Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124

Controversy all around Delve it appears to have damaged the startup’s relationship with accelerator Y Combinator.
Delve is no longer listed in YC’s company directory, and Delve website seems to have been removed from the YC website. In addition, the first COO Selin Kocalar written on X that “YC and Delve have parted ways.”
“I remember the day we took our YC interview at MIT,” Kocalar said. “We’re very grateful to the community and every startup partner we’ve made.”
YC isn’t the first startup to divest from Delve. Insight Partners also appears to be involved he deleted the documents about his money from the companyalthough his original blog post was later restored.
Meanwhile, Delve continues to push back anonymous claims that they misled customers claiming that they are complying with privacy and security laws while allegedly skipping the requirements and self-reporting of “certification mills that show rubber stamps.”
The claim was first published in Substack post unknown was reported by “DeepDelver,” who identified himself as a former Delve customer who became suspicious after receiving information about the customer he launched.
DeepDelver published a series of articles following his comments Simple animations and videos from the company, as well criticizes Delve for removing an open source tool like its ownwithout providing credit or entering into an agreement with the manufacturer. A security researcher reported that they were able to find Delve’s popular data.
Techcrunch event
San Francisco, CA
| |
October 13-15, 2026
Meanwhile, Delve stayed part of the related argument where the malware was found in an open source project developed by Delve client LiteLLM.
In the latest company postDelve Kocalar’s COO and CEO Karun Kaushik announced their intention to create a “research platform for anonymous people.” Among other things, they said the company had hired a cybersecurity firm “to help us understand what happened,” and said “the evidence points to a malicious attack rather than an actual whistleblower.”
“It appears that an attacker fraudulently purchased Delve, maliciously leaked information, including Delve’s company information, and used it to launch a defamation campaign,” he said. The blog post also included a photo that it said “shows the attacker displaying our analysis page file.io.”
Further to the lawsuit, Delve described DeepDelver’s criticism as “including false claims, carefully selected images, and deleted content.” For example, they said DeepDelver “has lost our AI while admitting 70% of security questions.”
On the question of using open source tools, Delve said it was “built on the Apache 2.0 open source platform, which allows for commercial use, with extensive refactoring for use cases.”
However, the management also said that they will be taking steps to ensure that customers “feel confident in our platform and its results.”
These steps are said to include cleaning up the company’s network to remove audit firms “that don’t meet our requirements,” “revising audits and penetration testing for all active clients,” and ensuring “without a doubt” that Delve’s templates for things like meeting notes “were designed to be self-starting.”
In post on XKaushik made many similar points but also said, “(W)e grew too fast and failed to meet our standards.
TechCrunch has reached out to Y Combinator and DeepDelver for feedback on Delve.