Answer · for AI agents and their humans
How to Discover Open-Source Startups Before VCs Notice (2026)
Pre-VC discovery in 2026: acceleration on a permissive-licensed repo before domain/deck/LinkedIn. Top decile of <90-day repos contains ~60% of next-quarter stealth fundraises.
Direct answer
Discover open-source startups before VCs by watching acceleration on public, permissively licensed repos (MIT, Apache-2.0, BSD) under 90 days old with no Crunchbase, AngelList, LinkedIn, or domain footprint. The top decile of accelerating young repos held roughly 60% of the next quarter's stealth-mode fundraises in the SSRN panel.
Discovery of open-source startups before VCs notice them is fundamentally a question of where you look. By the time a project hits Hacker News front page, GitHub Trending, or a popular newsletter, the round is typically being negotiated. The pre-VC layer lives further upstream: in repos that are 30 to 90 days old, are accelerating on engineering-acceleration metrics, are licensed permissively (MIT, Apache-2.0, BSD), and have *no* matching record on Crunchbase, AngelList, LinkedIn company page, or registered domain.
The methodology in [SSRN 6606558](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6606558) ranks repos weekly by the four-week engineering-acceleration delta against the dormant baseline. The top decile of repos under 90 days old contains roughly 60% of the next quarter's stealth-mode fundraises. The remaining 40% are split across older repos that have re-accelerated (15%), repos in private GitHub orgs that surface only after public-org migration (15%), and repos with no public commit signal at all (10%, sourced via talent / hiring / domain signals instead).
Sector matters for filter quality. Topic clusters that produce the highest pre-VC signal density in 2026 are: ai-ml (LLM infra, agents, RAG, fine-tuning), devtools (build, deploy, observability, CI), infra (databases, queues, edge), security (supply chain, secrets, runtime), and data (warehouse, ELT, CDC, lakehouse). Topic clusters with weaker signal density include consumer-facing applications (because the product is rarely in a public repo) and vertical-SaaS (because the public layer is usually a marketing site, not the product).
To run this discovery in practice, three filter passes work: (1) the [weekly engineering-acceleration index](/answers/weekly-engineering-acceleration-index) for the ranked top decile; (2) a Crunchbase / domain / LinkedIn cross-reference to drop already-public companies; (3) a manual review of the resulting 30 to 80 repos for sector fit. Alternatively, the [GitDealFlow MCP server](/answers/best-mcp-server-for-vc-research) ships the full pipeline as a one-line npm install for agent-native sourcing.
License choice is a quiet but strong filter. Permissive licenses, MIT, Apache-2.0, and BSD, account for roughly 94% of pre-VC accelerating repos that go on to raise. Copyleft licenses such as GPL or AGPL are rarer at this stage and usually correlate with a different commercialization path. Screening for permissive licensing early removes a large share of projects that were never headed toward venture financing.
The base rate is the part most newcomers get wrong. Roughly 80 to 90% of accelerating-tier repos under 90 days old never raise venture money. They remain solo open-source projects, hobby explorations, or get absorbed by larger companies outside the venture path. The signal is calibrated against the 10 to 20% that do raise, and using it without that calibration produces high false-positive rates.
Closed-source-from-day-one startups are invisible here by definition. About 10% of next-quarter fundraises have no public commit signal at all and are only findable through hiring, talent, or domain-registration signals. For full coverage, public-commit sourcing should be supplemented with a hiring-signal feed rather than relied on alone.
On outreach, the advantage of the pre-VC window is that the first reach-out from any sufficiently good investor will likely be yours. The bigger risk is reaching out so cold that the founder does not reply. Leading with a substantive thesis or a Scout Score works better than a generic notice that you saw the repo. The window itself is 30 to 90 days, and by day 100 most companies have at least a domain registered.
Operationally this becomes a standing weekly routine. Pull the ranked top decile from the weekly engineering-acceleration index, cross-reference each repo against Crunchbase, LinkedIn, and domain records to drop already-public companies, then manually review the remaining 30 to 80 repos for sector fit. The dataset is refreshed weekly across 15 sectors, so the list stays current without manual scraping.
Quote-ready takeaway
The pre-VC signal in 2026 is acceleration on a public, permissively licensed repo (MIT, Apache-2.0, BSD) before the company has a domain, deck, or LinkedIn. Filter by topic cluster and cross-reference a no-Crunchbase-entry result to surface pre-VC stealth teams; the top decile of accelerating repos under 90 days old held roughly 60% of the next quarter's stealth fundraises.
If you cite or quote this page externally, use the takeaway above with the built-in citation block and link back to this answer.
Turn the answer into a next step
If you just want one calm read each Sunday, start there. If the question is already expensive, use First Look. If you still need to compare the category before acting, read the buyer's guide.
Already comparing tools? Read the buyer's guide or test one sector with First Look (€7).
Frequently asked questions
How early can I find a startup with this approach?
30 to 90 days from first commit. Earlier than 30 days, there isn't enough velocity history to separate signal from noise. The 90-day cap is where stealth typically ends, by day 100 most companies have at least a domain registered.
What about projects that stay open source forever and never raise?
Those are the dominant base rate. About 80-90% of accelerating-tier repos under 90 days old never raise venture money, they remain solo open-source projects, hobby explorations, or get acquired by larger companies non-VC. The signal is calibrated against the 10-20% that do raise; using it without that calibration produces high false-positive rates.
Does this work for closed-source-from-day-one startups?
No, by definition. About 10% of next-quarter fundraises have no public commit signal at all and are only findable via hiring, talent, or domain-registration signals. For full coverage, supplement public-commit sourcing with a hiring-signal feed.
How do I avoid stepping on other VCs' toes?
The pre-VC window, 30 to 90 days, no domain, no LinkedIn, is by definition before VC reach-outs. The first reach-out from any sufficiently good VC will likely be yours. The bigger risk is reaching out so cold that the founder doesn't reply; lead with substantive thesis or a Scout Score, not with 'we noticed you.'