COSS Company Showcase

Probo is an open-source compliance management platform that helps startups and growing companies achieve and maintain certifications such as SOC 2, ISO 27001, HIPAA, and GDPR. The platform automates evidence collection, risk assessments, vendor management, and policy creation, while a dedicated compliance officer handles audit coordination and ongoing program maintenance on the customer's behalf. Probo is backed by Y Combinator (Spring 2025 batch) and was founded in 2024 by Antoine Bouchardy and Bryan Frimin.

InsForge is an open-source, agent-native cloud infrastructure platform that provides AI coding agents with the services needed to build and run production applications end-to-end. Its platform includes a model gateway, PostgreSQL database, authentication, file storage, edge functions, compute, site deployment, cron jobs, and realtime capabilities, all accessible via CLI and MCP server. InsForge is backed by Y Combinator (Spring 2026) and is designed to serve as an alternative to platforms like Supabase and AWS, purpose-built for AI coding agents.

ArcadeDB is an open-source, Apache 2.0 licensed multi-model database developed by Arcade Data Ltd. It natively stores graphs, documents, key-value pairs, full-text, time-series, and vector data in a single engine. ArcadeDB supports multiple query languages including SQL, OpenCypher, Gremlin, GraphQL, and the MongoDB query protocol, delivering over 10 million records per second with full ACID compliance. Created by Luca Garulli, the founder of OrientDB, ArcadeDB was built from scratch after SAP's acquisition of OrientDB, with a brand-new transactional engine that is faster and lighter than its predecessor.

Scalr is a Terraform and OpenTofu automation and collaboration platform that enables platform engineering teams to provide isolated, self-service infrastructure environments to developers. It supports multiple workflow styles including GitOps, CLI-driven, and no-code deployments, and offers features such as RBAC, OPA policy enforcement, module registries, and pipeline observability. Scalr co-founded the OpenTofu project, an open source continuation of HashiCorp Terraform, and donated it to the Linux Foundation.

Browserbase is the company behind Stagehand, an AI browser automation framework that makes it easy for developers and agents to control a browser reliably.

Modular is an AI infrastructure company that builds a unified compute platform for developing and deploying generative AI applications. Its products include MAX, a high-performance AI inference engine, and Mojo, a Python-compatible programming language designed for high-performance AI and systems programming on CPUs and GPUs.

Nari Labs develops open-weight text-to-speech AI models designed to generate ultra-realistic dialogue in a single pass. Its flagship model, Dia, supports customizable speaker tones, emotional inflections, nonverbal cues, and voice cloning from reference audio.

NativeLink is an open-source, high-performance build cache and remote execution system built in Rust by Trace Machina. It accelerates software compilation and testing by intelligently caching build artifacts and distributing tasks across multiple machines, integrating with build tools such as Bazel, Buck2, and Reclient. The platform is designed for safety-critical and compute-intensive workloads, including autonomous vehicles, robotics, and aerospace, and handles over one billion requests per month in production. NativeLink Cloud provides a fully managed version of the service.

kobs is an application-centric observability platform for Kubernetes and Cloud workloads, based on Custom Resource Definitions. It integrates metrics, logs, traces, and Kubernetes resources to provide comprehensive observability for applications running in clusters.

WhyLabs provides an AI observability platform that helps organizations monitor and manage the health, security, and performance of their AI applications. It offers tools for real-time data quality monitoring, model performance tracking, and LLM security.

Defog.ai develops fine-tuned large language models specifically designed for enterprise data analysis and SQL query generation. The company provides AI-powered tools that enable business users to interact with their databases using natural language, making data analysis more accessible across organizations.

Neosync is a cloud-native data security platform that continuously monitors, detects and automatically protects sensitive data giving your security teams peace of mind and your developers realistic data to use for local development and testing.

ZenML is an MLOps framework for infrastructure-agnostic ML pipelines, trusted by thousands of companies to standardize their AI workflows. It offers a unified MLOps + LLMOps platform, supercharges existing infrastructure, provides reproducible and reliable AI, and acts as a unified ML + LLM control plane.

Broadleaf Commerce provides a composable, commercial open-source e-commerce platform built on Java and Spring. It offers a flexible and scalable solution for businesses to create unique e-commerce experiences and adapt to evolving market demands.

Truffle Security provides open-source tools for detecting and managing secrets in codebases. Their platform helps developers identify and remediate security vulnerabilities related to exposed credentials.

Fermyon is a multi-tenant, hosted, globally distributed engine for serverless functions running on Akamai Cloud, providing fast, powerful edge compute.

Naftiko is an open-core API integration platform that uses a spec-driven approach to turn API sprawl into a governed capability fleet. Its open-source framework allows integration engineers and platform architects to declare capabilities in YAML and expose them via MCP, REST, or SKILL servers, enabling AI-native integration across SaaS APIs and microservices. The company operates an open-core model with a free Community Edition alongside commercial Standard and Enterprise tiers.

Prometheus is an open-source monitoring and alerting toolkit originally built at SoundCloud and now maintained by the Cloud Native Computing Foundation. It provides powerful metrics collection, storage, and querying capabilities designed for reliability and scalability in cloud-native environments.

groundcover is a full-stack observability platform powered by eBPF and OpenTelemetry that deploys entirely within the customer's own cloud environment using a Bring Your Own Cloud (BYOC) architecture. The platform provides complete visibility into applications, infrastructure, and AI workloads without requiring code changes or instrumentation, and without sampling or cardinality limits. Founded in 2021, groundcover targets engineering teams seeking to replace legacy SaaS observability tools with a cost-efficient, high-fidelity alternative.

Semgrep is a lightweight static analysis tool designed to help developers find bugs, enforce coding standards, and improve security in their codebases. Unlike traditional static analysis tools, Semgrep is fast, easy to configure, and works across multiple programming languages.

Opentrons develops and manufactures lab automation robots for scientists, aiming to democratize access to laboratory robotics and enable easier sharing and reproduction of scientific protocols. Their mission is to provide a common platform for scientists to automate experiments, allowing them to focus on research rather than manual pipetting.

Coolify is an open-source platform that simplifies the deployment and management of applications, providing a user-friendly interface for developers to manage their projects.

Garden is a DevOps platform that simplifies environment management and testing for cloud-native applications, aiming to improve developer experience and accelerate software delivery.

Anoma is a blockchain protocol designed to enable private and asset-agnostic transactions. It focuses on providing a decentralized infrastructure for financial applications and privacy-preserving transactions, serving primarily enterprises.

Anaconda provides a distribution of the Python and R programming languages for scientific computing, that aims to simplify package management and deployment. It is built on technologies such as Python and R, and primarily serves enterprise customers.

Arize AI provides an AI and agent engineering platform for building, observing, and evaluating AI applications. It helps close the loop between AI development and production.

OpenHands develops open-source AI agents designed to automate repetitive tasks for developers, such as writing code and running commands. Their platform enhances productivity while maintaining security.

Black Forest Labs is an AI research company that develops state-of-the-art generative models for image and video creation. The company creates the FLUX family of models, including FLUX.1 for text-to-image generation, image editing, and in-context image generation, offering both open-weight models and commercial API services.

Kernel is a commercial open source company providing browser-as-a-service infrastructure for AI agents. The platform spins up sandboxed Chromium instances in under 30 milliseconds, manages authentication on behalf of agents, solves CAPTCHAs, handles residential proxies for stealth mode, and provides session recording and live observability. Kernel is built on open source unikernel technology and is used by companies including Cash App, Framer, and thousands of developer teams. The company was founded in 2025, graduated from Y Combinator Summer 2025, and raised $22 million in Seed and Series A funding led by Accel.

Bit is an open-source platform that enables developers to build, share, and collaborate on modular components. It helps teams create scalable and maintainable codebases by promoting component-driven development.

Probo is an open-source compliance management platform that helps startups and growing companies achieve and maintain certifications such as SOC 2, ISO 27001, HIPAA, and GDPR. The platform automates evidence collection, risk assessments, vendor management, and policy creation, while a dedicated compliance officer handles audit coordination and ongoing program maintenance on the customer's behalf. Probo is backed by Y Combinator (Spring 2025 batch) and was founded in 2024 by Antoine Bouchardy and Bryan Frimin.

InsForge is an open-source, agent-native cloud infrastructure platform that provides AI coding agents with the services needed to build and run production applications end-to-end. Its platform includes a model gateway, PostgreSQL database, authentication, file storage, edge functions, compute, site deployment, cron jobs, and realtime capabilities, all accessible via CLI and MCP server. InsForge is backed by Y Combinator (Spring 2026) and is designed to serve as an alternative to platforms like Supabase and AWS, purpose-built for AI coding agents.

ArcadeDB is an open-source, Apache 2.0 licensed multi-model database developed by Arcade Data Ltd. It natively stores graphs, documents, key-value pairs, full-text, time-series, and vector data in a single engine. ArcadeDB supports multiple query languages including SQL, OpenCypher, Gremlin, GraphQL, and the MongoDB query protocol, delivering over 10 million records per second with full ACID compliance. Created by Luca Garulli, the founder of OrientDB, ArcadeDB was built from scratch after SAP's acquisition of OrientDB, with a brand-new transactional engine that is faster and lighter than its predecessor.

Scalr is a Terraform and OpenTofu automation and collaboration platform that enables platform engineering teams to provide isolated, self-service infrastructure environments to developers. It supports multiple workflow styles including GitOps, CLI-driven, and no-code deployments, and offers features such as RBAC, OPA policy enforcement, module registries, and pipeline observability. Scalr co-founded the OpenTofu project, an open source continuation of HashiCorp Terraform, and donated it to the Linux Foundation.

Browserbase is the company behind Stagehand, an AI browser automation framework that makes it easy for developers and agents to control a browser reliably.

Modular is an AI infrastructure company that builds a unified compute platform for developing and deploying generative AI applications. Its products include MAX, a high-performance AI inference engine, and Mojo, a Python-compatible programming language designed for high-performance AI and systems programming on CPUs and GPUs.

Nari Labs develops open-weight text-to-speech AI models designed to generate ultra-realistic dialogue in a single pass. Its flagship model, Dia, supports customizable speaker tones, emotional inflections, nonverbal cues, and voice cloning from reference audio.

NativeLink is an open-source, high-performance build cache and remote execution system built in Rust by Trace Machina. It accelerates software compilation and testing by intelligently caching build artifacts and distributing tasks across multiple machines, integrating with build tools such as Bazel, Buck2, and Reclient. The platform is designed for safety-critical and compute-intensive workloads, including autonomous vehicles, robotics, and aerospace, and handles over one billion requests per month in production. NativeLink Cloud provides a fully managed version of the service.

kobs is an application-centric observability platform for Kubernetes and Cloud workloads, based on Custom Resource Definitions. It integrates metrics, logs, traces, and Kubernetes resources to provide comprehensive observability for applications running in clusters.

WhyLabs provides an AI observability platform that helps organizations monitor and manage the health, security, and performance of their AI applications. It offers tools for real-time data quality monitoring, model performance tracking, and LLM security.

Defog.ai develops fine-tuned large language models specifically designed for enterprise data analysis and SQL query generation. The company provides AI-powered tools that enable business users to interact with their databases using natural language, making data analysis more accessible across organizations.

Neosync is a cloud-native data security platform that continuously monitors, detects and automatically protects sensitive data giving your security teams peace of mind and your developers realistic data to use for local development and testing.

ZenML is an MLOps framework for infrastructure-agnostic ML pipelines, trusted by thousands of companies to standardize their AI workflows. It offers a unified MLOps + LLMOps platform, supercharges existing infrastructure, provides reproducible and reliable AI, and acts as a unified ML + LLM control plane.

Broadleaf Commerce provides a composable, commercial open-source e-commerce platform built on Java and Spring. It offers a flexible and scalable solution for businesses to create unique e-commerce experiences and adapt to evolving market demands.

Truffle Security provides open-source tools for detecting and managing secrets in codebases. Their platform helps developers identify and remediate security vulnerabilities related to exposed credentials.

Fermyon is a multi-tenant, hosted, globally distributed engine for serverless functions running on Akamai Cloud, providing fast, powerful edge compute.

Naftiko is an open-core API integration platform that uses a spec-driven approach to turn API sprawl into a governed capability fleet. Its open-source framework allows integration engineers and platform architects to declare capabilities in YAML and expose them via MCP, REST, or SKILL servers, enabling AI-native integration across SaaS APIs and microservices. The company operates an open-core model with a free Community Edition alongside commercial Standard and Enterprise tiers.

Prometheus is an open-source monitoring and alerting toolkit originally built at SoundCloud and now maintained by the Cloud Native Computing Foundation. It provides powerful metrics collection, storage, and querying capabilities designed for reliability and scalability in cloud-native environments.

groundcover is a full-stack observability platform powered by eBPF and OpenTelemetry that deploys entirely within the customer's own cloud environment using a Bring Your Own Cloud (BYOC) architecture. The platform provides complete visibility into applications, infrastructure, and AI workloads without requiring code changes or instrumentation, and without sampling or cardinality limits. Founded in 2021, groundcover targets engineering teams seeking to replace legacy SaaS observability tools with a cost-efficient, high-fidelity alternative.

Semgrep is a lightweight static analysis tool designed to help developers find bugs, enforce coding standards, and improve security in their codebases. Unlike traditional static analysis tools, Semgrep is fast, easy to configure, and works across multiple programming languages.

Opentrons develops and manufactures lab automation robots for scientists, aiming to democratize access to laboratory robotics and enable easier sharing and reproduction of scientific protocols. Their mission is to provide a common platform for scientists to automate experiments, allowing them to focus on research rather than manual pipetting.

Coolify is an open-source platform that simplifies the deployment and management of applications, providing a user-friendly interface for developers to manage their projects.

Garden is a DevOps platform that simplifies environment management and testing for cloud-native applications, aiming to improve developer experience and accelerate software delivery.

Anoma is a blockchain protocol designed to enable private and asset-agnostic transactions. It focuses on providing a decentralized infrastructure for financial applications and privacy-preserving transactions, serving primarily enterprises.

Anaconda provides a distribution of the Python and R programming languages for scientific computing, that aims to simplify package management and deployment. It is built on technologies such as Python and R, and primarily serves enterprise customers.

Arize AI provides an AI and agent engineering platform for building, observing, and evaluating AI applications. It helps close the loop between AI development and production.

OpenHands develops open-source AI agents designed to automate repetitive tasks for developers, such as writing code and running commands. Their platform enhances productivity while maintaining security.

Black Forest Labs is an AI research company that develops state-of-the-art generative models for image and video creation. The company creates the FLUX family of models, including FLUX.1 for text-to-image generation, image editing, and in-context image generation, offering both open-weight models and commercial API services.

Kernel is a commercial open source company providing browser-as-a-service infrastructure for AI agents. The platform spins up sandboxed Chromium instances in under 30 milliseconds, manages authentication on behalf of agents, solves CAPTCHAs, handles residential proxies for stealth mode, and provides session recording and live observability. Kernel is built on open source unikernel technology and is used by companies including Cash App, Framer, and thousands of developer teams. The company was founded in 2025, graduated from Y Combinator Summer 2025, and raised $22 million in Seed and Series A funding led by Accel.

Bit is an open-source platform that enables developers to build, share, and collaborate on modular components. It helps teams create scalable and maintainable codebases by promoting component-driven development.

Probo is an open-source compliance management platform that helps startups and growing companies achieve and maintain certifications such as SOC 2, ISO 27001, HIPAA, and GDPR. The platform automates evidence collection, risk assessments, vendor management, and policy creation, while a dedicated compliance officer handles audit coordination and ongoing program maintenance on the customer's behalf. Probo is backed by Y Combinator (Spring 2025 batch) and was founded in 2024 by Antoine Bouchardy and Bryan Frimin.

InsForge is an open-source, agent-native cloud infrastructure platform that provides AI coding agents with the services needed to build and run production applications end-to-end. Its platform includes a model gateway, PostgreSQL database, authentication, file storage, edge functions, compute, site deployment, cron jobs, and realtime capabilities, all accessible via CLI and MCP server. InsForge is backed by Y Combinator (Spring 2026) and is designed to serve as an alternative to platforms like Supabase and AWS, purpose-built for AI coding agents.

ArcadeDB is an open-source, Apache 2.0 licensed multi-model database developed by Arcade Data Ltd. It natively stores graphs, documents, key-value pairs, full-text, time-series, and vector data in a single engine. ArcadeDB supports multiple query languages including SQL, OpenCypher, Gremlin, GraphQL, and the MongoDB query protocol, delivering over 10 million records per second with full ACID compliance. Created by Luca Garulli, the founder of OrientDB, ArcadeDB was built from scratch after SAP's acquisition of OrientDB, with a brand-new transactional engine that is faster and lighter than its predecessor.

Scalr is a Terraform and OpenTofu automation and collaboration platform that enables platform engineering teams to provide isolated, self-service infrastructure environments to developers. It supports multiple workflow styles including GitOps, CLI-driven, and no-code deployments, and offers features such as RBAC, OPA policy enforcement, module registries, and pipeline observability. Scalr co-founded the OpenTofu project, an open source continuation of HashiCorp Terraform, and donated it to the Linux Foundation.

Browserbase is the company behind Stagehand, an AI browser automation framework that makes it easy for developers and agents to control a browser reliably.

Modular is an AI infrastructure company that builds a unified compute platform for developing and deploying generative AI applications. Its products include MAX, a high-performance AI inference engine, and Mojo, a Python-compatible programming language designed for high-performance AI and systems programming on CPUs and GPUs.

Nari Labs develops open-weight text-to-speech AI models designed to generate ultra-realistic dialogue in a single pass. Its flagship model, Dia, supports customizable speaker tones, emotional inflections, nonverbal cues, and voice cloning from reference audio.

NativeLink is an open-source, high-performance build cache and remote execution system built in Rust by Trace Machina. It accelerates software compilation and testing by intelligently caching build artifacts and distributing tasks across multiple machines, integrating with build tools such as Bazel, Buck2, and Reclient. The platform is designed for safety-critical and compute-intensive workloads, including autonomous vehicles, robotics, and aerospace, and handles over one billion requests per month in production. NativeLink Cloud provides a fully managed version of the service.

kobs is an application-centric observability platform for Kubernetes and Cloud workloads, based on Custom Resource Definitions. It integrates metrics, logs, traces, and Kubernetes resources to provide comprehensive observability for applications running in clusters.

WhyLabs provides an AI observability platform that helps organizations monitor and manage the health, security, and performance of their AI applications. It offers tools for real-time data quality monitoring, model performance tracking, and LLM security.

Defog.ai develops fine-tuned large language models specifically designed for enterprise data analysis and SQL query generation. The company provides AI-powered tools that enable business users to interact with their databases using natural language, making data analysis more accessible across organizations.

Neosync is a cloud-native data security platform that continuously monitors, detects and automatically protects sensitive data giving your security teams peace of mind and your developers realistic data to use for local development and testing.

ZenML is an MLOps framework for infrastructure-agnostic ML pipelines, trusted by thousands of companies to standardize their AI workflows. It offers a unified MLOps + LLMOps platform, supercharges existing infrastructure, provides reproducible and reliable AI, and acts as a unified ML + LLM control plane.

Broadleaf Commerce provides a composable, commercial open-source e-commerce platform built on Java and Spring. It offers a flexible and scalable solution for businesses to create unique e-commerce experiences and adapt to evolving market demands.

Truffle Security provides open-source tools for detecting and managing secrets in codebases. Their platform helps developers identify and remediate security vulnerabilities related to exposed credentials.

Fermyon is a multi-tenant, hosted, globally distributed engine for serverless functions running on Akamai Cloud, providing fast, powerful edge compute.

Naftiko is an open-core API integration platform that uses a spec-driven approach to turn API sprawl into a governed capability fleet. Its open-source framework allows integration engineers and platform architects to declare capabilities in YAML and expose them via MCP, REST, or SKILL servers, enabling AI-native integration across SaaS APIs and microservices. The company operates an open-core model with a free Community Edition alongside commercial Standard and Enterprise tiers.

Prometheus is an open-source monitoring and alerting toolkit originally built at SoundCloud and now maintained by the Cloud Native Computing Foundation. It provides powerful metrics collection, storage, and querying capabilities designed for reliability and scalability in cloud-native environments.

groundcover is a full-stack observability platform powered by eBPF and OpenTelemetry that deploys entirely within the customer's own cloud environment using a Bring Your Own Cloud (BYOC) architecture. The platform provides complete visibility into applications, infrastructure, and AI workloads without requiring code changes or instrumentation, and without sampling or cardinality limits. Founded in 2021, groundcover targets engineering teams seeking to replace legacy SaaS observability tools with a cost-efficient, high-fidelity alternative.

Semgrep is a lightweight static analysis tool designed to help developers find bugs, enforce coding standards, and improve security in their codebases. Unlike traditional static analysis tools, Semgrep is fast, easy to configure, and works across multiple programming languages.

Opentrons develops and manufactures lab automation robots for scientists, aiming to democratize access to laboratory robotics and enable easier sharing and reproduction of scientific protocols. Their mission is to provide a common platform for scientists to automate experiments, allowing them to focus on research rather than manual pipetting.

Coolify is an open-source platform that simplifies the deployment and management of applications, providing a user-friendly interface for developers to manage their projects.

Garden is a DevOps platform that simplifies environment management and testing for cloud-native applications, aiming to improve developer experience and accelerate software delivery.