About Tolmo
Tolmo is an AI security platform that runs a fleet of specialized security agents across code, CI, and cloud production environments. Its agents work from a live production knowledge graph to find, prove, and remediate security issues. It is built for engineering and security teams whose codebases change faster than humans can review.
What is Tolmo?
What is Tolmo?
Tolmo is an agent-driven security platform designed to keep up with codebases that grow and change quickly, including code written with AI assistants. Instead of generating isolated alerts, Tolmo builds what it calls a Production Knowledge Graph, linking code, infrastructure, deployments, and production telemetry into one model of the environment.
On top of that graph, Tolmo runs specialized agents. The Pentesting Agent continuously tests the live environment like an adversary and aims to prove real exploitability. The Internal Discovery Agent finds assets across cloud, code, CI, identity, and data stores and infers dependencies between services. The Remediation Agent proposes fixes for the issues found. According to the company, agents run on every pull request, deployment, and alert, and escalate to humans only when necessary.
Tolmo was co-founded by Pierre Betouin (CEO), Vladimir de Turckheim, JB Aviat, and Arnaud Breton. It is part of Y Combinator's Spring 2026 batch and is based in San Francisco. In June 2026 the company came out of stealth with $22 million in funding in a seed round led by Accel, with participation from Y Combinator and operators including Datadog cofounder Olivier Pomel.
Pros
- Multiple specialized agents cover pentesting, asset discovery, and remediation in one platform
- Knowledge graph gives findings context from code, deployments, and telemetry
- Aims to prove exploitability rather than report theoretical issues
- Runs on pull requests, deployments, and alerts continuously
Cons
- Young company that came out of stealth in mid-2026
- Pricing is not published; access starts with a demo or sign-up flow
- Deep production access may require security and compliance review before rollout
How to Use Tolmo
- 1Get started or book a demo
Sign up or request a demo from the Tolmo website.
- 2Connect your stack
Integrate cloud services, code repositories, CI, and existing observability or security tools so Tolmo can build its knowledge graph.
- 3Let agents run
Tolmo's agents test pull requests, deployments, and the live environment, and surface proven findings with context.
- 4Review and remediate
Review triaged findings and apply fixes proposed by the Remediation Agent.