/Companies

winfunc

YC S24

San Francisco, US · Founded 2024 · 2 employees · 5 known investors

Find your way into winfunc

Sign up to see every warm intro you have to winfunc

  • Paths you didn't know you had: your email and LinkedIn already hold routes to the winfunc team. We find them for you
  • 2nd- and 3rd-degree connections: the friend-of-a-friend routes that take hours to manually find through your inbox or LinkedIn
  • Answers now, not in days: momentum is everything in a raise. Skip asking around whether someone knows someone

Days of research, done the moment you sign in, with every route ranked by how warm it is.

Winfunc is an autonomous hacking agent that identifies, prioritizes, and patches software vulnerabilities in codebases using formal verification and artificial intelligence. The product targets development teams and security engineers who need vulnerability detection without manual intervention.

Also known as Stition, Inc. · Asterisk · Stition · Stition, Asterisk

Founders & leadership· Y Combinator alumni (S24)

winfunc was founded in 2024 by Mufeed VH and Vivek R.

MVMufeed VH
Mufeed VHCEO / Co-FounderFounder and CEO of Winfunc, an autonomous vulnerability detection and patching platform that applies formal verification and artificial intelligence to identify security issues in software codebases.
VRVivek R
Vivek RCo-FounderVivek R was CTO at Asterisk and previously worked on distributed systems for POS validators, conducted IoT protocol research, contributed to the GStreamer multimedia framework, and advised enterprise infrastructure clients.
AK
Asjid KalamCOO2024–2025

Investors · 5

Images

winfunc photo

Related companies · 10

illusive networksProofpoint offers a suite of enterprise security and compliance products that protect people, email, cloud apps, and data from human-centric cyber threats using machine learning and AI. Its tools also cover data loss prevention, communications archiving, e-discovery, compliance supervision, identity threat detection, and security awareness training.
OneleetOneleet provides a compliance management platform that helps SaaS companies achieve SOC 2, ISO 27001, and other security certifications. The platform integrates with cloud and development tools to automate evidence collection and compliance workflows for startups through enterprises.
Silent PushSilent Push operates a proprietary scanning and aggregation engine that logs changes across the entire IPv4 and IPv6 space, providing security teams with pre-evaluated first-party data and query functionality to track and monitor attacker infrastructure. The company serves organizations' threat intelligence operations, aiming to surface the majority of live attacker infrastructure that most security data misses.
Gecko SecurityGecko is a code security platform that uses AI to analyze codebases, infrastructure, and logic to detect exploitable vulnerabilities and provide developer fixes. It targets enterprise and startup development teams seeking to find complex, multi-step attack chains and business logic flaws in their code and microservices.
SuperagentSuperagent provides autonomous security research to identify, fix, and disclose software vulnerabilities in code and AI agents. The platform delivers patches as pull requests for software teams to review and deploy.
PortSwiggerPortSwigger provides Burp Suite DAST, an automated security scanning solution that identifies vulnerabilities in web applications and enterprise application portfolios at scale. The platform serves security teams and organizations seeking to assess and monitor their application attack surface without extensive manual testing.
Clearly AIClearly AI automates compliance documentation and reporting for governance, risk, and compliance (GRC) teams managing multiple regulatory frameworks. The platform centralizes evidence collection, audit preparation, and vendor risk management to reduce compliance burden across enterprises.
Varonis SystemsVaronis provides a data security platform that discovers, classifies, and monitors data across multi-cloud, SaaS, hybrid, and AI environments, managing permissions and detecting threats in real time. It also offers AI-native email and browser security and agentless database monitoring for enterprise security teams.
ContraForceContraForce is an AI-powered security delivery platform for MSSPs, MSPs, and security operations teams that automates incident investigation, triage, and response within Microsoft Sentinel and Defender environments. It uses AI agents and "Gamebook" SOP enforcement to enable multi-tenant security operations at scale without proportional headcount growth.
Kanopy SecurityKanopy Security provides application security solutions for enterprises, helping AppSec and platform teams secure low-code/no-code applications, automations, and AI agents built by non-technical creators without impeding development velocity.

Companies working in the same space as winfunc.

Legal entities · 1

corporate structure
Stition, Inc.

In the news

Frequently asked questions

What does winfunc do?
Winfunc is an autonomous hacking agent that identifies, prioritizes, and patches software vulnerabilities in codebases using formal verification and artificial intelligence. The product targets development teams and security engineers who need vulnerability detection without manual intervention.
Who founded winfunc?
winfunc was founded by Mufeed VH, Vivek R in 2024.
Who are winfunc's investors?
winfunc's investors include Pioneer, Y Combinator, General Catalyst, Orange Collective, Transpose Platform Management.
Where is winfunc headquartered?
winfunc is headquartered in San Francisco, US.