Parameter

Parameter is a cybersecurity platform that uses AI agents to perform continuous, automated penetration testing of web applications, APIs, and infrastructure. The company was backed by Y Combinator and was built by a team with prior security experience at organizations including Apple, Google, Microsoft, the U.S. Department of Defense, T-Mobile, and others. The Parameter Platform consists of several integrated modules: - Pentesting agent: Autonomous agents that continuously probe applications across APIs, authentication flows, and business logic, generating a working proof-of-concept for every validated finding. - Sentinel: An AI-powered code reviewer that analyzes pull requests to catch vulnerabilities before they are merged into production. - Cloud security: Continuous scanning for cloud misconfigurations, exposed services, and account takeover risks. - Supply chain / Dependency management: Identifies vulnerable and outdated packages in software dependencies, flagging only reachable risks. - Secrets detection: Scans repositories and their history for leaked keys, tokens, and credentials. Findings are delivered through a centralized dashboard with reproduction steps, remediation guidance, CWE classifications, severity ratings, and workflow integrations (e.g., Linear issue creation, fix PR generation). The platform claims a false positive rate below 1% and delivers initial findings within 24 hours of setup. The platform is designed to replace or supplement traditional annual penetration testing engagements by running continuously. Safety controls are built in: agents stop after confirming a vulnerability without chaining or escalating, stay within authorized scope, avoid destructive actions, and maintain a full audit trail of all agent activity. The legal entity behind Parameter is Anytool, Inc.