{"directory":"Security Startups","url":"https://securitystartups.com/stats","asOf":"2026-10-29","scope":"Breakdowns of listed companies only, never market totals.","caveat":"Curated, alive-only, not exhaustive.","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"history":"https://securitystartups.com/api/v1/stats/history","docs":"https://securitystartups.com/for-agents","charts":[{"slug":"companies-by-category","title":"Companies by category, of listed companies","url":"https://securitystartups.com/stats/companies-by-category","csv":"https://securitystartups.com/stats/companies-by-category.csv","image":"https://securitystartups.com/stats/og/companies-by-category.png","n":205,"covered":205,"coverage":"205 of 205 have a category","caveat":"Curated, alive-only, not exhaustive.","method":"Each company counts once, in the one primary category we assign by what it builds.","asOf":"2026-10-29","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"kind":"bars","unit":"companies","bars":[{"key":"ai-security","label":"AI security","value":28},{"key":"offensive-exposure","label":"Offensive and exposure","value":27},{"key":"detection-response","label":"Detection and response","value":25},{"key":"application-security","label":"Application security","value":20},{"key":"cloud-security","label":"Cloud security","value":17},{"key":"identity-access","label":"Identity and access","value":17},{"key":"data-security","label":"Data security","value":12},{"key":"endpoint-browser","label":"Endpoint and browser","value":12},{"key":"secrets-identity","label":"Secrets and non-human identity","value":12},{"key":"supply-chain","label":"Software supply chain","value":12},{"key":"email-collaboration","label":"Email and collaboration","value":11},{"key":"api-runtime","label":"API and runtime","value":8},{"key":"third-party-risk","label":"Third-party risk","value":4}]},{"slug":"funding-stage-mix","title":"Funding stage mix, of listed companies","url":"https://securitystartups.com/stats/funding-stage-mix","csv":"https://securitystartups.com/stats/funding-stage-mix.csv","image":"https://securitystartups.com/stats/og/funding-stage-mix.png","n":205,"covered":191,"coverage":"191 of 205 have a disclosed stage; 14 shown as Undisclosed","caveat":"Curated, alive-only, not exhaustive.","method":"Latest disclosed funding stage per company, as recorded in the catalog. Empty stage is shown as Undisclosed.","asOf":"2026-10-29","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"kind":"bars","unit":"companies","bars":[{"key":"Bootstrapped","label":"Bootstrapped","value":2},{"key":"Seed","label":"Seed","value":28},{"key":"Series A","label":"Series A","value":58},{"key":"Series B","label":"Series B","value":53},{"key":"Series C","label":"Series C","value":24},{"key":"Series D","label":"Series D","value":14},{"key":"Series E","label":"Series E","value":5},{"key":"Series F","label":"Series F","value":3},{"key":"Series G","label":"Series G","value":3},{"key":"Growth","label":"Growth","value":1},{"key":"Undisclosed","label":"Undisclosed","value":14}]},{"slug":"headquarters","title":"Where listed companies are headquartered","url":"https://securitystartups.com/stats/headquarters","csv":"https://securitystartups.com/stats/headquarters.csv","image":"https://securitystartups.com/stats/og/headquarters.png","n":205,"covered":203,"coverage":"203 of 205 have a headquarters country","caveat":"Curated, alive-only, not exhaustive.","method":"Headquarters country as recorded, with \"USA\" and \"United States\" counted as one. Countries outside the top 8 (ties kept together) are grouped as Other.","asOf":"2026-10-29","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"kind":"bars","unit":"companies","bars":[{"key":"United States","label":"United States","value":140},{"key":"Israel","label":"Israel","value":39},{"key":"United Kingdom","label":"United Kingdom","value":8},{"key":"France","label":"France","value":5},{"key":"Ireland","label":"Ireland","value":2},{"key":"Other","label":"Other (9 countries)","value":9}]},{"slug":"founded-by-category","title":"When listed companies were founded, by category","url":"https://securitystartups.com/stats/founded-by-category","csv":"https://securitystartups.com/stats/founded-by-category.csv","image":"https://securitystartups.com/stats/og/founded-by-category.png","n":205,"covered":190,"coverage":"190 of 205 have a founded year; 15 without one are not shown","caveat":"Curated, alive-only, not exhaustive. Only companies still alive are listed, so older cohorts are under-represented: this is not a market trend.","method":"One dot per company at its founded year, one row per primary category, alphabetical. The black tick marks the category median.","asOf":"2026-10-29","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"kind":"strip","domain":[2012,2026],"rows":[{"key":"ai-security","label":"AI security","n":24,"median":2024,"years":[{"year":2017,"count":1},{"year":2018,"count":1},{"year":2021,"count":1},{"year":2022,"count":2},{"year":2023,"count":6},{"year":2024,"count":5},{"year":2025,"count":8}]},{"key":"api-runtime","label":"API and runtime","n":8,"median":2017.5,"years":[{"year":2013,"count":1},{"year":2014,"count":1},{"year":2016,"count":2},{"year":2019,"count":1},{"year":2020,"count":1},{"year":2021,"count":1},{"year":2022,"count":1}]},{"key":"application-security","label":"Application security","n":18,"median":2021,"years":[{"year":2015,"count":1},{"year":2017,"count":1},{"year":2019,"count":2},{"year":2020,"count":2},{"year":2021,"count":4},{"year":2022,"count":2},{"year":2023,"count":3},{"year":2024,"count":2},{"year":2026,"count":1}]},{"key":"cloud-security","label":"Cloud security","n":17,"median":2019,"years":[{"year":2013,"count":1},{"year":2015,"count":1},{"year":2016,"count":2},{"year":2017,"count":2},{"year":2019,"count":3},{"year":2020,"count":2},{"year":2021,"count":1},{"year":2022,"count":3},{"year":2023,"count":1},{"year":2024,"count":1}]},{"key":"data-security","label":"Data security","n":12,"median":2019,"years":[{"year":2016,"count":4},{"year":2018,"count":2},{"year":2020,"count":1},{"year":2021,"count":2},{"year":2022,"count":1},{"year":2023,"count":2}]},{"key":"detection-response","label":"Detection and response","n":22,"median":2023,"years":[{"year":2012,"count":1},{"year":2015,"count":1},{"year":2016,"count":2},{"year":2018,"count":1},{"year":2020,"count":1},{"year":2021,"count":1},{"year":2023,"count":6},{"year":2024,"count":6},{"year":2025,"count":3}]},{"key":"email-collaboration","label":"Email and collaboration","n":11,"median":2018,"years":[{"year":2013,"count":1},{"year":2015,"count":1},{"year":2017,"count":2},{"year":2018,"count":2},{"year":2019,"count":1},{"year":2020,"count":3},{"year":2025,"count":1}]},{"key":"endpoint-browser","label":"Endpoint and browser","n":12,"median":2018,"years":[{"year":2012,"count":1},{"year":2014,"count":1},{"year":2016,"count":2},{"year":2017,"count":1},{"year":2018,"count":3},{"year":2019,"count":1},{"year":2020,"count":1},{"year":2022,"count":1},{"year":2025,"count":1}]},{"key":"identity-access","label":"Identity and access","n":17,"median":2020,"years":[{"year":2012,"count":1},{"year":2013,"count":1},{"year":2015,"count":1},{"year":2016,"count":1},{"year":2017,"count":1},{"year":2019,"count":2},{"year":2020,"count":4},{"year":2021,"count":1},{"year":2022,"count":3},{"year":2024,"count":1},{"year":2025,"count":1}]},{"key":"offensive-exposure","label":"Offensive and exposure","n":21,"median":2020,"years":[{"year":2012,"count":1},{"year":2013,"count":3},{"year":2015,"count":1},{"year":2016,"count":2},{"year":2017,"count":1},{"year":2019,"count":1},{"year":2020,"count":2},{"year":2021,"count":1},{"year":2022,"count":1},{"year":2023,"count":1},{"year":2024,"count":5},{"year":2025,"count":2}]},{"key":"secrets-identity","label":"Secrets and non-human identity","n":12,"median":2021,"years":[{"year":2016,"count":1},{"year":2017,"count":2},{"year":2018,"count":2},{"year":2021,"count":2},{"year":2022,"count":2},{"year":2023,"count":2},{"year":2024,"count":1}]},{"key":"supply-chain","label":"Software supply chain","n":12,"median":2021,"years":[{"year":2016,"count":2},{"year":2017,"count":1},{"year":2020,"count":2},{"year":2021,"count":3},{"year":2022,"count":4}]},{"key":"third-party-risk","label":"Third-party risk","n":4,"median":2016,"years":[{"year":2012,"count":1},{"year":2016,"count":2},{"year":2018,"count":1}]}]},{"slug":"disclosed-funding-by-category","title":"Minimum disclosed cumulative funding of listed companies, by category","url":"https://securitystartups.com/stats/disclosed-funding-by-category","csv":"https://securitystartups.com/stats/disclosed-funding-by-category.csv","image":"https://securitystartups.com/stats/og/disclosed-funding-by-category.png","n":205,"covered":177,"coverage":"177 of 205 (86%) have a disclosed total; 8 are lower bounds counted at their floor","caveat":"Curated, alive-only, not exhaustive.","method":"Sum of each company's latest disclosed total funding, in USD. Values like \"$400M+\" count at their stated floor, so every bar is a minimum. Next to each bar: companies with a figure of companies listed, and lower bounds.","asOf":"2026-10-29","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"kind":"bars","unit":"USD","bars":[{"key":"detection-response","label":"Detection and response","value":3436000000,"note":"21 of 25"},{"key":"data-security","label":"Data security","value":3427700000,"note":"12 of 12, 3 floors"},{"key":"cloud-security","label":"Cloud security","value":2968300000,"note":"17 of 17"},{"key":"offensive-exposure","label":"Offensive and exposure","value":2582500000,"note":"22 of 27, 1 floor"},{"key":"identity-access","label":"Identity and access","value":2096500000,"note":"16 of 17, 1 floor"},{"key":"email-collaboration","label":"Email and collaboration","value":2094300000,"note":"11 of 11, 1 floor"},{"key":"ai-security","label":"AI security","value":1679500000,"note":"25 of 28"},{"key":"supply-chain","label":"Software supply chain","value":1283000000,"note":"10 of 12"},{"key":"application-security","label":"Application security","value":1143600000,"note":"15 of 20"},{"key":"endpoint-browser","label":"Endpoint and browser","value":1114400000,"note":"10 of 12"},{"key":"api-runtime","label":"API and runtime","value":834300000,"note":"6 of 8, 1 floor"},{"key":"secrets-identity","label":"Secrets and non-human identity","value":522500000,"note":"12 of 12, 1 floor"},{"key":"third-party-risk","label":"Third-party risk","value":0,"note":"0 of 4"}]}]}