Asymptote Labs raises a US$5.5M seed for Beacon agent telemetry

Asymptote says Beacon captures agent activity across Claude Code, Codex, Cursor and more than 20 other harnesses, then normalises it into a common runtime data model that extends OpenTelemetry, with the organisation keeping ownership of the data[1]. It also says learnings from earlier coding sessions carry forward after a session ends[1].

Tower describes the open-source project as Agent Beacon, a runtime data layer that also covers browser chat, cloud agents and agent SDKs[2]. It says one record can hold prompts, tool calls, commands, file edits, approvals and token use, and that companies can stream that telemetry into Splunk, Datadog or CrowdStrike[2].

The public README frames the same repository as memory. It says Beacon captures session history across Claude Code, Cursor, Codex, OpenCode and more than 20 other harnesses, and turns workflows, corrections and debugging patterns into knowledge later agents can reuse[3]. GitHub's API lists the repository as created on 12 May 2026, reports the licence as MIT, and showed 2,248 stars on 21 October 2026[4]. The LICENSE file in the repository is the MIT licence text, copyright 2026 Asymptote Labs[3]. That creation date matches Asymptote's statement that Beacon launched in May 2026[1]. Asymptote also says GitHub stars grew more than 460% in September and that the project reached No. 3 on GitHub's global trending repositories[1]. The September growth figure is the company's. This story did not reconstruct it.

"AI agents are becoming a new operating layer inside every company, but the infrastructure to understand and control them hasn't caught up," co-founder and chief executive Justin D'Souza said[1].

Asymptote says its enterprise platform, built on Beacon, intercepts live agent activity and enforces policy at the prompt and at the tool, steering agents away from unsafe behaviour and blocking risky actions before they occur[1]. It says a detection library surfaces findings within minutes of deployment, covering data leakage, insider threats, AI supply-chain risk and inefficient workflows[1].

Tower calls the commercial product a control plane on that record: managed detections, search and retention, every action tied to the actor behind it, and extra checks in front of sensitive steps such as an agent deleting production data[2]. Jared Young, director of venture capital at Tower Research Ventures, said the firm's security team is "putting Beacon through its paces on our own endpoints"[1].

D'Souza and co-founder Shukan Shah were early engineers at Doppel, which defends against social engineering[1]. Asymptote says D'Souza scaled Doppel's real-time detection from 1 million to more than 1 billion domains a day, and that Shah led security-operations automation and agentic threat hunting[1]. Tower says the two have built together for more than seven years, and that the team includes security research talent from Trail of Bits[2]. After Doppel they joined the South Park Commons Founder Fellowship[1].

Named angel backers include Doppel co-founders Kevin Tian and Rahul Madduluri and Socket founder Feross Aboukhadijeh[1]. Tower also refers to further participants as "a group of security and engineering leaders from the likes of Cursor, Vercel, Doppel, Microsoft, and more"[2]. Those words refer to individual leaders associated with those companies.

Asymptote says it is headquartered in New York and SOC 2 Type II compliant[1]. The code is public at github.com/Asymptote-Labs/agent-beacon, and the company points enterprises to asymptotelabs.ai/contact[1].

Asymptote says security teams, including at regulated enterprises, already run Beacon and the enterprise platform in production[1]. It does not name them. Young's comment describes an evaluation on Tower's own endpoints[1]. The announcement and Tower's post do not list which actions can be blocked, a false-positive rate, or what happens if the control service is unavailable. The public README describes capture and reuse of session history[3]. The blocking behaviour is described in the company and investor posts.

Coding agents run on machines that also hold source code and credentials, and each harness keeps its own history. Asymptote and Tower both say a company-owned record of those sessions is what security, engineering and finance teams will query as agent use spreads[1][2]. Beacon's source code is public under the MIT licence[3][4]. The controls that would stop an action are described in the announcement and in Tower's post, and those posts do not publish a coverage list or a success rate[1][2].