by primary filing. Severity: low
  • Category consolidation risk as Microsoft embeds autonomous pentesting natively via XBOW partnership. Severity: high
Rivals, as read in July 2026
RivalDirectionEvidence
XBOWlosing toXBOW passed $1B valuation and shipped Microsoft Security Copilot integration by 2026-03-18, versus Veria's $3.2M seed
MindFortcontestingBoth YC-backed autonomous pentesting startups; MindFort raised comparable $3M+ seed on 2026-04-20
Gecko SecuritycontestingGecko publishes competing public vulnerability disclosures, e.g. Cal.com chain on 2026-01-25
Traditional manual pentest firmsgaining onContinuous AI model targets displacement of $15K to $30K manual engagements per Veria's own pitch
Questions people ask
Is Veria Labs profitable in 2026?
No revenue, ARR, or customer figures have been disclosed for Veria Labs as of July 2026. The company is a 3-person, seed-stage YC Fall 2025 startup with a subscription model targeting fintech, healthcare, and crypto firms, per cybersectools.com dated 2026-07-22, but no confirmed traction.
Who founded Veria Labs?
Veria Labs was founded by CEO Stephen Xu, an ex-Offensive Security researcher at TikTok, alongside Cayden Liao and Jayden Sarveshkumar. All three describe themselves as members of a top-ranked US CTF hacking team. The company joined Y Combinator's Fall 2025 batch, per ycombinator.com.
How much funding has Veria Labs raised?
Veria Labs raised a $3.2M seed round, announced February 9, 2026 per startuphub.ai, though Preqin's data lists the same $3.2M round as closing in December 2025 led by Y Combinator, an unresolved discrepancy as of mid-2026.
Who is Veria Labs' biggest competitor?
XBOW is the dominant rival: it raised a $120M Series C plus roughly $35M more in 2026, exceeding a $1 billion valuation, reached #1 on the HackerOne leaderboard, and shipped a Microsoft Security Copilot and Sentinel integration at RSAC 2026, per businesswire.com dated 2026-03-18.
Could AI replace Veria Labs?
Veria Labs is itself an AI pentesting agent, but it faces disruption from better-funded AI-native rivals. XBOW alone raised over $150M across two 2026 rounds versus Veria's $3.2M seed, and Microsoft is embedding similar autonomous pentesting directly into developer tools via XBOW, per businesswire.com, 2026-03-18.
Is Veria Labs a safe company to join?
Veria Labs is a very early-stage, 3-person team with no open job postings on Y Combinator's platform as of mid-2026 and no disclosed revenue or customers. It competes against a category leader, XBOW, valued over $1 billion, making its near-term stability uncertain.
Timeline
  • 2026-09-10Co-founder Stephen Xu scheduled to speak at ISC2 East Bay Chapter on AI in offensive security
  • 2026-05-06Rival XBOW raises additional ~$35M, per geekwire.com
  • 2026-04-20Peer startup MindFort raises $3M+ seed led by Soma Capital
  • 2026-03-18Rival XBOW raises $120M Series C, tops $1B valuation, ships Microsoft Security Copilot integration
  • 2026-02-09Veria Labs seed round of $3.2M announced, per startuphub.ai
  • 2026-02-04ISC2 East Bay Chapter announces Stephen Xu's upcoming September 2026 talk
  • 2026-01-25Rival Gecko Security discloses Cal.com account-takeover vulnerability chain
  • 2025-12Veria Labs seed round of $3.2M reportedly closes, led by Y Combinator, per Preqin
  • 2025-10-01Veria Labs publicly launches via Y Combinator as part of Fall 2025 batch
Revision history
27 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources