rbac
(4)
Golf
Golf is a Y Combinator (X25) startup building the security and governance layer for AI agents and Model Context Protocol (MCP) servers. It began as GolfMCP, an open-source Python framework for shipping production MCP servers without boilerplate, and grew into an enterprise control plane that discovers every AI agent and MCP connection in an organization (including shadow AI), enforces granular policies with sub-millisecond latency, and maintains compliance-ready audit trails. Founded by high-school friends Wojciech Blaszak and Antoni Gmitruk, who both dropped out of university to build it full-time.
PlainID
PlainID is an Israeli cybersecurity company and the recognized pioneer of Policy-Based Access Control (PBAC). Its authorization platform lets enterprises define, manage, and enforce who can access what across applications, data, APIs, microservices, and - increasingly - AI agents, replacing the tangle of hard-coded access rules scattered across systems with centralized, dynamic, real-time policy decisions. Founded in 2014 and headquartered in Tel Aviv with a strong New York presence, PlainID has raised roughly $99-100M and serves Fortune 500 organizations across financial services, healthcare, telecom, and government.
Superblocks
Superblocks is a New York-based enterprise software company that lets organizations build, deploy, and govern AI-generated internal applications. Its AI agent, Clark, turns natural-language prompts into full-stack apps backed by extensible React code, while enforcing an enterprise's existing security policies, data permissions, design standards, and audit requirements. The company positions itself as the governed, IT-controlled answer to consumer 'vibe coding' tools, serving teams that need to ship internal software quickly without introducing security and compliance risk.
Frontegg
Frontegg is a customer identity and access management (CIAM) platform that gives SaaS builders drop-in authentication, authorization, and user management so they don't have to build login, SSO, MFA, roles, and multi-tenancy from scratch. Founded in 2019 by two former Check Point engineers, the company has expanded from B2B user management into identity infrastructure for AI agents, launching Frontegg.ai and AgentLink to secure how AI systems and the Model Context Protocol access enterprise applications.