Runlayer showed Rippling its source code. A Rippling insider called the result ‘a 1 to 1 copy.’

For nearly a year, the startup Runlayer let Rippling trial its AI-agent security product, handing over source code under an NDA. When the deal collapsed over price, Runlayer says, a Rippling insider warned it the company had quietly built “almost a 1 to 1 copy.” Now Runlayer is suing, in a case that is a warning to anyone selling AI infrastructure to a customer big enough to build it themselves.


Runlayer showed Rippling its source code. A Rippling insider called the result ‘a 1 to 1 copy.’ Image by: Canva

Runlayer spent nearly a year showing Rippling how its product worked, down to the source code. It now says Rippling used that access to build a near-copy.

The New York AI-security startup sued Rippling on Tuesday in a Manhattan federal court, the New York Post first reported. The complaint alleges trade-secret theft, unfair competition and breach of contract. Runlayer makes a secure gateway for the Model Context Protocol. That is the standard that lets AI agents reach into a company’s data and tools.

Rippling, the workforce-software firm valued at $16.8bn, had spent months as a prospective customer. The dispute lands amid a wave of AI trade-secret fights, from Apple’s suit against OpenAI to the OpenAI and xAI battle.

The tip-off

The two signed a mutual non-disclosure agreement, plus a trial contract barring Rippling from copying the product or building derivatives. Those are standard terms in enterprise software. Over nearly a year of close collaboration, Runlayer handed Rippling its roadmap, source code and gateway architecture.

Talks then broke down over price, and Runlayer cut off access on 12 June.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol' founder Boris, and some questionable AI art. It's free, every week, in your inbox. Sign up now!

That same day, the suit says, a Rippling insider texted Runlayer’s chief executive Andrew Berman with a warning. “There’s been a project internally to build essentially a clone” of Runlayer, the message read, “almost a 1 to 1 copy.”The insider added that it “smells like a Parker thing,” a reference to Rippling’s chief executive Parker Conrad.

By 1 July, Runlayer says, it had a screenshot of Rippling’s competing gateway. It had also spotted Rippling job ads matching the secrets it had disclosed.

What Rippling says

Rippling confirmed it is launching its own MCP gateway, but flatly denied taking anything. “Runlayer’s panicked effort to avoid competition by fabricating claims is not an effective way to deal with its business failures,” a spokesperson told TechCrunch.

The company said it was building “a superior product… using only our proprietary information,” and had “every reason to win in this market.” Runlayer says it will “vigorously defend” its work, according to its statement. It is represented by Sullivan & Cromwell and is seeking an injunction to block the rival product.

The trap for AI infrastructure

Whatever a court makes of it, the case is a warning for startups selling AI plumbing to big customers. Enterprise deals hinge on long, hands-on trials, and a trial is exactly when a buyer sees everything. Runlayer is barely a year old, has around five staff, and $42m from Khosla Ventures and Felicis.

Rippling has the engineering muscle to build in-house, and the MCP gateway market is already crowded. The irony is sharp, too. Rippling spent last year as the victim of a corporate-espionage scandal, when a rival planted a spy inside it. Now it is the one accused of taking what it saw.

Get the TNW newsletter

Get the most important tech news in your inbox each week.