Wallarm

Inline API and agent security that blocks abuse in real time instead of paging after the request lands.

Proof of life. Raised $55M Series C led by Toba Capital, July 2025

About Wallarm

Wallarm combines API discovery, abuse detection, and a WAF-class inline path so teams can actually drop a malicious call, not just ticket it. The 2025 agentic protection layer watches prompts, jailbreaks, and logic abuse against AI-facing APIs.

Enterprises pick it when they already have a CDN and still need something that understands the application contract.

Investors

Toba CapitalY CombinatorPartech

Work at Wallarm? Link to this listing

Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.

<a href="https://securitystartups.com/companies/wallarm"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>

Related companies

42Crunch

Dublin, Ireland

Founded 2016

OpenAPI-first API security that audits the contract, tests it, then wraps a micro-firewall around the live endpoint.

Released OAS 3.1 support for API Protection in the 42Crunch platform, February 2026

API and runtime

Contrast Security

Los Altos, United States

Series E
$269M raised
Founded 2014

IAST, RASP, and ADR that instrument the running app so exploits are seen in the code path, not the packet.

Published the Software Under Siege 2025 report on application-layer attacks, August 2025

API and runtime

Escape

Paris, France

Series A
$22M+ raised
Founded 2020

AI pentesting for APIs and web apps that proves exploitability, including IDOR and business logic, not just crawler noise.

Raised $18M to expand agentic pentesting for APIs and business logic, March 2026

API and runtime