Radar / AI security / Alter (YC S25)
Alter (YC S25): zero-trust identity and access control for AI agents
Alter (YC S25) launched a zero-trust identity and access-control platform for AI agents, sitting in the middle of every agent interaction to verify identity and apply fine-grained RBAC/ABAC policy with audit trails.
Why it matters
It answers the blanket-root-access problem for production agents: least-privilege, parameter-checked tool calls with human-in-the-loop approvals, aimed at unblocking agent deployments in regulated enterprises.
What you could build with it
A dev-tools team can wrap their AI agents in Alter's zero-trust authorization layer to sell agent deployments into regulated enterprises, where every tool call carries identity verification and an audit trail that passes SOC 2 reviews.
Does it hold up?
Too early to judge — launched today; only the founders' launch material and YC profile exist, with no public customer deployments or audit outcomes yet.
Built with Alter (YC S25)
- Alter Launches: Identity and Access Control Platform To Secure Agentsfondo · Launch coverage: founded by Srikar Dandamuraju & Kevan Dodhia (ex-ComputeAI, Goldman Sachs); zero-trust authorization checking every parameter against policy with audit trails.
- Alter: Privileged Access Management for AI Agentsycombinator · YC S25 company profile: MCP and native tool support, real-time approve/deny with identity verification baked into every call.
- alter policy (CLI reference)docs · Live CLI docs showing app-wide, agent-scoped, and provider-scoped policy rules: IP allowlists, time windows, human-in-the-loop approvals.
Learn more
First spotted on article: source.
More AI security
iFixAi: independent auditing of AI agentsIndependent AI-agent auditor: 250+ inspections across 69 misalignment categories (red teaming + operational assurance)…security · JEV 0.76Cloudflare security-audit-skill: six-phase agent-driven security audits with independently verified findingsOpen-source MIT coding-agent skill that runs a codebase through six audit phases — reconnaissance, coverage-led…security · JEV 0.74OpenAI, Anthropic and Google DeepMind jointly unveil cyber-focused safety models and safeguardsThe three rival labs disclosed weeks of behind-the-scenes coordination and jointly released a set of cyber-focused AI…security · JEV 0.73OpenAI textGrain watermarking for ChatGPT and Codex in the EUOpenAI will roll out its invisible textGrain watermarking system to ChatGPT/Codex users in the EU over the coming…security · JEV 0.65Cloudflare security-audit-skill: multi-phase security audits for coding agentsA coding-agent skill that runs multi-phase security audits with independently verified, machine-checkable findings.security · JEV 0.63LiveNerf: a pre-registered benchmark for post-release model driftOpen-source, pre-registered 30-day benchmark that detects whether Claude Opus 5.5 quietly gets worse after launch.security · JEV 0.61
Get the week's best AI launches, plus 3 ideas worth building
One email every Saturday. Ranked by traction, not hype. Free.