Traceforce: Securing AI Apps with Real-Time Device Monitoring
Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps
We built Traceforce to give companies full visibility into AI apps like ChatGPT and Claude running on employee devices. Our lightweight solution discovers how these tools connect to data sources via MCPs, allowing security teams to detect risks and prevent breaches without slowing down developers. By monitoring metadata locally and offering a 'warn and acknowledge' approach, we help organizations safely adopt AI while protecting sensitive information.
We keep hearing that new AI features are being adopted so quickly and so broadly that visibility and control just can't keep up.
- agentinfra
Congrats on the launch. The timing is notable — Trend Micro just audited 9,695 public MCP servers and found 4,982 security issues across 2,259 of them (2,054 with no authentication at all), and their conclusion was that neither popularity nor verification status reliably indicates safety. Meanwhile the 2026-07-28 MCP spec adds new surfaces (extensions, sandboxed HTML apps) that most scanners don't cover yet.
Curious how you think about coverage: are you monitoring the app layer only, or also the MCP servers and tool supply chain the apps pull in? The "verified badge ≠ safe" finding suggests directory-level trust signals aren't enough on their own.
- laul_pogan
Hey Xia! Super excited for this- good talking to you a few weeks ago and best luck with the launch :)
- suzuridev
Small data point from the operator side: I run a tiny public MCP server, and when I finally turned on request logging, almost none of the traffic was what I expected. Mostly link-preview bots, keepalive pings, and scanners probing for wp-admin on an endpoint that isn't even WordPress. Made me realize most small MCP deployments probably have zero visibility into this — people ship a server and never look at what's actually hitting it. So the "you can't flag risky AI-generated commands without context" point resonates; at the low end the problem is even more basic, there's no context at all.