Problem

Repacket addresses the human-error layer of cybersecurity: employees click convincing phishing links, surrender credentials, execute ransomware, or upload intellectual property and customer data to external services such as ChatGPT. Repacket’s YC profile claims that 90% of security breaches stem from a simple employee mistake and positions the product particularly for smaller companies that lack dedicated IT or security staff. The most acute use case is preventing an employee’s normal browsing or AI-tool usage from turning into a material credential compromise or data leak, without blocking productive work altogether.

The problem is becoming harder as employees adopt AI tools outside formal company systems. When organizations block official AI access, employees may use personal accounts instead, creating shadow IT and leaving sensitive data unprotected. That creates a security-versus-productivity tradeoff: companies need controls over phishing, SaaS usage, and data uploads, but often cannot justify the complexity or cost of a large enterprise security stack.

Product / Service

Repacket is an AI-native secure web gateway delivered as a locally running, context-aware security proxy. It analyzes web traffic and provides enterprise controls across browsers and SaaS applications, with a deployment the company says can be installed in about 60 seconds. Its feature set combines layered phishing prevention, web-content filtering, session protection, application discovery, and data-loss prevention. DLP rules recognize sensitive information being uploaded to unapproved platforms, while the phishing system combines threat-intelligence databases with AI analysis of page structure, images, rendering, URLs, and certificates to detect fresh or sophisticated phishing pages.

The product also functions as an AI-governance layer: administrators can discover which AI applications employees use, define guardrails, inspect or block sensitive uploads, redact information before it reaches external models, and extend protection to native work applications such as Slack and Outlook. The website advertises a 14-day trial with no credit card, guided onboarding, and a Pro plan priced at $60 per user per year, while the documentation describes the product as in Early Access. The intended benefit is affordable, fast-to-deploy protection that lets employees use the internet and AI tools while reducing the consequences of mistakes.

Market

Repacket competes in the overlapping markets for secure web gateways, browser and employee security, data-loss prevention, SaaS or shadow-IT governance, and AI-use governance. Its secure-web-gateway positioning puts it alongside established platforms such as Cisco Umbrella, Zscaler Internet Access, Palo Alto Networks’ Prisma Access, Fortinet FortiGate, and Cloudflare One; Repacket’s differentiation is its lightweight local deployment, employee-mistake focus, small-company orientation, and combination of browser controls with AI-specific inspection and governance.

The company was founded in 2021, joined Y Combinator’s Winter 2023 batch, and is listed by YC as active with a four-person Vancouver team. Repacket says it is backed by Y Combinator and Initialized Capital. Public evidence points to an early commercial stage rather than a clearly pre-revenue company: it offers a paid plan and free trial, but its own documentation still labels the product Early Access and does not disclose customer counts. A third-party estimate reported $1.1 million of 2024 revenue, but that figure is not company-verified in the available evidence, so the strongest conclusion is that Repacket has funding and an emerging go-to-market motion, with traction that remains only partially disclosed.