A

Asymptote Labs

Runtime infrastructure for AI agents

Overview

Asymptote Labs provides runtime infrastructure for AI agents, including a shared runtime data layer and an enterprise platform that gives organizations real-time visibility and control over AI agents across tools and environments. Beacon collects and normalizes agent activity across harnesses, while the enterprise platform enforces policy-driven guardrails and detects risks such as data leakage and insider threats at runtime. It differentiates itself by offering real-time, cross-harness governance with an open telemetry layer and centralized policy enforcement, rather than tool-by-tool audits. The goal is to help security teams and regulated organizations safely deploy and manage AI agents with continuous visibility and risk protection across all AI workflows.

Work here?Claim your company

About Asymptote Labs

Simplify's Rating
Why Asymptote Labs is rated
C+
Rated C on Competitive Edge
Rated B on Growth Potential
Rated C on Differentiation

Industries

Data & AnalyticsEnterprise SoftwareCybersecurityAI & Machine Learning

Company Size

1-10

Company Stage

Seed

Total Funding

$5.5M

Headquarters

New York City, United States

Founded

2025

Get referred to Asymptote Labs

See people who can refer or advise you

Simplify Jobs

Simplify's take

What believers are saying

  • Asymptote raised $5.5 million on October 20, 2026, funding engineering, product, hiring, and sales.
  • Financial services and regulated enterprises adopted Beacon early, matching its security-first runtime-control pitch.
  • Beacon's MIT-licensed open source lowers adoption friction and feeds Asymptote's enterprise upsell.

What critics are saying

  • Asymptote disclosed no valuation, revenue, or named customers on October 20, 2026.
  • Crowded rivals like Straiker and AWS AgentCore pressure pricing, differentiation, and enterprise trust.
  • If Beacon becomes a commodity telemetry standard, Asymptote loses control revenue and becomes replaceable.

What makes Asymptote Labs unique

  • Beacon normalizes 20-plus agent harnesses into one runtime record, including Claude Code and Cursor.
  • Tower Research Ventures' security team is evaluating Beacon on Tower endpoints.
  • Open-source Beacon launched in May 2026 and hit GitHub global trending No. 3 in September.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$5.5M

Above

Industry Average

Funded Over

1 Rounds

Seed funding is usually the first official round after pre-seed, when a startup has a prototype or concept. It’s typically used to develop the product, test the market, and start building the team. Investors here are often angel investors or early-stage venture capitalists.
Seed Funding Comparison
Above Average

Industry standards

$3.3M
$2M
$2.3M
$3M
$5.5M

Benefits

  • Company Equity

Company News

DevCuration
Oct 20th, 2026
Asymptote Labs raises $5.5M Seed for AI agent control.

Asymptote Labs raises $5.5M Seed for AI agent control. Tower Research Ventures has a second way to examine its latest AI infrastructure investment: its own security organization is evaluating Beacon on the trading firm's endpoints. That gives Asymptote Labs an unusually concrete setting for its pitch, as the New York startup works to make AI-agent activity something an enterprise can inspect and control across different tools. Asymptote announced a $5.5M Seed round on October 20, 2026, led by Tower Research Ventures, with Lytical Ventures, 1984 Ventures and South Park Commons participating. The financing supports engineering, product development, hiring and go-to-market. Co-founders Justin D'Souza, CEO, and Shukan Shah, CTO, are building a business around the evidence agents leave while doing useful work. The purchase decision reaches beyond choosing a better coding assistant. Security teams need to follow actions across those assistants, while engineering teams want useful history to survive the end of a session. Asymptote's combination of open-source collection and commercial governance puts those two needs on the same underlying record. What Asymptote's Seed round supports. Tower Research Ventures is the venture arm of Tower Research Capital. Its investment and its security team's evaluation are distinct relationships: one finances Asymptote, while the other explores how Beacon works in an operating environment. The announcement does not establish Tower as a paying enterprise customer or disclose the outcome of that evaluation. The founders bring experience from the work of identifying threats at Doppel. Asymptote's current team page identifies D'Souza's background in machine-learning infrastructure and Shah's in security operations automation, alongside earlier payments work. Their familiarity with both detection and workflow matters to a product that has to interpret what happened and make the resulting information usable by another team. South Park Commons lists Asymptote as a New York company founded in 2025 and identifies both founders. Its involvement includes the Founder Fellowship described in Asymptote's announcement, giving this financing continuity with the company's formation. No valuation or detailed lifetime funding total has been disclosed in the sources reviewed. For buyers, the use of proceeds points toward a practical expansion of the supplier as well as its software. Engineering and product investment support a growing range of agent environments; go-to-market and hiring support the people who explain, deploy and maintain the offering. Asymptote's careers page provides a current route into that work, without disclosing a numerical hiring target. A common record across different agents. Agent Beacon is the open-source foundation. Its repository describes a shared event model for prompts, responses, commands, file activity, approvals and other session details across agent harnesses. For an engineering organization, that offers a way to preserve history as employees move among tools with different interfaces and conventions. A common record can change the handoff between a developer and a security analyst. Rather than first deciding which assistant holds the evidence, the analyst can begin with the work itself and follow its sequence. The normalized record provides a starting point for that investigation; an analyst still has to interpret the action and its consequences. Beacon's current repository also describes a process for turning session history into reusable knowledge. Lessons can be extracted, reviewed and made available to future agents through MCP or Agent Skills. That connects security evidence with a different engineering concern: retaining a useful debugging path or repository convention after the person and assistant who discovered it have moved on. Deployment choices deserve attention alongside those capabilities. The README explains that interactive setup preselects Beacon Cloud with a local opt-out, while other installation paths have different behavior. A buyer assessing the product should examine the actual destination, capture mode and retention choices for its deployment, because prompts and traces can contain material the organization also needs to govern. Where open source becomes an enterprise purchase. Asymptote's pricing and deployment comparison separates free Community collection from a custom-priced Enterprise service and Private Deployment. The paid offering adds managed ingestion, retention, search and analytics, alongside identity, policy, approvals and governance. Private deployment options address organizations that need tighter control over infrastructure and data location. That packaging gives the developer and the enterprise buyer different reasons to participate. An engineer may value the portable session record immediately, while an organization pays for the work of operating that record across a fleet. Keeping the collector open also lets a prospective customer inspect an important part of what it would introduce into its environment. The commercial argument depends on the relationship between observation and intervention. Asymptote advertises runtime detection and policy enforcement for agent actions, while its documentation describes the managed platform as a layer for visibility and governance. Teams evaluating that offer still have to decide which actions require approval, who owns the policy and how exceptions fit their development process. Those decisions place Asymptote beside existing security and observability systems, within the enterprise-agent security market also covered in DevCuration's Opsin reporting. The company offers forwarding into established tools, so a deployment can extend the systems a team already operates. For procurement, integration and responsibility become useful evaluation criteria: where an event arrives, which team investigates it and where a decision to block an action is enforced. The operating relationship behind the round. Asymptote's announcement reports production use by security teams without naming customers or disclosing revenue. Developer interest and an investor's internal evaluation describe different parts of adoption, and neither supplies a public contract value. Keeping those distinctions visible gives operators a clearer view of the supplier they are assessing. The broader opportunity follows from letting developers choose among capable agents while maintaining organizational continuity. A company benefits when a useful activity record can outlast a tool decision, support an investigation and carry approved learning into later work. Asymptote is trying to serve that continuity through an open foundation and a managed layer that different teams can use for different purposes. Tower's security organization now has a role in exploring that proposition on its own endpoints. D'Souza and Shah have new capital to build the coverage, controls and support around it, as each additional agent brings another sequence of actions for someone inside the enterprise to understand.

The Next Web
Oct 20th, 2026
Asymptote Labs raises $5.5M to track and control what AI agents do.

Asymptote Labs raises $5.5M to track and control what AI agents do. Its free Beacon tool logs activity from Claude Code, Codex, Cursor and more than 20 other agent tools. October 20, 2026 - 4:17 pm New York startup Asymptote Labs has raised a $5.5M seed round led by Tower Research Ventures. It makes Beacon, a free open-source tool that records what AI agents do, and sells a paid platform that can block risky agent actions. The money will go on engineering, hiring and sales. Asymptote Labs, a New York startup that monitors what AI agents do inside companies, has raised $5.5M in seed funding, it said on Tuesday. Tower Research Ventures, the venture arm of trading firm Tower Research Capital, led the round. Lytical Ventures, 1984 Ventures and South Park Commons also took part. The company did not disclose its valuation. Asymptote's main product is Beacon, a free, open-source tool that records what AI agents do. It works with coding agents such as Claude Code, Codex and Cursor, and more than 20 others. It puts their activity, including prompts, commands and file edits, into one standard format. That gives security teams one place to see what different agents did, and on whose behalf. Asymptote's paid platform builds on Beacon and can block risky actions, such as data leaks, before they happen, the company said. "AI agents are becoming a new operating layer inside every company, but the infrastructure to understand and control them hasn't caught up," said Justin D'Souza, Asymptote's co-founder and chief executive. D'Souza and co-founder Shukan Shah previously worked as engineers at Doppel, a startup that fights social engineering attacks. Beacon launched in May, and the company says its GitHub page grew its stars by more than 460% in September. Asymptote said security teams already use its tools in production, but did not name customers. Tower's own security team is testing Beacon on its computers, the company said. Investors are betting that companies need new tools as agents take on real work. Straiker raised $64M in June to test and monitor AI agents. This month, researchers said a single prompt let them take over agents on Amazon's AgentCore, though AWS disputed the findings. Get the most important tech news in your inbox each week.

Unite.AI
Oct 20th, 2026
Asymptote Labs raises $5.5M seed to monitor and control enterprise AI agents

Asymptote Labs has raised an oversubscribed $5.5 million seed round to help companies monitor and control AI agents. Tower Research Ventures led the round, with Lytical Ventures, 1984 Ventures, and South Park Commons participating. The company will spend the money on engineering, product development, hiring, and go-to-market expansion. Its open-source tool, Beacon, records agent activity across Claude Code, Codex, Cursor, and more than 20 other tools in a common data format. An enterprise platform adds detection, response, and governance, including policy guardrails that can intercept live agent activity. Justin D'Souza, chief executive officer, and Shukan Shah, chief technology officer, co-founded the company. Both previously worked at Doppel.

Hyrax AI
Jun 22nd, 2026
The audit trail agents don't leave by default.

The audit trail agents don't leave by default. Asymptote Labs released Beacon this week: open-source telemetry that captures what Claude Code, Cursor, and Codex CLI actually do, not just what they output. Asymptote Labs released Beacon on June 22, 2026: an open-source project that configures telemetry for Claude Code, Codex CLI, Cursor, and Claude Cowork, then writes a normalized record of what each agent did across local, CI, and cloud surfaces. The tool exists because the default state today is nothing. A PR merges. The diff is visible. The tool calls, file reads, and shell commands that produced it are not. What a diff does and does not tell you. A git diff is a final-state artifact. It records which lines changed, in which files, at which commit. It does not record which files the agent read but did not change. It does not record which shell commands ran during the session. It does not record whether the agent read a .env file, called kubectl, or pulled a new dependency whose postinstall script executed arbitrary code. The diff is useful. It is not a behavioral record. The gap becomes a problem during incident review. As BaristaLabs documented in June 2026, teams reconstructing agent activity after the fact typically end up with three fragments: a chat log, a git diff, and scattered shell history that may or may not belong to the agent session in question. That is not an audit trail. It is debris. What Beacon actually captures. According to the Beacon README, the tool discovers supported local runtimes on a host, configures data collection for those runtimes, and normalizes activity into endpoint events. Three layers: an agent runtime layer pulls from local hooks and OpenTelemetry sources; a Beacon endpoint layer normalizes events and applies retention and redaction settings; an output layer writes JSONL locally, exposes a local dashboard, or forwards to an enterprise SIEM. Practically, this means: prompts, tool calls, file reads, file writes, shell commands, and process activity, all connected to the original human instruction. The GitHub repository was created May 12, 2026 and had 192 stars and 7 forks as of June 8, 2026, per BaristaLabs' reporting. Those are early-adopter numbers. The importance is not the adoption curve. It is what the project reveals about the default absence of this data. Why June 2026 produced a cluster of these tools. Three separate releases in the same two-week window signal something beyond coincidence. New Relic launched open-source AI Coding Observability in early June, explicitly targeting the blind spot where coding assistants like Claude Code, Cursor, and GitHub Copilot operate outside traditional observability stacks. Cursor shipped Auto-review on June 11, a governance mechanism for local agents that have access to files, credentials, environment variables, and production-adjacent systems. DeusData's codebase-memory-mcp v0.8.0, released June 11, added persistent queryable memory for agents across 9 languages, including Java, Kotlin, and Rust, so agents can maintain context across sessions rather than reconstructing it from scratch each time. Each of these tools addresses a different part of the same structural problem: agents do work that is consequential, multi-step, and largely invisible to the review processes built around human-written diffs. The tooling category is forming now because agent autonomy reached the level where the absence of telemetry became operationally dangerous, not merely theoretically inconvenient. The policy-before-visibility trap. A predictable response to agent risk is to reach for allowlists. Block these directories, require approval before that tool, disable shell access in CI. Policy is not wrong. But as Clord's June 11 writeup on agent observability put it, a chat transcript tells you what the agent said, not what happened. Policy without a behavioral record produces two failure modes simultaneously: over-blocking legitimate work because reviewers cannot distinguish routine tool calls from dangerous ones, and under-blocking dangerous work because the dangerous calls do not appear in the policy surface being monitored. Context is the problem. A kubectl command during an infrastructure incident is appropriate. The same command as a side effect of a unit test fix is not. A .env read during debugging is expected. The same read during a documentation edit is a flag. Static allowlists cannot distinguish these cases. Behavioral telemetry, combined with task context, can. What this means for code review. Hyrax operates at exactly the surface these tools are now trying to instrument. A reviewer looking only at a diff is reviewing the output of a process they cannot see. Hyrax reasons about how code was likely produced, what patterns are present across the full repository context, and what the fix needs to be before the PR is created. The broader implication for engineering teams: code review is already downstream of agent behavior. As agents take on more autonomous work, the diff will increasingly be the least informative artifact in the chain. Teams that configure telemetry now, even minimally, even just JSONL on a developer laptop, will have a reconstruction path when something goes wrong. Teams that do not will be left arguing from fragments. Beacon is one tool. The requirement it addresses is not going away. The telemetry layer is becoming the new audit trail, and right now most teams have neither.

Asymptote Labs
Jan 5th, 2026
Asymptote is the security layer for this shift.

Asymptote is the security layer for this shift. Asymptote Labs is incredibly excited to share that Asymptote Labs has raised a new round of funding from South Park Commons. Asymptote Labs is also fortunate to be backed by a select group of seasoned founders and operators from world-class companies across cybersecurity and data infrastructure, whose experience and conviction are a powerful validation of its vision. The SDLC has a new blind spot: AI. Software now writes the software that runs the world. AI coding agents are shipping more code, with more autonomy, than any human team could ever hope to keep up with. That creates AI-specific vulnerabilities in prompts, tool calls, and agent workflows that traditional application security tools simply can't see. * Prompt injection that turns a code assistant into a data-exfiltration path * Over-privileged tool calls against internal APIs * Agent chains that quietly route around RBAC and policy Traditional static-analysis (SAST) tools were never built to see these failures in prompts, tool wiring, or runtime behavior. This turns your SDLC into a massive new attack surface. Product security reimagined for an ai-first SDLC. Its core innovations include the Asymptote Security MCP Server, and an AI observability platform. This enables Asymptote to: * Plug into your development stack: coding tools, repos, and pipelines to apply real-time guardrails aligned to standards like the OWASP Top 10 and CWE Top 25. * Inspect every AI-generated change before it lands and log exactly what each agent did and why. * Keep developers moving fast, while security and platform teams get back the visibility and control they need. Asymptote monitors what your AI agents do, locks down what they can access, and catches risky changes before they ship. That way you can lean into AI in your SDLC without sacrificing security or control. Its team. At Asymptote Labs, Asymptote Labs is building a small, focused team of people who care deeply about their craft and push themselves to do the best work of their careers as Asymptote Labs grow Asymptote into a category-defining cybersecurity company. Justin and Shukan bring deep experience building and operating large-scale systems at the intersection of AI, cybersecurity, and data infrastructure. Their shared journey and complementary perspectives shape Asymptote's principles and continue to drive how Asymptote Labs design, build, and iterate on its platform. Thank you. Last, Asymptote Labs want to thank its customers, angel investors and the incredible investor team and community South Park Commons. Asymptote Labs is so grateful for your support.

Recently Posted Jobs

Sign up to get curated job recommendations

Asymptote Labs is Hiring for 4 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs