Endpoint security platform for discovering AI apps, MCPs and skills and enforcing controls on risky agent actions.
Product sources: Y Combinator S26 company/launch page + official product URL
Traceforce is an endpoint security and control platform for workplace AI. It runs on employee devices to discover browser AI, desktop apps, CLI agents, MCP servers and skills, then maps how those tools connect to data and monitors tool activity. The current product surface also describes real-time warning or blocking of unsafe actions and automated remediation such as patching AI packages on-device with policy and audit logs. 12
The platform is broader than inventory alone. Traceforce documents MDM-based deployment through Jamf, JumpCloud, NinjaOne and Iru, and its pricing page includes API access to telemetry. Separately, the company maintains MCP X-Ray as an Apache-2.0 open-source scanner and dynamic pentesting tool for MCP servers; that component can emit SARIF and optionally upload findings to Traceforce Atlas. The open-source status applies to MCP X-Ray, not the main commercial platform. 134
Traceforce currently offers a $0 free trial for up to 10 devices and up to 30 days with no credit card required. The trial includes risk assessment, leakage and dangerous-action detection, telemetry API access and up to 10 devices. The Pro plan is billed per device monthly or yearly, but the current fetched public pricing page does not expose a numeric Pro amount. Enterprise pricing is custom and adds features such as SSO, multi-tenant support, dedicated support and onboarding services. 3
The strongest evidence for the current product is first-party but unusually concrete. The homepage describes 15-minute self-serve onboarding, endpoint-level visibility, runtime controls, MDM integrations and fleet metrics; Y Combinator’s Summer 2026 launch page describes deployments across thousands of devices and active enterprise pilots. Those deployment figures are vendor/launch claims rather than independently audited adoption metrics. 12
The open-source MCP X-Ray repository provides an inspectable technical surface alongside the commercial product. It documents configuration scanning, repository scanning, dynamic MCP pentesting, SARIF output and optional Atlas integration. This does not validate the effectiveness of Traceforce’s proprietary endpoint controls, but it gives security teams a concrete artifact to inspect and test independently. 4
Traceforce is best suited to security, IT and DevSecOps teams managing fleets where employees use ChatGPT, Claude, Cursor, Claude Code or other AI tools with local data and MCP access. It is especially relevant when browser gateways and enterprise APIs cannot see self-installed agents or local tool calls. The free trial and MDM integrations lower the barrier to evaluating the product on a small fleet before broader rollout. 132
The main strengths are coverage and deployability. Traceforce combines discovery, connection mapping, runtime controls, remediation, MDM deployment, telemetry access and an open-source MCP-security companion rather than addressing only one part of AI endpoint governance. A public free trial makes the commercial product more testable than many early enterprise-security tools. 134
The main weakness is evidence independence. Traceforce is a young company and most public claims about deployment scale, detection coverage and blocking effectiveness come from the vendor or its launch material. The current pricing surface also omits a numeric Pro price. Teams should validate endpoint overhead, false-positive behavior, policy coverage, data handling and operational fit in their own environment before broad deployment. 132
Not separately stated in the source review.
Products matched by shared tasks, audience, workflow, product type and capabilities.