Loading startup
Market data is refreshed once per day from public sources. Information may be incomplete or outdated — verify independently before making decisions. This is not investment advice.
Evidence-bound summary — expand sections for movement, risks, and signals.
Memo snapshot · May 20, 2026, 6:22 PM
DealFlow OS uses public web data and automated enrichment. Research may be incomplete, outdated, or incorrect. Verify important information before making investment or outreach decisions.
TL;DR
Seed (YC)GhostEye | Vulnerability Management for the Human Layer Human vulnerability management platform for enterprise security teams.
Raised $500K across 1 funding round. Latest: $500K Pre-seed (Jun 2025). Investors: Y Combinator. (High).
Funding
Raised $500K across 1 funding round. Latest: $500K Pre-seed (Jun 2025). Investors: Y Combinator. (High).
Hiring
1 hiring‑related row(s); role‑spam risk if mostly generic boards (Low).
Product / news
14 product/news‑styled row(s); headline risk without filings (High).
Verified facts
+5 more in Recent movement below
YC Summer 2025 batch; human-layer vulnerability management simulating personalized phishing, vishing, and deepfake attacks.
Weak funding evidence: mention does not include a parsed raise amount/round and may refer to non-funding context.
No open roles indexed yet.
The index price and activity score are algorithmic estimates based on observed public company-level signals. They may be incomplete, stale, or inaccurate and are not investment, legal, tax, or business advice.
Source types found
Strongest / recent news-style rows
About / company · Mon, Jun 29, 09:45 AM · confidence 90%high quality
Wed, May 20, 06:22 PM · confidence 88%high quality
wikipedia · Mon, Jun 29, 11:49 AM · confidence 50%medium quality
Newest first · 21 event(s)
Source: Blog
Research and field notes from GhostEye on human-risk intelligence, adversarial testing, exposure management, and resilient security operations.
Source: official_site
GhostEye | Vulnerability Management for the Human Layer PLATFORM COMPANY RESOURCES SCHEDULE DEMO Find out who in your company is exposed. SCHEDULE DEMO PLATFORM Overview RESOURCES Blog Research Events News Product Glossary COMPANY About Careers 22 Vanderbilt…
Source: official_site
Careers | GhostEye PLATFORM COMPANY RESOURCES SCHEDULE DEMO Find out who in your company is exposed. SCHEDULE DEMO PLATFORM Overview RESOURCES Blog Research Events News Product Glossary COMPANY About Careers 22 Vanderbilt Suite 7C New York, NY 10017 founders@…
Source: Blog / news
Visit Booth 600, attend Mohammad Eshan's session on help desk compromise, or meet with the team during the conference.
Source: Blog / news
Across more than 1,000 IVR tests, nearly half leaked enough intelligence to compromise a help desk in under 20 minutes. If the phone system can validate identities and preview the help desk's questions, it belongs inside your security boundary.
Source: Blog / news
Most IVRs reveal which accounts are real, how teams are organized, and what language the company uses before a caller ever reaches an employee. That gives attackers a reconnaissance layer most security programs never test.
Source: Blog / news
GhostEye tests whether outsourced help desks will reset passwords or bypass MFA for convincing callers using AI voice simulations, attacker-grade context, and behavior-based risk scoring.
Source: Blog / news
GhostEye leads this category for financial services by combining attacker-style reconnaissance, adaptive simulations, and human-risk scoring to test vendor impersonation, executive fraud, and deepfake-driven social engineering.
Source: Blog / news
One-click phishing reporting for Google Workspace and Microsoft Outlook that sends suspicious emails to security, removes them from the inbox, and turns employee reports into usable risk data inside GhostEye.
Source: Blog / news
GhostEye uses OSINT and public digital footprints to generate template-free, personalized phishing simulations based on the same reconnaissance patterns real attackers use.
Source: Blog / news
Awareness training and technical controls leave a gap attackers still exploit through the help desk, the inbox, and routine business workflows. GhostEye exists to test those paths before a real intrusion does.
Source: Blog / news
Help desk compromise usually starts well before the call. By the time an agent picks up, the attacker may already have validated identities, mapped the org, and rehearsed the verification path through the IVR.
Source: Blog / news
Visit Booth ESE-14, attend Mohammad Eshan's session, or join us at Alchemy After Hours. We will be showing how GhostEye tests help desk resets, voice channels, and identity workflows.
Source: Blog / news
GhostEye uses AI voice agents to call IT support, impersonate employees, and test whether help desk workflows will allow password resets or MFA bypass under social engineering pressure.
Source: Blog / news
Static phishing templates do not keep up with AI-generated phishing, deepfakes, and multi-channel social engineering. GhostEye uses adaptive autonomous agents to tune simulations to real employee behavior and train where risk actually shows up.
Source: Blog / news
Explore GhostEye resources: blog posts, threat intelligence, glossary, and research on social engineering, human risk management, and cybersecurity defense.
Source: About / company
GhostEye was founded by ex-BlackRock Red Team and AI engineers to test the employee-facing workflows attackers still exploit. Based in New York City, backed by Y Combinator.
Source: Careers
Join the team building the future of human risk management. Reach out at careers@ghosteye.ai.
YC Summer 2025 batch; human-layer vulnerability management simulating personalized phishing, vishing, and deepfake attacks.
2 row(s)
The company's own site — the authoritative description of what they sell and to whom. Marketing-controlled, so treat claims as positioning rather than verified traction.
GhostEye | Vulnerability Management for the Human Layer PLATFORM COMPANY RESOURCES SCHEDULE DEMO Find out who in your company is exposed. SCHEDULE DEMO PLATFORM Overview RESOURCES Blog Research Events News Product Glossary COMPANY About Careers 22 Vanderbilt…
Why it matters: Primary source — the company's own positioning; best read for what they sell and to whom, not for traction claims.
Open source ↗Careers | GhostEye PLATFORM COMPANY RESOURCES SCHEDULE DEMO Find out who in your company is exposed. SCHEDULE DEMO PLATFORM Overview RESOURCES Blog Research Events News Product Glossary COMPANY About Careers 22 Vanderbilt Suite 7C New York, NY 10017 founders@…
Why it matters: Primary source — the company's own positioning; best read for what they sell and to whom, not for traction claims.
Open source ↗3 row(s)
Third-party press coverage. Independent reporting corroborates company claims; repeated coverage across outlets is a momentum signal.
GhostEye was founded by ex-BlackRock Red Team and AI engineers to test the employee-facing workflows attackers still exploit. Based in New York City, backed by Y Combinator.
Why it matters: Independent coverage — third-party corroboration of company claims; recurring coverage indicates rising visibility.
Open source ↗Why it matters: Independent coverage — third-party corroboration of company claims; recurring coverage indicates rising visibility.
Open source ↗Why it matters: Independent coverage — third-party corroboration of company claims; recurring coverage indicates rising visibility.
Open source ↗1 row(s)
Funding announcements and investor-database records. The strongest public signal of capitalization: round, amount, and syndicate quality when disclosed.
YC Summer 2025 batch; human-layer vulnerability management simulating personalized phishing, vishing, and deepfake attacks.
Why it matters: Funding signal — Pre-Seed per this source; verify against the linked original before relying on it.
Open source ↗1 row(s)
Open roles and careers pages. Active hiring implies runway to spend and shows where the company is investing (engineering vs GTM vs ops).
Join the team building the future of human risk management. Reach out at careers@ghosteye.ai.
Why it matters: Hiring signal — open roles imply runway to spend and show where the company is investing.
Open source ↗14 row(s)
Company blog and newsletters. Shipping cadence and technical depth of posts hint at product velocity and team quality.
Research and field notes from GhostEye on human-risk intelligence, adversarial testing, exposure management, and resilient security operations.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Visit Booth 600, attend Mohammad Eshan's session on help desk compromise, or meet with the team during the conference.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Across more than 1,000 IVR tests, nearly half leaked enough intelligence to compromise a help desk in under 20 minutes. If the phone system can validate identities and preview the help desk's questions, it belongs inside your security boundary.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Most IVRs reveal which accounts are real, how teams are organized, and what language the company uses before a caller ever reaches an employee. That gives attackers a reconnaissance layer most security programs never test.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗GhostEye tests whether outsourced help desks will reset passwords or bypass MFA for convincing callers using AI voice simulations, attacker-grade context, and behavior-based risk scoring.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗GhostEye leads this category for financial services by combining attacker-style reconnaissance, adaptive simulations, and human-risk scoring to test vendor impersonation, executive fraud, and deepfake-driven social engineering.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗One-click phishing reporting for Google Workspace and Microsoft Outlook that sends suspicious emails to security, removes them from the inbox, and turns employee reports into usable risk data inside GhostEye.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗GhostEye uses OSINT and public digital footprints to generate template-free, personalized phishing simulations based on the same reconnaissance patterns real attackers use.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Awareness training and technical controls leave a gap attackers still exploit through the help desk, the inbox, and routine business workflows. GhostEye exists to test those paths before a real intrusion does.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Help desk compromise usually starts well before the call. By the time an agent picks up, the attacker may already have validated identities, mapped the org, and rehearsed the verification path through the IVR.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Visit Booth ESE-14, attend Mohammad Eshan's session, or join us at Alchemy After Hours. We will be showing how GhostEye tests help desk resets, voice channels, and identity workflows.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗GhostEye uses AI voice agents to call IT support, impersonate employees, and test whether help desk workflows will allow password resets or MFA bypass under social engineering pressure.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Static phishing templates do not keep up with AI-generated phishing, deepfakes, and multi-channel social engineering. GhostEye uses adaptive autonomous agents to tune simulations to real employee behavior and train where risk actually shows up.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Explore GhostEye resources: blog posts, threat intelligence, glossary, and research on social engineering, human risk management, and cybersecurity defense.
Why it matters: Company publishing — post cadence and depth hint at product velocity.
Open source ↗Sign in as an active team member to view private notes, watchlist controls, transcript evidence, and interaction history.