Escape
AI pentesting for APIs and web apps that proves exploitability, including IDOR and business logic, not just crawler noise.
Proof of life. Raised $18M to expand agentic pentesting for APIs and business logic, March 2026
About Escape
Escape inventories the API attack surface and then tries to break it with agentic testing that follows business flows, not only status-code fuzzing.
Findings are meant to be reproducible for engineers and auditors, which is the gap between a DAST dump and a pentest. The 2026 round funds that agent loop so multi-tenant IDOR and authz bugs get the same automation as XSS.
Investors
IRISY CombinatorKima Ventures
Work at Escape? Link to this listing
Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.
<a href="https://securitystartups.com/companies/escape"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>