Startup Deep Dive : Composio — its first product failed with a paying customer before it hit 100 million weekly AI actions

Composio’s tools now handle more than 100 million AI-agent actions every week, as of September 2026 (Composio). The platform that got there almost did not exist: its founders’ first attempt at solving the same problem landed a paying enterprise customer within months, then quietly failed anyway.

That contradiction — real customer, real money, wrong product — is the hinge of this story. Composio, a developer-infrastructure company that lets AI agents connect to and act on hundreds of everyday business tools, had to throw away its first product before it built the one that Lightspeed Venture Partners backed with a $25 million Series A in July 2025 (PR Newswire; SiliconANGLE, July 2025).

Quick facts

What they do

Composio sells picks and shovels for the AI-agent boom. When a company builds an AI agent that is supposed to read a Gmail inbox, file a Jira ticket, update a Salesforce record or push code to GitHub, someone has to handle the unglamorous plumbing underneath: authentication, API schemas, rate limits, retries and error handling, all rebuilt for the way a large language model calls a tool rather than the way a human clicks a button. Composio packages that plumbing as a hosted layer — what it calls toolkits — covering more than 1,500 apps as of September 2026 (Composio.dev), with its open-source repository separately advertising 1,000-plus toolkits and over 30,000 GitHub stars (composiohq/composio, accessed September 2026). Its customers are developers and engineering teams building AI agents, ranging from solo builders on the free tier to enterprises such as Glean, Zoom, AWS-adjacent tooling teams and Arizona State University, per the customer logos Composio lists on its own site (Composio.dev, September 2026).

The origin

Soham Ganatra was not a first-time founder when Composio started. He had already built a chatbot company for banks soon after graduating from IIT Bombay around 2016-17, and had been an early employee at Bureau, a fraud and risk-data startup, before striking out again (Forbes India, 2026). He and Karan Vaidya had known each other since a physics olympiad camp, and later became roommates at IIT Bombay; both had spent time in engineering roles built around integrations, including stints at companies such as Nirvana and Rubrik, before deciding to found something together (Lightspeed Venture Partners, July 2025).

The insight that eventually became Composio was mundane on its face: integrations eat a disproportionate share of engineering time. Ganatra has said that wiring one system to another can consume a third or more of a product team’s effort, and that the work rarely feels rewarding to the engineers doing it (Composio blog, July 2025; Forbes India, 2026). What made 2023 the right moment to act on that observation was the trajectory of code-generation models — even the clumsy early versions suggested that software talking to software was about to change shape, and the founders wanted to be the layer that change ran through.

The struggle years

The company’s first attempt did not survive contact with the market. After raising roughly $4 million in seed funding, Ganatra built an AI-powered auto-integration product and, through a warm introduction, landed Glean — a real enterprise customer willing to pay six figures — early in the company’s life. It took about six months of building before the flaw became obvious: a friendly, well-intentioned customer does not tell a founder that a product does not work. Glean offered polite suggestions instead of the blunt rejection the product needed to hear, and Composio burned half a year chasing a signal that was never real (The Product Market Fit Show, September 2025).

The pivot that followed was not an immediate rescue. In mid-2023, while the team experimented with building coding agents, they hit a more specific wall: connecting an AI agent to real tools such as Gmail or Salesforce was unreliable and barely documented, because nobody had designed those integrations for how a model calls a function rather than how a person clicks through a form. That became the new product. But the company’s next stretch was slow, not sudden — Composio picked up its first 1,000 developers through technical Reddit posts and 10 to 20 cold calls a day with only about ten integrations live, and then growth went flat. From late 2023 through roughly August 2024, usage barely moved, because the large language models of the day were not yet reliable enough to run real production agents (The Product Market Fit Show, September 2025).

The turning point

The inflection arrived in two waves rather than one dramatic event. The first was external: model quality crossed a threshold around September 2024, and developers who had been kicking the tyres on agent frameworks started shipping them for real, which finally moved Composio’s own numbers (The Product Market Fit Show, September 2025). The second was structural: when Anthropic’s Model Context Protocol emerged as a common standard for connecting AI systems to external tools, Composio built native MCP support early, and adoption compounded on top of the first wave.

The scale of the swing is the clearest way to see it. Composio had picked up its first thousand developers through manual outreach in late 2023; by July 2025 it had crossed 100,000 developers, was processing millions of tool-call requests daily, and closed a $25 million Series A round in a reported two to three weeks once it went out to investors (PR Newswire, July 2025; The Product Market Fit Show, September 2025). By 2026 the company put that figure at more than 200,000 developers and over 100 million tool calls a week (Forbes India, 2026; Composio.dev, September 2026) — the same number that opens this piece, and the number the six-month failure of 2023 nearly foreclosed.

The money behind it

Composio has raised money in two disclosed rounds, taking total funding to $29 million (about ₹278 crore, at $1 ≈ ₹96.0 as of 18 September 2026, Trading Economics) as of July 2025:

• Seed, around early 2024: roughly $4 million, backed by Elevation Capital and Together Fund, coinciding with the company’s run through Y Combinator’s Winter 2024 batch (Startup Intros; AI Wiki, aggregated reporting).
• Series A, announced July 2025: $25 million led by Lightspeed Venture Partners, with existing backers Elevation Capital and Together Fund returning, plus a notable angel bench: Vercel chief executive Guillermo Rauch, HubSpot founder Dharmesh Shah, Gokul Rajaram, Rubrik co-founder Soham Mazumdar, SV Angel, Blitzscaling Ventures, Operator Partners and Yohei Nakajima’s Agent Fund (PR Newswire, July 2025; Lightspeed Venture Partners, July 2025).

Reporting on the exact size and timing of the Series A is not perfectly consistent: most outlets — PR Newswire, SiliconANGLE, YourStory and Entrackr — put it at $25 million and date the announcement to 22 July 2025, while a Forbes India profile refers to a $24 million round closing in March 2025 with the same lead investors. The two accounts likely describe the same financing at different stages of its close; this piece uses the $25 million, July 2025 figure because it is corroborated by the larger number of independent outlets. A separate outlet reported Composio was targeting a roughly $120 million valuation ahead of the round, but Composio has not confirmed a valuation publicly, so that figure is not treated as fact here.

What each lead backer changed: Lightspeed’s cheque came with a thesis that AI agents need a “shared learning layer” that persists knowledge across deployments rather than starting fresh each time, which pushed Composio to add a “skills” system on top of its integrations rather than staying a pure connector business (Lightspeed Venture Partners, July 2025). The seed backers, Elevation Capital and Together Fund, gave Composio the runway to survive its first, failed product and rebuild before it had traction to show for it.

How it makes money

Composio runs a usage-based SaaS model layered on top of a generous free tier, rather than charging per integration built:

• Free tier: up to 100,000 tool calls a month at no cost, designed to get individual developers and small teams live without a sales conversation (Composio.dev, September 2026).
• Paid subscription tiers: flat monthly plans that bundle a tool-call allowance, with published entry pricing around $29 a month for roughly 200,000 calls, stepping up to higher tiers for larger call volumes (PricingSaaS; company pricing page, aggregated 2026 reporting).
• Usage overage: calls beyond a plan’s bundle are billed per thousand tool calls, so revenue scales with how hard a customer’s agents actually work rather than seat count.
• Premium tool pricing: certain higher-complexity or higher-cost tool integrations are priced at a multiple of the standard rate, reflecting the underlying API or compute cost of executing them.
• Enterprise contracts: custom pricing for SOC 2 Type II and ISO 27001-certified deployments, dedicated support, service-level guarantees and, for security-sensitive customers, customer-managed encryption keys — the tier most likely to carry Composio’s real margin, though the company does not publish a rate card for it.

The mechanic that people get wrong is treating Composio as an integrations marketplace like Zapier. It behaves more like infrastructure: customers do not pay to “install” a Slack or GitHub connector, they pay for the volume of authenticated, monitored, retried actions their AI agents actually execute through it, which is why usage-based billing rather than per-seat or per-integration pricing sits at the centre of the model.

The numbers

Composio is a private, venture-funded company and does not file or publish audited multi-year revenue and profit figures, so a conventional three-to-four-year revenue and profit/loss table cannot be built from verifiable sources; that gap is disclosed here rather than filled with invented figures. What is verifiable is a run of usage and funding milestones that stand in for a growth curve:

Sources: PR Newswire, July 2025; The Product Market Fit Show, September 2025; GetLatka, accessed September 2026; Forbes India, 2026. Where an outlet’s estimate is unconfirmed by the company, it is labelled as such in the table rather than presented as fact.

Where the money comes from

Composio does not publish a revenue split by geography or customer segment, so the picture below is built from what the company and independent trackers have disclosed about its customer mix and distribution, not from a reported percentage breakdown:

• Customer base: more than 200 startups and enterprises reported as customers as of July 2025, spanning small AI-native teams to larger organisations (PR Newswire, July 2025).
• Named enterprise and mid-market accounts: Glean, Zoom, Wix, Hostinger, Arizona State University, Pelago Health and ClickFunnels appear as customer logos on Composio’s own site as of September 2026 (Composio.dev).
• Self-serve developer base: the bulk of the 100,000-to-200,000-plus developer count reported between July 2025 and 2026 is presumed self-serve, free-tier usage rather than paid contracts, consistent with a usage-based funnel that converts a small share of a large free base.
• Distribution channel split: usage now arrives through two distinct paths — direct SDK and API integration into custom agent code, and native connections through MCP-compatible AI clients such as ChatGPT, Claude, Cursor and Vercel’s AI SDK (Composio.dev, September 2026).
• Geography: the company operates from twin hubs in San Francisco and Bengaluru, reflecting a US-facing commercial motion built on an India-founded engineering base (Forbes India, 2025).

The surprise, to the extent one exists, is how much of Composio’s recent growth is credited not to its own sales motion but to a protocol it does not own. The rise of MCP as an industry-wide standard for connecting AI systems to tools handed Composio a second growth wave for free, according to the company’s own account of its trajectory (The Product Market Fit Show, September 2025) — the same openness that helped it could just as easily help a rival.

The risks

• Credential-aggregation risk, already realised: on 21 May 2026, an attacker compromised Composio’s internal systems — starting from a staff member’s Gmail OAuth token — and worked through an infrastructure-monitoring tool and the company’s own automated remediation system to reach production. Composio disclosed that roughly 0.3% of active connections, 5,241 in total, were affected, including 5,001 GitHub connections and 5,241 potentially exposed API keys; it revoked all pre-incident keys by 23 May 2026 and published a remediation update on 16 September 2026 (Composio, September 2026; corroborated by Material Security and P0 Security, 2026, and by co-founder Karan Vaidya’s own incident thread on X, May 2026). Because Composio’s entire value proposition is holding the authentication tokens that connect AI agents to Gmail, GitHub, Salesforce and hundreds of other systems, a breach here is a breach of exactly the thing customers pay it to protect.
• Commoditisation of the layer it sits in: Composio’s growth accelerated after Anthropic’s Model Context Protocol became a shared, open standard for tool connectivity — but an open standard that helps a startup distribute faster also lowers the switching cost to a rival built on the same standard, including well-funded competitors such as Pipedream and Zapier’s own MCP offering.
• Dependence on third-party platforms it does not control: every one of Composio’s 1,000-plus toolkits depends on an external company’s API terms, rate limits and pricing staying stable; a policy change at a large platform it integrates with can break or degrade a toolkit overnight, with no recourse for Composio beyond rebuilding it.
• Unprofitability against a young, small revenue base: the company describes itself as unprofitable as of 2026 and is prioritising product development over margin, while disclosed revenue is in the low-to-mid seven figures against $29 million raised — a gap that leaves it dependent on further fundraising if growth in paid usage does not outrun spending (Forbes India, 2026).

The takeaway

The most transferable lesson in Composio’s record is not about AI agents at all — it is about how founders mistake politeness for validation. Ganatra had a paying customer, a warm introduction and six months of engineering time behind his first product, and none of it was proof the product worked, because Glean was too well-mannered to say so plainly. The company only found its real business once it stopped listening to a friendly account and started noticing an unglamorous, structural problem — tool-calling reliability — that nobody around it had bothered to name. A cheque and a logo are evidence that someone will be polite to you; they are not evidence that you have built the right thing.

Frequently asked questions

What does Composio actually do?

It provides the infrastructure layer that lets AI agents authenticate with and take actions inside everyday business software — sending a Slack message, filing a GitHub issue, updating a CRM record — through a single hosted platform of more than 1,500 pre-built app integrations as of September 2026 (Composio.dev).

Who founded Composio and when?

Soham Ganatra and Karan Vaidya, both IIT Bombay alumni, founded Composio in 2023, operating under the legal entity Sampark Inc, with hubs in San Francisco and Bengaluru (Forbes India, 2025).

How much money has Composio raised, and from whom?

Composio has raised $29 million in total as of July 2025: a roughly $4 million seed round backed by Elevation Capital and Together Fund around its Y Combinator Winter 2024 batch, and a $25 million Series A led by Lightspeed Venture Partners in July 2025, with angel participation from Vercel’s Guillermo Rauch and HubSpot’s Dharmesh Shah, among others (PR Newswire, July 2025).

Is Composio profitable?

No. The company describes itself as unprofitable as of 2026 and says it is deliberately prioritising product development over near-term margins, with disclosed revenue in the low-to-mid seven figures (Forbes India, 2026).

What happened in Composio’s May 2026 security incident?

An attacker used a compromised employee Gmail OAuth token to reach Composio’s internal systems, escalated through an infrastructure-monitoring tool and the company’s own remediation systems, and accessed a subset of customer credentials — about 0.3% of active connections, roughly 5,241 in total, most of them GitHub connections. Composio revoked affected keys within two days and published a full remediation update in September 2026 (Composio, September 2026).

Sources

Figures are as of September 2026. Currency converted at $1 ≈ ₹96.0 as of 18 September 2026 (Trading Economics).

• PR Newswire, “Composio Raises $29M to Solve AI’s Learning Problem,” July 2025
• SiliconANGLE, “Composio raises $25M in funding to ease AI agent development,” July 2025
• Lightspeed Venture Partners, “Investing in Composio: Building the Backbone of AI Agent Intelligence,” July 2025
• YourStory, “Composio raises $25M led by Lightspeed Venture Partners,” July 2025
• Entrackr, “Agentic AI startup Composio raises $25 Mn led by Lightspeed,” July 2025
• Composio blog, “We raised $29M to build skills that evolve with your agents,” July 2025
• Forbes India, “Soham Ganatra: Making machines that learn from mistakes” (30 Under 30, 2026), 2026
• Forbes India, “Soham Ganatra and Karan Vaidya’s Composio: Enabling AI systems to talk to each other and the real world” (AI Special), 2025
• The Product Market Fit Show, “From Failed Pivot to $30M Series A: Composio’s AI Agent Growth,” September 2025
• GetLatka, Composio company profile, accessed September 2026
• Composio GitHub repository (composiohq/composio), accessed September 2026
• Composio official website (composio.dev), accessed September 2026
• Composio blog, “Composio May 2026 Security Incident,” remediation update, September 2026
• Material Security, “The Composio Breach: One Token, 10K Doors,” 2026
• P0 Security, “The Composio breach: Let’s stop blaming the agents,” 2026
• Karan Vaidya (@KaranVaidya6), incident update thread on X, May 2026
• Trading Economics, USD/INR exchange rate, 18 September 2026

Found an error? Write to us and we’ll correct it in the open, dated, on the piece.