Ahmad Khan is Co-Founder at Hex Security, a Y Combinator W26 company building AI agents that run continuous penetration testing against applications and infrastructure. He studied Mathematics at the University of Waterloo and is a security professional and enthusiast.

Previously, Ahmad was building robots that learned from each other by sharing skills on-chain and researching World Models that give robots complete environmental understanding. His robot became the first in history to ring the NASDAQ bell.

Ahmad has experience from OpenAI and maintains a security blog at ahmsec.io. Hex Security's agents have found critical vulnerabilities in dozens of YC companies, preventing an estimated $3B+ in potential damages.

Hex Security was founded in 2026 with co-founders Huzaifa Ahmad and Prama Yudhistira, and is based in San Francisco. The company is part of Y Combinator's Winter 2026 batch.

Hex Security's AI agents work 24/7 to find and verify critical vulnerabilities, discovering SQL injections exposing billions of records and gaining access to hundreds of codebases in their first weeks of operation.