Endor Labs

Reachability-first AppSec: SAST and SCA that only page you when the vulnerable function is actually called.

Proof of life. Raised $93M Series B led by DFJ Growth, April 2025

Endor built call graphs across open source and first-party code so a CVE in an unused helper does not become a sprint. The platform added AI SAST for logic flaws, a package firewall that blocks malware at install, and governance for Cursor, Claude Code, and other coding agents. Customers include OpenAI, Rubrik, and Snowflake.

Category: Application security
Headquarters: Palo Alto, USA
Country: USA
Founded: 2021
Funding stage: Series B
Total funding: $163M
Website: https://www.endorlabs.com

Investors

DFJ GrowthLightspeedCoatueSalesforce Ventures