Corgea

Corgea finds, and fixes insecure code and packages autonomously.

4.7Score#90 of 999 agents#1 of 8 in Application security engineer

Why it ranks #90

Corgea, an AI application security engineer from YC S23, ranks #90 of 999 AI agents and #1 of 8 in Application security engineer, with a score of 4.7 of 10. Data as of 3 Oct 2026.

The score adds four parts, each 0 to 10, by weight. Every point comes from public evidence. How scoring works ·

Proof 2 × 30% 0.6
Scale 4 × 30% 1.2
Momentum 8 × 25% 2.0
Autonomy 6 × 15% 0.9
= 4.7

Proof
Do customers use it? 30% of the score
2
Claims a customer result.
- +2
  A customer result
  “In production customers like Zapier and Yageo, see ~20% more true positives and ~90% fewer false positives (vs their prior tooling), reducing triage and speeding remediation without adding headcount.”
  YC page
Not found: revenue or growth (+4), named customers (+3), a customer count (+2), work done at scale (+2)
Scale
Is there a real company behind it? 30% of the score
4
6 people, raised $2.6M.
- +3
  6 people on its YC page5 to 9 people
- +1
  Raised $2.6M (Seed)Corgea’s raises $2.6 Million Seed RoundSource · 6 Nov 2024
Momentum
Is it shipping and growing now? 25% of the score
8
Shows a recent launch, hiring and a new claim.
- +3
  Launched in the last 6 monthsCorgea: Agentic PentestingLaunch YC post · 24 Jun 2026
- +3
  Hiring: 7 open rolesSenior software engineer - California, Senior software engineer - Jordan, Software engineer - JordanYC page
- +2
  A new traction claim
  “Corgea found 25 findings.”
  Launch YC post · 24 Jun 2026
Not found: funding news in the last year (+2), a batch in the last year (it is YC Summer 2023) (+1)
Autonomy
How much of the job does it do on its own? 15% of the score
6
Supervised agent: takes actions in other systems; a person approves key steps.
- +6
  Level 2 of 4: Supervised agentTakes actions in other systems; a person approves key steps.
What the model read
- Acts in other systems: 53% likely
- Finishes whole tasks: 33% likely
- Calls itself an agent: 96% likely
Level 2: Takes actions in other systems; a person approves key steps.

About Corgea

Corgea is an autonomous application security platform that finds and validates vulnerabilities, then generates safe code fixes developers can apply in their existing workflow. In production customers like Zapier and Yageo, see ~20% more true positives and ~90% fewer false positives (vs their prior tooling), reducing triage and speeding remediation without adding headcount.