Preparing a concise, high-school-friendly company summary for BrainTrust based on the provided description.
Company Size
51-200
Company Stage
Series B
Total Funding
$121.1M
Headquarters
San Francisco, California
Founded
2023
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Health Insurance
Dental Insurance
Vision Insurance
Unlimited Paid Time Off
Competitive salary and equity
AI Stipend
Secure Software Factory Show and Tell: NYC agent security. Keycard, Braintrust, Socket and Docker DevRel will host Secure Software Factory Show and Tell on October 13, 2026, from 5:30-8:30 PM EDT at Elsie Rooftop in New York. The panel and planned live demonstrations focus on securing software workflows operated by AI agents. Registration is free and requires host approval, with doors opening at 5:30 PM at 1412 Broadway, New York, NY 10018. The gathering puts an operational question in front of the people building those workflows: how does responsibility travel with an agent as it moves between tools? Runtime authorization, isolated execution, behavioral evidence and component checks each carry part of the answer. For engineering and security owners, the interesting territory is where one control hands the job to another, especially when a system needs to be stopped. What the software factory program puts on display. The advertised demonstrations divide the work into recognizable responsibilities. Keycard plans to cover discovery, runtime authorization scoped to a task, and response to a rogue agent; Docker will address execution constraints, Braintrust will examine behavior and drift, and Socket will address component validation. The program gives attendees a way to inspect how those responsibilities fit around an agent that produces software. Consider an engineering team deciding which tools a coding agent may use. Someone has to define the task, someone has to grant access, and someone has to explain the resulting activity. An environment boundary and an authorization decision serve different purposes. A trace adds another perspective, but the team still needs to understand which action the evidence describes and who was allowed to initiate it. That is the conversation to take into a demonstration. Ask where the boundary is enforced, what information travels through it, and what remains visible after the agent finishes. A convincing answer should make the ownership of the next step easier to understand. These are editorial questions for attendees, rather than promises that every demonstration will resolve them. The panel-to-demo format is useful because an implementation can expose assumptions that a broad discussion leaves floating. A security owner and a platform engineer may agree on the word "authorized" while expecting different evidence behind it. Watching the same operation gives them something concrete to discuss, including the parts of a workflow that their respective teams need to review together. Agent Baseline gives the room a shared starting point. The event draws on Agent Baseline, an open-source reference framework currently labeled v1.0-draft. Its six outcomes cover discovering agents, constraining their reach, authorizing actions, observing activity, validating systems and responding to incidents. Published July 30, 2026, the framework remains a working draft; its presence in the program should be understood as an organizing approach rather than a certification. The framework's value for this discussion is the breadth of the responsibility it names. An agent inventory helps an organization understand what is operating, while limits and authorization define what an agent can do. Observation, validation and response ask how teams will evaluate behavior and act when it crosses a boundary. Those responsibilities can sit with different owners even inside the same company. For an operator, the practical exercise is to follow a task through those owners. Which team can explain the permitted access? Which team can connect an action to its result? Which team can remove authority and preserve the evidence? A draft framework provides a common set of questions, while each organization still has to establish the answers in its own environment. The demonstrations also sit beside the vendors' stated product areas. Docker offers secure agent sandboxes, Braintrust focuses on agent observability and evaluations, and Socket addresses malicious software dependencies. Keycard describes runtime authorization for agents. Taken together, those perspectives make the boundaries between product responsibilities worth examining; the event has yet to demonstrate how any particular deployment will perform. The listed panel spans identity and operational controls. The current organizer program lists Dick Hardt, founder of AAuth; Ian Livingstone, Keycard co-founder and CEO; Ahmad Nassri, Socket CTO; Zachary Hamilton, Braintrust solutions engineer; and Eli Aleyner, Docker VP Product Strategy. Allie Howe, host of the Insecure Agents podcast, is scheduled to moderate. These are forthcoming program participants, with the organizer's listing controlling any subsequent changes. Dick Hardt's standards background gives the identity discussion a useful anchor: RFC 6749 identifies Dick Hardt as editor of the OAuth 2.0 authorization framework. The connection matters because delegated access has a long technical history. An agent-operated workflow gives the audience a concrete setting in which to ask how identity and permitted action relate across a sequence of tools. The other listed roles bring the product and implementation responsibilities into the same conversation. Executives can explain intended boundaries and product choices; an implementation practitioner can help surface the questions a team encounters while trying to make behavior visible. The role descriptions support that range of perspectives without establishing what any individual will say on the night. Attendees can make the exchange more useful by bringing a specific operating question. A platform owner might ask about runtime isolation, while a security lead might ask about access revocation or an investigation record. A technical founder might ask which responsibility stays with the buyer. Those are different entry points into the same workflow, and the panel gives them a place to meet before the demos begin. Why the New York timing sharpens the discussion. The gathering appears on the official side-event schedule for AI Engineer New York 2026, which runs October 12-14 and focuses on production AI across financial services. Readers following DevCuration's Events coverage can place this gathering beside the wider conference program. It brings the discussion of agent-operated development close to an audience already considering how AI systems behave inside working institutions. For that audience, an agent's useful output is one piece of the operating decision. A team also needs a clear account of the access involved, the actions taken and the recovery path available. The show-and-tell format invites a more tangible conversation about those responsibilities than an abstract promise of autonomy. Its usefulness will depend on the questions participants can connect to their own systems. Elsie Rooftop offers a setting for continuing those questions after the formal program. The approval-required registration gives organizers control over admission, but the public listing establishes no guaranteed introductions, investor access or business return. Engineers, security leaders and technical operators can evaluate the program on its verified subject matter and follow the organizer's registration instructions for attendance. The work waiting back at the office will still involve several people: the owner of the runtime, the person granting credentials, and the colleague who needs an intelligible record when something goes wrong. October 13 gives those responsibilities a shared demonstration to examine. The useful conversation can continue around the exact point where an agent's authority ends and a human team has to decide what evidence is enough for the next task.
Braintrust Nitro cuts trace query times 2-4x with async execution. 2h ago DevOps Tl;dr. Braintrust released Nitro, an asynchronous query engine that separates storage I/O from compute scheduling, delivering 2x faster full-text searches across production trace data. Key points. * Cold-start queries improved 2-4x; warm queries optimized to match Tantivy baseline performance * Decouples storage and compute workers via separate concurrency limits, preventing CPU/memory oversubscription
One connected system for agent observability. 3 September 2026 Ornella Altunyan 7 min Production agents generate more traces than other agents or developers can inspect efficiently. A few months ago, Braintrust Data, Inc. launched Topics and introduced active observability as the practice of continuously understanding and improving agents in production. Topics classifies traces across broad dimensions such as tasks, issues, sentiment, and custom facets. It turns large volumes of production traffic into structured, SQL-queryable context. But when it comes to active observability, you deserve more from your platform. One connected place for instrumentation, investigation, and measurement, enhanced with intelligence. Braintrust Data, Inc. want you to automatically see behavior that needs attention, understand why it happened, turn the evidence into datasets, evaluators, and product changes, and measure the next version. Today Braintrust Data, Inc. is adding Patterns and Debugger, along with an enhanced Loop experience, to Braintrust. Patterns identifies recurring issues and opportunities across production traces. Debugger explains likely failure modes in complex individual runs. You can also use Loop to investigate your own questions across a project, repeat open-ended analyses on a schedule, and take approved action on your evals. Patterns, Debugger, Topics, Loop, and your preferred coding agent all work with the same traces, datasets, evaluators, experiments, dashboards, and monitors. The context you build in one step automatically carries to whatever you do next. You can start with a Pattern, an individual trace, a production question, or an investigation you want to run continuously. Work in the platform with Loop or move into Codex, Claude Code, Cursor, or another MCP-compatible agent next to your source code. This ability to switch between the in-product agent and your favorite coding agent is by design: * Teams that prefer their own agents can do everything its agents can do. The public MCP provides the same tools for investigating traces, building datasets and evaluators, running evals, and configuring monitoring. * Loop adds built-in project context, persistent threads, open-ended automations, reviewable results, approvals, and an interface that developers and domain experts can use together. Together, the tools form one continuous system for understanding agent behavior and turning production evidence into measurable improvements. Answer open-ended questions about production behavior and carry each investigation into code, evals, automation, and monitoring. Try these prompts from Loop or your coding agent: Patterns is a Loop automation that continuously investigates production traces and identifies a focused set of recurring behaviors for review. A Pattern can describe a failure, such as repeated tool calls that make no progress. It can also describe an opportunity, such as a successful workflow that businesses are adopting in an unexpected way. Each Pattern includes: * A description of the behavior. * An explanation of its impact. * Supporting traces and quoted evidence. * A recommended next step. * A path to continue the investigation or create monitoring. When you enable Patterns, you can choose a Slack channel for updates. Each analysis posts a digest with links to every Pattern from the run and a short summary of what changed. Your team can review new findings in Slack and open the supporting evidence when a Pattern needs attention. Patterns preserves findings over time. Once you're ready to close out a pattern, you can mark a Pattern as Useful or Noise, add context, and track whether the behavior remains active. That feedback helps future investigations account for what the team considers important. Patterns strikes a great balance between surfacing qualitative insights and providing real technical depth. Braintrust Data, Inc. has been able to understand the root causes of technical issues significantly faster. I genuinely wish this had launched earlier; I would've spent my mornings looking at it instead. Isaak Treat, Applied AI @ Tolan Patterns investigates a focused set of recurring behaviors. It verifies each finding with evidence, explains the impact, and recommends a next step. Topics classifies broad themes across many traces in a cost-effective way. They work independently, but you can use them together, for example to give Loop more context for a Pattern investigation. Loop connects a finding to the rest of the agent improvement process. Ask Loop to investigate across traces, logs, experiments, and datasets in a Braintrust project. It can run SQL or code, test a hypothesis against additional traces, look for counterexamples, and verify findings before recommending an action. Persistent threads support longer investigations and keep the work available for review. In addition to Patterns, you can create Loop automations that repeat an open-ended investigation on a schedule. Define the question, scope it to a concern and trace filter, choose a cadence and destination, and let Loop rerun the analysis as new production data arrives. An automation can watch for a specific failure sequence, compare behavior before and after a release, identify accounts adopting a new workflow, or produce a recurring quality review for a product team. With approval, Loop can create or edit prompts, scorers, classifiers, datasets, custom views, dashboards, Patterns, and automations. It can also run eval workflows, inspect the results, and help configure monitoring. Developers and domain experts define good behavior, validate evaluators, approve changes, and decide what ships. Loop handles much of the investigation and setup work so you can focus on decisions that require your expertise. Once you know which behavior needs attention, Debugger helps explain why it occurred in a representative trace. A run may choose the wrong tool, repeat an action without checking state, lose completed work at the response boundary, or stop before verifying the result. Debugger analyzes the spans, tool calls, tool results, and model outputs in a trace to identify likely failure modes. It grounds each explanation in the trace and recommends what to investigate next. A useful diagnosis is a testable explanation supported by evidence. Debugger helps developers move from a symptom to the part of an agent trajectory that needs attention. If you already know the trace you want to dig into, you can also open the Debugger directly from there. Active observability with Patterns, Debugger, and Loop is currently available in public preview. Pricing details will follow before general availability. Use each tool for a different layer of understanding: * Topics organizes broad themes across traces, such as common tasks, issues, and sentiments. * Patterns uses a Loop automation to identify behavior that deserves investigation, explain its impact, and recommend what to do next. * Debugger explains why a complex trace failed. * Loop powers Patterns and lets you run your own investigations and automations, then take approved action. Open a Braintrust project, enable Patterns, and review the first findings with your team. Continue researching a pattern in Loop to investigate the evidence, create an evaluator or dataset, and configure monitoring. Get started with Loop. You can also read the documentation or book a demo to see the workflow on your production traces.
4 Levels of AI Agent Maturity: don't Build Slop. Ara Khan outlines a 4-level framework for building mature AI agents, emphasizing state machines, visualization, and cloud-native deployment to avoid "slop" and ensure scalability. In a recent talk titled "Don't Build Slop (4 Levels of AI Agent Maturity)", Ara Khan outlined a framework for developing robust and effective AI agents. The presentation, delivered at AI Engineer Europe and sponsored by Google DeepMind, Braintrust, and WorkOS, emphasized a structured approach to agent development, moving beyond ad-hoc solutions towards more mature and maintainable systems. Understanding AI Agent Maturity. Khan began by addressing a common pitfall in AI agent development: the tendency to create what he termed "slop." This arises from the factor of multi-agent orchestration, where the complexity of coordinating multiple agents can overwhelm even experienced engineers. Khan highlighted that many current AI agent flows from frontier models suffer from two main problems: inference bounds and take isolations.
AI firm Braintrust prompts API key rotation after data breach. Hackers accessed one of the company's AWS accounts and compromised AI provider secrets stored in Braintrust. | May 8, 2026 (7:14 AM ET) AI evaluation and observability platform Braintrust urged customers this week to rotate API keys that may have been compromised after hackers accessed an AWS account. The incident, the company says, was discovered on May 4, after receiving a report of suspicious behavior, and was communicated to customers via email on May 5. The message also included indicators of compromise (IOCs) and remediation steps. Immediately after learning of the incident, Braintrust locked down the compromised account, audited related systems and restricted access to them, rotated internal secrets, and launched an investigation into the matter. The internal AWS account used by its systems, Braintrust says, likely provided the attackers with access to API keys that organizations use to access AI models. "As a precaution, we recommend that all customers rotate any org-level AI provider keys used with Braintrust," the company said in an incident notice. According to the company, at least one customer has been affected by the incident, with three other customers reporting suspicious spikes in AI provider usage. "We have not identified broader customer exposure based on our investigation to date, but as a precaution we informed all org admins with stored AI provider secrets in Braintrust. The investigation is ongoing," the company says. Braintrust recommends that customers access their org-level settings page, delete or revoke the existing secrets, configure new secrets, and confirm that they were rotated by checking their timestamps. The org-level AI provider API keys potentially exposed in the incident were likely stored for AI-forward companies such as Box, Cloudflare, Dropbox, Notion, Ramp, Stripe, and others, Nudge Security CTO Jaime Blasco told SecurityWeek. "The blast radius isn't Braintrust, it's every downstream customer's AI stack, and a single SaaS compromise fans out across dozens of LLM provider accounts. This is the new shape of supply chain risk: every AI eval, observability, and gateway tool a company adopts becomes a credential warehouse, and those warehouses are now a tier-one target," Blasco said. Ionut Arghire is an international correspondent for SecurityWeek.