Corgea

AI SAST that hunts broken auth and business-logic bugs, then writes a patch developers can merge.

Proof of life. Raised $2.6M seed led by Shorooq, with Y Combinator participating, November 2024

Corgea traces real request paths instead of matching a CVE list, which is how it claims broken authentication and missing authz checks that rule engines skip. Findings come with a generated fix and a confidence score so teams are not drowning in LLM hallucinations. The YC-backed scanner also covers SCA, secrets, IaC, and containers, but the core is first-party logic.

Category: Application security
Headquarters: San Francisco, USA
Country: USA
Founded: 2023
Funding stage: Seed
Total funding: $2.6M
Website: https://corgea.com

Investors

ShorooqY Combinator