Aiolum Browse stories
All stories
Access-control proxy for AI agents · United States

Alter: Product, team and how it was built

Small teamFundedB2BCybersecurity

Alter (Access-control proxy for AI agents, United States): Paid plans on sale, October 2026. Evidence grade E: no revenue figure was checked. Team: 2 founders; Y Combinator lists a team of 2; headcount today not published. Launched March 2025; still running.Added

Outcome
Paid plans on sale, October 2026
Evidence
E no revenue figure was checked
Launch
March 2025
Status
Still running
Team
2 founders; Y Combinator lists a team of 2; headcount today not published
Outside funding
Y Combinator Summer 2025; amount not shown
Main channel
Launch sites and deal sites
No revenue figure

What is not verified

No revenue figure was found. The pages read were the company's site, its terms, the Y Combinator page and the Hacker News launch thread. No payment-processor profile, filing or interview with revenue was found. The terms name Stripe and the pricing page shows prices, but every plan button opens a booking calendar. The billing documentation describes an upgrade through checkout, which was not opened. No source states that a customer has paid. The customers are the founders' own statement. This story is grade E: the business is real and its product, price and customers are described from public pages, but no revenue figure was checked. Aiolum shows it as an idea worth studying, not as proof that it makes money.

Alter sells an auth proxy for AI agents. A proxy is a server that passes requests on behalf of another program, and an auth proxy also decides whether each request is allowed. The proxy holds an OAuth token (a permission a user grants to an app) or an API key, and checks each call against a policy. The CTO wrote in the Hacker News thread that the agent never sees the key.

Srikar Dandamuraju is Co-Founder and CEO and Kevan Dodhia is Co-Founder and CTO, as the company's page lists them. The Y Combinator company page says the company was founded in 2025. It lists the Summer 2025 batch and a team of 2 in New York City. The pricing page in October and November 2026 lists a free plan, Starter at US$50 a month and Growth at US$250 a month.

No revenue figure was found, so this story has grade E. The best-supported facts are the published prices, the Stripe billing named in the terms and a self-serve sign-up. No source states that a customer has paid.

Alter: Paid plans on sale, October 2026. Access-control proxy for AI agents, United States, team of 2 to 10, evidence grade E.
The story in one card. Share it with the address of this page.
01

Why did Alter work?

Four causes, in the order they mattered. Each one is a reusable lesson.

01

A founder met the missing access control at work

The Hacker News post says the CEO worked at Goldman Sachs. In the post he describes how costly it was for a developer to write custom auth for agents that act for many users. The post presents this as the reason the founders started the company.

02

It prices by calls and lets a team start free

The pricing page gives a free plan of 10,000 calls a month and charges US$0.50 per 1,000 extra calls on paid plans. The founders wrote that the plan rests on usage-based pricing. The page does not say how many teams moved from Free to a paid plan.

03

It launched on Hacker News with a demo and open code

The post links a demo video and a GitHub plugin that the founders say they built for their own team. A reader asked about prompt injection and cross-user cases, and the CTO and CEO answered in the thread. No source says how many customers the launch brought.

How it was built

These details come from the company's own pages and the Hacker News thread. They are grade C. [9, 5, 3, 11]

  • Requests from an agent pass through the proxy. The home page says it stores the credentials, applies a policy and writes an audit record for each call.
  • A Python package, installed with pip install alter-sdk, sends the calls. The home page lists more than 140 supported providers.
  • The sub-processor list names Amazon Web Services for hosting and Porter for deployment. It names Sentry, PostHog and Cloudflare for error tracking, analytics and edge protection.
  • An optional AI review by TypeSafe AI can judge a call before it asks for human approval. The list says it is off by default.
  • The company site is built with Astro, as a comment in its robots.txt file says. Stripe processes the billing.

Tools named in the sources

Each one opens its page in the Tools tab, with every story that uses it.

02

Who tried this before Alter, and why did they fail?

Two companies in our database of failed startups sold developer plumbing that teams would otherwise build themselves. The values below are from that database and are not independently verified.

Died 2011 to 2017Burned US$7.0M burned

Parse

The promise

A backend service with user authentication, push notifications and storage, so a small team could skip building servers.

Why it died

The record says Facebook bought it in 2013 for about US$85M and shut it down in 2017.

Shut down by its acquirer
Died 2008 to 2012Burned US$18.0M burned

DotCloud

The promise

A platform that hid the work of running servers, so developers could focus on application code.

Why it died

The record says the company pivoted to Docker, and the original platform lost out to it.

Pivot

The failed startups come from our database of 1,749 dead startups, retold here in our own words. Its entries are AI-assisted summaries of public sources, so these cards carry no evidence grade.

What changed

Both companies took over a job that developers did not want to build themselves. Parse sat under the apps of others. DotCloud was overtaken by a tool that came out of its own work.

Alter also sits under the agents of others, and it holds their credentials. The pricing page lists a free plan and two flat monthly plans. Whether teams pay for it is not shown by any independent source. The founders' own claim is that startups and a defense contractor use it.

03

Can one person copy Alter now?

The structure, yes. The market is not proven.

A product that sits between agents and the services they call can start free and bill by call volume. A buyer sees the price before talking to anyone. No source here shows that buyers pay.

Where it is still open: Other controls that sit on the path of an agent call: spending limits, data masking and approval queues for specific tools.

  1. 1Pick one gap that agent builders hit, such as a shared API key.
  2. 2Show the whole request path in one page and in one demo.
  3. 3Offer a free plan with a clear call limit.
  4. 4Add a flat monthly plan and a custom plan for large teams.
04

How much revenue does Alter make?

Each row shows the evidence grade and the source numbers from the list at the end of this page. The grades are explained in How Aiolum verifies.

No revenue figure is public. The facts below show a priced plan, a two-person team and a Y Combinator batch. The company, its founders or Y Combinator state all of them
FactValueGradeHow we knowSources
Company start2025CThe Y Combinator company page reads Founded: 2025, Batch: Summer 2025. The company page and terms name Alter Labs, Inc. and give no founding date.[6, 1]
Earlier page on the same domainAlterAuth, 7 January 2025CAn Internet Archive copy titled "AlterAuth - Authentication & Authorization Platform". It lists plans at US$0 and US$49 a month. Two quotations on it are signed Innovative Tech Co. and Dev Solutions Inc. It names no owner, so a link to Alter Labs is not shown.[7]
FoundersSrikar Dandamuraju (CEO), Kevan Dodhia (CTO)CThe company page. It says the CEO led platform engineering at Goldman Sachs. It says the CTO was a technical co-founder of Compute.ai, a different company.[1]
Team size2 on the Y Combinator page; headcount today not publishedCThe Hacker News post is signed by the two founders. The company page lists only them.[6, 3, 1]
FundingY Combinator, Summer 2025; amount not shownCThe company page says Alter is backed by Y Combinator. No round size and no investor besides Y Combinator was found.[1, 6]
Launch post on Hacker News21 October 2026CTitled Launch HN: Alter (YC S25). The founders wrote that the business plan rests on usage-based pricing, with a free tier up to 10,000 requests.[3]
Prices in October and November 2026Starter US$50 a month, Growth US$250 a monthCThe live page of 12 November 2026 and an Internet Archive copy of 21 October 2026 show the same two prices. The Free plan has 10,000 calls a month.[2]
Billing named in the termsStripe, fees due in advance, automatic renewalCTerms of service, section 5. The sub-processor list names Stripe for payment processing and billing.[4, 5]
Self-serve sign-up and upgradeSign-up page; checkout in the developer portal, as the documentation statesCThe home page links to portal.alterauth.com/sign-up, which shows a Create account form. The billing documentation says an admin upgrades through checkout. The checkout itself was not opened.[9, 2, 13]
Customers, as stated by the foundersseveral startups and a defense contractorCHacker News launch post. The post names none of them.[3]
Customer logos on the home page4 logos under the label Trusted byCThe image names are Cardinal Robotics, Shor, Accelera Solutions and Antinode. The page gives no quotation, case study or payment.[9]
Time from the first page to the October 2026 prices21 monthscalcCalculated: January 2025 to October 2026.[7, 2]

How to read this table. Grade C is a statement by the company or its founders, or a copy of its own page. A grade E story has no dated money figure, so no row here is a revenue number. A "calc" value was computed on this page.

Alter prices in November 2026, from the company's pricing page (grade C)
PlanPer month, billed yearly (US$)Per month, billed monthly (US$)Limit
Free0010,000 API calls a month; unlimited users, agents and apps; 30-day audit log
Starter50100,000 API calls a month; unlimited audit log; custom branding
Growth2501,000,000 API calls a month; support with a service-level agreement
Enterprisecustom, annual commitmentcustom call volume, deployment and networking

The page bills by API calls, not by seats. Starter and Growth are billed monthly with no commitment, and each extra 1,000 calls costs US$0.50. The Free plan stops at its limit. Annual billing is offered by email. Every plan button on the page opens a booking calendar. The Start free button on the home page leads to a sign-up page. The billing documentation says an admin upgrades through checkout in the developer portal.

05

When did Alter launch, and how did it grow?

From an earlier page on the same domain in January 2025 to a priced developer product in October 2026. Each entry carries its grade.

  1. 7 January 2025CAn Internet Archive copy of alterauth.com shows a page named AlterAuth, with plans at US$0 and US$49 a month. Two quotations on it are signed Innovative Tech Co. and Dev Solutions Inc. [7]
  2. 25 March 2025CThe company's blog index dates a post named Introducing Alter Vault to this day. The Substack copy of the same title is dated 27 May 2026. [8, 10]
  3. Summer 2025CAlter joins the Y Combinator Summer 2025 batch, as the Y Combinator page states. [6]
  4. 11 May 2026CAn Internet Archive copy of the home page shows the name Alter Vault and buttons labelled Early Access. [14]
  5. 22 September 2026CThe sub-processor list is last updated. It names Stripe as the payment processor, with Amazon Web Services and others as hosting and tool vendors. [5]
  6. 21 October 2026CLaunch HN post by the two founders. The company's pricing page shows Starter at US$50 and Growth at US$250 a month the same day. [3, 2]

What could go wrong for Alter?

The risks are the mirror image of the causes above.

What is not verified

No revenue figure was found. The pages read were the company's site, its terms, the Y Combinator page and the Hacker News launch thread. No payment-processor profile, filing or interview with revenue was found. The terms name Stripe and the pricing page shows prices, but every plan button opens a booking calendar. The billing documentation describes an upgrade through checkout, which was not opened. No source states that a customer has paid. The customers are the founders' own statement.

Logo wall and unnamed customers

The home page shows four customer logos under Trusted by. The Hacker News post speaks of several startups and a defense contractor without names. No source here confirms that any of them pays. The home page also says SOC 2 is in progress. The company states this itself.

Earlier page on the same domain

An Internet Archive copy of 7 January 2025 shows a page named AlterAuth with plans at US$0 and US$49 a month. Under Trusted by Teams it prints two quotations signed Innovative Tech Co. and Dev Solutions Inc. No source shows that these are real customers, and the text reads like template filler. No source ties that page to Alter Labs, and the page is not on the site today. The company's blog lists Introducing Alter Vault on 25 March 2025, and Substack dates the same title 27 May 2026. An archive copy of 11 May 2026 still shows Early Access buttons.

Whether AI is the product

The product controls what an AI agent may do. It is not itself a model. Its core checks are fixed policies. The AI review by TypeSafe AI is optional and off by default, as the sub-processor list says.

Sources

The grade next to each source is the best grade that the source can support. "Read in full" means that the text of the page was downloaded and the numbers were checked in it.

  1. C Alter company page
    Read in full, 12 November 2026. Source for the founders, their earlier jobs, the location and the Y Combinator backing.
  2. C Alter pricing page, with an Internet Archive copy of 21 October 2026
    Read in full, 12 November 2026. The archive copy shows the same two prices. Source for the plans, the call limits and the booking buttons.
  3. C Hacker News, 21 October 2026: Launch HN: Alter (YC S25) - Access control for multi-user agents
    Read in full, 12 November 2026. The founders' post and replies. Source for the motive, the customer statements and the pricing plan.
  4. C Alter terms of service
    Read the sections on fees and payment. Source for Stripe, advance payment and automatic renewal.
  5. C Alter sub-processors, last updated 22 September 2026
    Read in full, 12 November 2026. Source for Stripe, hosting, deployment, monitoring and the optional AI review vendor.
  6. C Y Combinator company page: Alter
    Read in full, 12 November 2026. Source for the year founded, the batch, the team size of 2 and the location.
  7. C Internet Archive copy of alterauth.com, 7 January 2025
    Read in full, 12 November 2026. Source for the earlier AlterAuth page. A copy of 31 March 2025 reads the same.
  8. C Alter blog index on alterauth.com
    Read in full, 12 November 2026. Source for the post dated 25 March 2025.
  9. C Alter home page
    Read in full, 12 November 2026. Source for the product description, the logo wall, the sign-up link and the SDK.
  10. C Alter Substack: Introducing Alter Vault, 27 May 2026
    Read the opening sections. Source for the date that differs from the blog index.
  11. C Alter robots.txt
    Read in full, 12 November 2026. A comment in it names Astro as the site's build tool.
  12. C Database of failed startups, local export
    Record pages read on the website on 12 November 2026. AI-written summaries, not independently verified. Source for the failed predecessors.
  13. C Alter documentation: Billing
    Read the billing section, 12 November 2026. Source for the upgrade through checkout in the developer portal.
  14. C Internet Archive copy of alterauth.com, 11 May 2026
    Read in full, 12 November 2026. Source for the Early Access buttons in May 2026.

Run this company? Send corrections or a verified figure to aiolum@livyden.com

Back to all stories