{"directory":"Security Startups","url":"https://securitystartups.com/stats","points":1,"note":"history starts 2026-10-26; one snapshot is one point, nothing is interpolated","cadence":"One snapshot per quarter, after the quarterly catalog update.","caveat":"Curated, alive-only, not exhaustive.","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Security Startups (securitystartups.com)"},"current":"https://securitystartups.com/api/v1/stats","docs":"https://securitystartups.com/for-agents","snapshots":[{"id":"2026-q4","as_of":"2026-10-26","taken_at":"2026-10-27","catalog_commit":"479ff5f46c54e98c3e9671a618f49e87bed7854c","companies":173}],"series":{"companies-by-category":[{"snapshot":"2026-q4","n":173,"covered":173,"asOf":"2026-10-26","kind":"bars","unit":"companies","bars":[{"key":"ai-security","label":"AI security","value":21},{"key":"detection-response","label":"Detection and response","value":18},{"key":"cloud-security","label":"Cloud security","value":17},{"key":"identity-access","label":"Identity and access","value":17},{"key":"application-security","label":"Application security","value":16},{"key":"offensive-exposure","label":"Offensive and exposure","value":14},{"key":"data-security","label":"Data security","value":12},{"key":"secrets-identity","label":"Secrets and non-human identity","value":12},{"key":"supply-chain","label":"Software supply chain","value":12},{"key":"email-collaboration","label":"Email and collaboration","value":11},{"key":"endpoint-browser","label":"Endpoint and browser","value":11},{"key":"api-runtime","label":"API and runtime","value":8},{"key":"third-party-risk","label":"Third-party risk","value":4}]}],"funding-stage-mix":[{"snapshot":"2026-q4","n":173,"covered":165,"asOf":"2026-10-26","kind":"bars","unit":"companies","bars":[{"key":"Bootstrapped","label":"Bootstrapped","value":1},{"key":"Seed","label":"Seed","value":21},{"key":"Series A","label":"Series A","value":46},{"key":"Series B","label":"Series B","value":48},{"key":"Series C","label":"Series C","value":23},{"key":"Series D","label":"Series D","value":14},{"key":"Series E","label":"Series E","value":5},{"key":"Series F","label":"Series F","value":3},{"key":"Series G","label":"Series G","value":3},{"key":"Growth","label":"Growth","value":1},{"key":"Undisclosed","label":"Undisclosed","value":8}]}],"headquarters":[{"snapshot":"2026-q4","n":173,"covered":173,"asOf":"2026-10-26","kind":"bars","unit":"companies","bars":[{"key":"United States","label":"United States","value":123},{"key":"Israel","label":"Israel","value":29},{"key":"France","label":"France","value":5},{"key":"United Kingdom","label":"United Kingdom","value":5},{"key":"Ireland","label":"Ireland","value":2},{"key":"Other","label":"Other (9 countries)","value":9}]}],"founded-by-category":[{"snapshot":"2026-q4","n":173,"covered":169,"asOf":"2026-10-26","kind":"strip","domain":[2012,2026],"rows":[{"key":"ai-security","label":"AI security","n":18,"median":2023,"years":[{"year":2017,"count":1},{"year":2018,"count":1},{"year":2021,"count":1},{"year":2022,"count":2},{"year":2023,"count":5},{"year":2024,"count":4},{"year":2025,"count":4}]},{"key":"api-runtime","label":"API and runtime","n":8,"median":2017.5,"years":[{"year":2013,"count":1},{"year":2014,"count":1},{"year":2016,"count":2},{"year":2019,"count":1},{"year":2020,"count":1},{"year":2021,"count":1},{"year":2022,"count":1}]},{"key":"application-security","label":"Application security","n":16,"median":2021,"years":[{"year":2015,"count":1},{"year":2017,"count":1},{"year":2019,"count":2},{"year":2020,"count":2},{"year":2021,"count":4},{"year":2022,"count":2},{"year":2023,"count":2},{"year":2024,"count":1},{"year":2026,"count":1}]},{"key":"cloud-security","label":"Cloud security","n":17,"median":2019,"years":[{"year":2013,"count":1},{"year":2015,"count":1},{"year":2016,"count":2},{"year":2017,"count":2},{"year":2019,"count":3},{"year":2020,"count":2},{"year":2021,"count":1},{"year":2022,"count":3},{"year":2023,"count":1},{"year":2024,"count":1}]},{"key":"data-security","label":"Data security","n":12,"median":2019,"years":[{"year":2016,"count":4},{"year":2018,"count":2},{"year":2020,"count":1},{"year":2021,"count":2},{"year":2022,"count":1},{"year":2023,"count":2}]},{"key":"detection-response","label":"Detection and response","n":18,"median":2023,"years":[{"year":2012,"count":1},{"year":2015,"count":1},{"year":2016,"count":2},{"year":2018,"count":1},{"year":2020,"count":1},{"year":2023,"count":6},{"year":2024,"count":4},{"year":2025,"count":2}]},{"key":"email-collaboration","label":"Email and collaboration","n":11,"median":2018,"years":[{"year":2013,"count":1},{"year":2015,"count":1},{"year":2017,"count":2},{"year":2018,"count":2},{"year":2019,"count":1},{"year":2020,"count":3},{"year":2025,"count":1}]},{"key":"endpoint-browser","label":"Endpoint and browser","n":11,"median":2018,"years":[{"year":2012,"count":1},{"year":2014,"count":1},{"year":2016,"count":2},{"year":2017,"count":1},{"year":2018,"count":3},{"year":2020,"count":1},{"year":2022,"count":1},{"year":2025,"count":1}]},{"key":"identity-access","label":"Identity and access","n":17,"median":2020,"years":[{"year":2012,"count":1},{"year":2013,"count":1},{"year":2015,"count":1},{"year":2016,"count":1},{"year":2017,"count":1},{"year":2019,"count":2},{"year":2020,"count":4},{"year":2021,"count":1},{"year":2022,"count":3},{"year":2024,"count":1},{"year":2025,"count":1}]},{"key":"offensive-exposure","label":"Offensive and exposure","n":13,"median":2016,"years":[{"year":2012,"count":1},{"year":2013,"count":3},{"year":2015,"count":1},{"year":2016,"count":2},{"year":2017,"count":1},{"year":2019,"count":1},{"year":2020,"count":1},{"year":2021,"count":1},{"year":2022,"count":1},{"year":2024,"count":1}]},{"key":"secrets-identity","label":"Secrets and non-human identity","n":12,"median":2021,"years":[{"year":2016,"count":1},{"year":2017,"count":2},{"year":2018,"count":2},{"year":2021,"count":2},{"year":2022,"count":2},{"year":2023,"count":2},{"year":2024,"count":1}]},{"key":"supply-chain","label":"Software supply chain","n":12,"median":2021,"years":[{"year":2016,"count":2},{"year":2017,"count":1},{"year":2020,"count":2},{"year":2021,"count":3},{"year":2022,"count":4}]},{"key":"third-party-risk","label":"Third-party risk","n":4,"median":2016,"years":[{"year":2012,"count":1},{"year":2016,"count":2},{"year":2018,"count":1}]}]}],"disclosed-funding-by-category":[{"snapshot":"2026-q4","n":173,"covered":153,"asOf":"2026-10-26","kind":"bars","unit":"USD","bars":[{"key":"data-security","label":"Data security","value":3427700000,"note":"12 of 12, 3 floors"},{"key":"detection-response","label":"Detection and response","value":3143000000,"note":"17 of 18"},{"key":"cloud-security","label":"Cloud security","value":2968300000,"note":"17 of 17"},{"key":"identity-access","label":"Identity and access","value":2096500000,"note":"16 of 17, 1 floor"},{"key":"email-collaboration","label":"Email and collaboration","value":2094300000,"note":"11 of 11, 1 floor"},{"key":"ai-security","label":"AI security","value":1467000000,"note":"19 of 21"},{"key":"offensive-exposure","label":"Offensive and exposure","value":1450000000,"note":"11 of 14"},{"key":"supply-chain","label":"Software supply chain","value":1283000000,"note":"10 of 12"},{"key":"endpoint-browser","label":"Endpoint and browser","value":1049400000,"note":"9 of 11"},{"key":"application-security","label":"Application security","value":997600000,"note":"13 of 16"},{"key":"api-runtime","label":"API and runtime","value":834300000,"note":"6 of 8, 1 floor"},{"key":"secrets-identity","label":"Secrets and non-human identity","value":522500000,"note":"12 of 12, 1 floor"},{"key":"third-party-risk","label":"Third-party risk","value":0,"note":"0 of 4"}]}]}}