PolymorphYC W26 landing page report.
← Back to YC W26

Your landing page’s weakest score is CTA.

How Polymorph ranks

  1. 1.Corgea78
  2. 2.DryRun Security73
  3. 3.Semgrep72
  4. 4.Snyk54
  5. 5.Polymorph50
Fix CTA

Score over time

908070605040Semgrep 68 on Jun 7 (Wayback)Semgrep 68 on Jun 15 (Wayback)Semgrep 70 on Jul 4 (Wayback)Semgrep 70 on Jul 15 (Wayback)Semgrep 68 on Aug 6 (Wayback)Semgrep 69 on Aug 27 (Wayback)Semgrep 72 on Sep 10 (Live)Snyk 59 on Jun 18 (Wayback)Snyk 54 on Jul 3 (Wayback)Snyk 56 on Jul 16 (Wayback)Snyk 59 on Jul 29 (Wayback)Snyk 57 on Aug 13 (Wayback)Snyk 60 on Aug 25 (Wayback)Snyk 54 on Sep 10 (Live)Corgea 73 on Jun 29 (Wayback)Corgea 64 on Jul 14 (Wayback)Corgea 65 on Jul 29 (Wayback)Corgea 66 on Aug 12 (Wayback)Corgea 67 on Aug 25 (Wayback)Corgea 66 on Sep 8 (Wayback)Corgea 78 on Sep 22 (Live)DryRun Security 70 on Mar 30 (Wayback)DryRun Security 67 on Apr 8 (Wayback)DryRun Security 72 on Jul 6 (Wayback)DryRun Security 72 on Jul 29 (Wayback)DryRun Security 71 on Sep 21 (Wayback)DryRun Security 73 on Sep 22 (Live)Polymorph 50 on Sep 22 (Live)Sep 22

CTA

30Poor

Copy, size, verb, cost-feel — does the primary CTA earn the click?

Corgea
DryRun Security
Semgrep
Snyk

Problems

  • no button or in-product action
  • only CTA is inline mailto text
  • email ask feels high-cost
  • YC badge outstyles the action

Value props

42Poor

Title, subtitle, hero — do they sell the product's true value?

Polymorph’s headline vaguethe age of software abundance has arrived, but it has not arrived for the systems meant to protect it. we're working on security infrastructure for this age. foreach out to founders@usepolymorph.com to partner with us.

Working

  • Strong founder credentials cited
  • YC badge adds credibility
  • Timely framing of AI-era security

Could improve

  • No statement of what the product does
  • No outcome or specificity anywhere
  • Hero gradient demonstrates nothing

Trust

55Fair

Proof that the product is real, competent, and safe to try.

Polymorph
DryRun Security
Semgrep
Trust read
Polymorph"backed by Y combinator" badge beneath the contact line
SemgrepG2 rating badge "4.6 (55 reviews)" on the mobile fold
SnykBanner: "Your AI coding assistant, security-tested. See where it ranks →"
CorgeaNo visible trust signal identified.
DryRun SecurityCustomer logo strip (Zepto, Tines, Gusto, Cloudera, Flex, Dematic) under "AI-Native code security trusted by leading eng

Information hierarchy

58Fair

Does the design help or inhibit what the page is trying to say?

Information hierarchy annotations on the desktop capture1234
  1. Email link CTA — The only conversion action is an underlined mailto inside a sentence, styled identically to the founder bio links beside it.
  2. Mission paragraph block — The entire value prop is body-weight text with no headline, pushed to the right edge outside the natural left-to-right scan path.
  3. Founder bio links — "andrew sy" and "brendon go" carry the same underline weight as the CTA, adding two exits that compete with the one action.
  4. Contact / Legal nav — "Contact" duplicates the email CTA at equal visual weight in the top-right, splitting attention between two routes to the same action.

Mobile web

64Fair

The phone experience as a first-class citizen.

Mobile web annotations on the mobile capture123
  1. Email text link — The only conversion action is a small inline mailto link, not a thumb-friendly button.
  2. Y Combinator pill — Styled like a button but non-actionable, drawing the eye away from the real contact link.
  3. Uncollapsed nav links — Desktop link row ('Contact', 'Legal') kept as-is instead of collapsing to a menu or single CTA.