--- title: Launch HN: Traceforce (YC S26) – Company-wide security... description: Traceforce is a YC S26 startup offering company-wide security monitoring for AI applications. It installs a lightweight binary and browser extension on... canonical: https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps | daily.dev og:description: Traceforce is a YC S26 startup offering company-wide security monitoring for AI applications. It installs a lightweight binary and browser extension on... og:url: https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd og:image: https://api.daily.dev/og/posts/N5S0z3nBd.png og:image:alt: Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps **[Hacker News](https://daily.dev/sources/hn)** · 4 min read · 1 upvotes · 0 comments ## Summary Traceforce is a YC S26 startup offering company-wide security monitoring for AI applications. It installs a lightweight binary and browser extension on employee devices to provide real-time visibility into AI agents, apps, and MCP connections running across an organization. Security teams get a dashboard to monitor activity, implement controls, and receive alerts for risks like exposed secrets, API key leaks, or destructive commands. Content inspection happens locally on-device, and user prompts are never stored by default. Currently deployed on 1,000+ devices across 10 organizations, it targets SMEs with 200+ employees rapidly adopting AI coding assistants and MCPs. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can a security team monitor what AI agents and MCP tools employees are running on company devices? A lightweight binary plus browser extension installed on each device can upload live telemetry to a company dashboard within about 30 minutes, showing every AI agent, app, and MCP connection in use. By default only metadata and telemetry are collected; content inspection happens locally, and user prompts are never stored unless an administrator explicitly enables it. Security staff can then set alerts and warn-and-acknowledge controls for risky actions like exposed secrets or destructive commands. _daily.dev surfaces practical approaches like this for teams weighing AI agent visibility against developer speed._ ### What kinds of security risks do companies typically find from AI coding assistants and MCP servers? Common findings include exposed plaintext secrets sitting in MCP configuration files, API keys leaking through AI-generated code, and destructive commands such as DROP TABLE being executed without warning. Across more than 1,000 monitored devices at 10 organizations, an average of over 15 AI applications were found per device, each connected to 5-10 MCP servers, illustrating how quickly unmanaged AI tool sprawl can grow. _Track emerging MCP and AI-agent security risks on daily.dev before they hit production._ ## Similar posts on daily.dev - [Trace raises $3M to solve the AI agent adoption problem in enterprise](https://daily.dev/posts/trace-raises-3m-to-solve-the-ai-agent-adoption-problem-in-enterprise-yyzjtvdww) · TechCrunch · 0 upvotes · 0 comments - [Launch HN: Trigger.dev \(YC W23\) – Open-source platform to build reliable AI apps](https://daily.dev/posts/launch-hn-trigger-dev-yc-w23-open-source-platform-to-build-reliable-ai-apps-nlhfnhaso) · Hacker News · 1 upvotes · 0 comments - [Dynatrace AI agents begin working for you on day one, and are built to grow with you](https://daily.dev/posts/dynatrace-ai-agents-begin-working-for-you-on-day-one-and-are-built-to-grow-with-you-bwyoowzjv) · Dynatrace · 0 upvotes · 0 comments - [Shadow AI agents are multiplying. Here's how to find and secure them.](https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk) · BleepingComputer · 1 upvotes · 0 comments - [Community-powered security with AI: an open source framework for security research](https://daily.dev/posts/community-powered-security-with-ai-an-open-source-framework-for-security-research-zvkqecnsc) · GitHub Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps","url":"https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd"},"datePublished":"2026-07-16T22:54:46.771Z","dateModified":"2026-09-14T07:01:00.779Z","description":"Traceforce is a YC S26 startup offering company-wide security monitoring for AI applications. It installs a lightweight binary and browser extension on...","image":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","thumbnailUrl":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,mcp,ai-security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/launch-hn-traceforce-yc-s26-company-wide-security-monitoring-for-ai-apps-n5s0z3nbd#faq","mainEntity":[{"@type":"Question","name":"How can a security team monitor what AI agents and MCP tools employees are running on company devices?","acceptedAnswer":{"@type":"Answer","text":"A lightweight binary plus browser extension installed on each device can upload live telemetry to a company dashboard within about 30 minutes, showing every AI agent, app, and MCP connection in use. By default only metadata and telemetry are collected; content inspection happens locally, and user prompts are never stored unless an administrator explicitly enables it. Security staff can then set alerts and warn-and-acknowledge controls for risky actions like exposed secrets or destructive commands. daily.dev surfaces practical approaches like this for teams weighing AI agent visibility against developer speed."}},{"@type":"Question","name":"What kinds of security risks do companies typically find from AI coding assistants and MCP servers?","acceptedAnswer":{"@type":"Answer","text":"Common findings include exposed plaintext secrets sitting in MCP configuration files, API keys leaking through AI-generated code, and destructive commands such as DROP TABLE being executed without warning. Across more than 1,000 monitored devices at 10 organizations, an average of over 15 AI applications were found per device, each connected to 5-10 MCP servers, illustrating how quickly unmanaged AI tool sprawl can grow. Track emerging MCP and AI-agent security risks on daily.dev before they hit production."}}]} ```