Is Y Combinator Having a Brand Crisis Moment?

Ask a founder what they got out of Y Combinator and most will mention the network before the money. The name opens doors. Investors take the call, enterprise buyers ease up on vetting, and other founders offer a level of trust they would never give a stranger. In practice YC works less like an accelerator and more like a credential, so its brand depends on whether that credential holds up.

This year it has been tested twice in public, first by Delve and now by Corgi.

Delve

On paper, Delve was a model YC company. Two 21-year-old MIT dropouts, Karun Kaushik and Selin Kocalar, founded it in late 2023 with a pitch to use AI to shrink months of compliance work for SOC 2, HIPAA, ISO 27001 and GDPR into days. It came out of YC's W24 batch with a $300M valuation, Insight Partners backing and more than 1,000 paying customers.

In March, an anonymous writer using the name DeepDelver published Delve: Fake Compliance as a Service (Part I). The post alleged that Delve produced fake evidence, wrote auditor conclusions for certification mills that rubber stamped the reports, and skipped major framework requirements while telling clients they were fully compliant. The leaked reports were hard to explain away. ComplianceHub found that all 259 Type II SOC 2 reports in the leaked set claimed zero security incidents, zero personnel changes and zero cyber incidents, and all carried identical "unable to test" conclusions across the same control categories.

A later installment brought the story inside YC's own walls. DeepDelver alleged that Delve had forked an open-source agent-building tool from fellow YC company Sim.ai and repackaged it as its own Pathways product, after the Sim Studio team had paid Delve $15,000 for compliance work.

YC acted within days. Around April 3, it removed Delve from its company directory and asked the founders to leave. In a message on Bookface, YC's internal forum, Garry Tan reportedly wrote that "YC is a community, not just an accelerator." TechCrunch reported that Kocalar confirmed the split on X, and that Insight Partners also appeared to delete posts about its investment, though its main blog post was later restored. Delve has denied wrongdoing. Kaushik said the company "grew too fast and fell short" but rejected the fraud claims, blaming a targeted cyberattack and saying the whistleblower's data had been manipulated or taken out of context. The company also posted a response to the allegations on its blog.

For YC, the damage goes past one company. Critics pointed out that Delve concentrated on selling to other YC companies who trusted the YC brand. The network founders give up equity to join is the same thing that made Delve's sales pitch work. YC's handling of the exit didn't help. One widely read essay noted that Delve disappeared from YC's directory with no press release or public statement, and argued it was expelled for stealing from a fellow YC company rather than for anything it did to customers. Commenters on Hacker News made the same point. Fair or not, that reading is now part of how people talk about YC.

Corgi

Corgi is a different sort of problem. Nobody has accused it of fraud, and by most measures the business is working. It's a San Francisco insurtech that operates as a licensed carrier for tech startups, and as of June 2026 it was valued at $2.6 billion. What draws attention is how the company behaves, and how much of that happens in YC's backyard. In February it opened a 24-hour café at its San Francisco headquarters with a discount for YC alumni, and in April it started free bus routes around YC's offices.

In June, Papermark co-founder Marc Seitz went after Corgi on X, accusing it of taking Papermark's open-source and enterprise-licensed code for its new Dataroom product. He added that it "makes the rest of your business questionable and the YC community look terrible." Laqua's first reply said his team had told him they used none of Papermark's code, and promised a code audit with the results posted on Corgi's website. He followed up with a code comparison, admitting the team should have relied more on its own language and visual choices, and suggesting Seitz was upset because Corgi's product was mostly free and competed with his. X users attached a Community Note to that post claiming Corgi's Dataroom shared identical variable names, code structure and UI text with Papermark.

TechCrunch's reporting filled in more. The founder of Hello World Cafe, which competes with Corgi's coffee business, said he received a cease-and-desist from Corgi's lawyers over a tweet joking about the controversy. The company had also sued several former employees, and Laqua went viral after telling Harry Stebbings' podcast he expects staff to work seven days a week. Corgi sent Seitz a cease-and-desist too, demanding he take down his post.

The latest round started last week. Insurance Business reported that a Corgi marketing employee, in a since-deleted X post, named the company's hands-off speech policy as a reason she joined, and contrasted it with a previous employer that had asked her to delete a comment containing a disability-related slur. That set off wider scrutiny of Corgi's social media strategy and the group of young female employees known online as the "Corgi Girls." Laqua refused to budge. To people pressing him to fire staff over their posts, he wrote that "it's not going to happen," and argued companies would aim higher if employees could speak freely instead of producing what he called "corporate slop."

YC hasn't said anything publicly about Corgi. Corgi disputes the copying claims and runs a licensed insurance business with paying customers. The optics are still bad for YC. A company that leans this hard on its YC ties, down to cheaper coffee for alumni, brings some of the YC name along into every fight it picks online.

A longer pattern

Either story alone would fade. Together they sit on top of older ones. In 2024, YC took heat for backing PearAI, whose founder openly described the product as a clone of VSCode and another AI editor called Continue, and Tan defended the company on X. Tan's own posting adds to it. After he bragged in March about how much AI-generated code he was shipping, Fast Company reported that a developer went through his blog and found bloat, waste and rookie mistakes.

What connects these cases is a culture that rewards moving fast and posting loudly. Delve sold certifications on a timeline that real audits struggle to match. Corgi launched a product with on-screen text close enough to a competitor's that it had to change it, then sent legal letters to critics. YC's own leadership talks the same way online, which makes it hard for the firm to seem surprised when a portfolio company follows suit.

Crisis or not

I wouldn't call it a crisis yet. YC still draws the strongest applicant pool in startups, and Demo Day still pulls in every investor who matters. One expulsion and one combative portfolio company won't erase two decades of Airbnb and Stripe.

The risk is slower than that. A credential only works if people believe it screens for something. Delve raised doubts about the screening. Corgi raises a separate question about whether YC has any say in how its companies represent the network once they've graduated. By staying quiet on both, YC leaves the explaining to other people.

What YC could do, without policing anyone's posts, is explain publicly what its name is meant to guarantee and what gets a company removed. So far it has let an anonymous Substack writer, a rival founder on X and a lot of angry replies decide what "YC-backed" means this year.