Company directory

One platform that scans code, cloud, and runtime, then triages and auto-fixes what is actually reachable.

Raised $60M Series B at a $1B valuation, January 2026

SaaS vault for secrets, keys, and certificates that never stores the master key in the customer's cloud.

Took a strategic investment from Deutsche Bank Ventures, October 2024

Open-source Syft/Grype plus enterprise SBOM management for containers and the pipeline that builds them.

Published the 2025 Anchore supply-chain blog series, December 2025

Code-to-runtime ASPM graph that ranks material application risk, not every scanner finding.

Joined Chainguard's Athena coalition and made AutoFix free for OSS maintainers, August 2026

Just-in-time cloud access that kills standing privileges for humans, machines, and agents.

Raised $34M Series B led by USVP, November 2025

Scanner-agnostic ASPM that correlates hundreds of tools into the findings that actually matter.

Raised $16M strategic round, taking total funding to $81M, March 2026

Browser-native SSE that gives zero-trust access without a VPN, VDI, or backhauled proxy.

Raised $26M Series B led by Two Bear Capital, October 2025

Semantic DSPM that labels unstructured data by meaning, then remediates oversharing on-prem and in the cloud.

Raised $45M Series B led by Top Tier Capital and HarbourVest, October 2024

AI-native identity platform that folds IGA, IAM, and PAM into one access control plane.

Raised $79M Series B led by Greycroft, October 2025

ASPM with its own SAST, SCA, and pipeline scanners, plus a graph for AI-written code.

Named a Leader in Gartner's first Magic Quadrant for Software Supply Chain Security, June 2026

Security data pipeline that collects, trims, enriches, and routes telemetry before it reaches the SIEM or data lake.

Raised a $40M Series B led by Insight Partners, July 2026

SPIFFE-based non-human IAM that replaces static secrets with short-lived workload identities.

Raised $30.75M Series B led by XYZ Ventures, October 2025

Hacker-powered surface monitoring for domains, apps, and APIs, now with an MCP server for AI workflows.

Launched a Detectify MCP server for AI security workflows, 2026

SaaS data security that watches sharing in Google Workspace, Slack, and Box, then revokes it automatically.

Launched Dot, an AI SaaS data security assistant, June 2025

Software-only AI SOC analyst that investigates alerts without a managed service attached.

Raised $37M Series B led by Theory Ventures, July 2025

Reachability-first AppSec: SAST and SCA that only page you when the vulnerable function is actually called.

Raised $93M Series B led by DFJ Growth, April 2025

Real-time knowledge graph plus Exabot agents that investigate and stop attacks as they happen.

Raised $125M Series B at a $725M valuation, May 2026

Product and firmware SBOM platform for the devices you buy and the binaries you did not compile.

Won Cybersecurity Stars award for firmware security leadership, June 2026

Open-source osquery control plane for Mac, Windows, Linux, and phones, cloud or self-hosted.

Raised $27M Series B led by Ten Eleven Ventures, June 2025

AI agents that inventory everything running on employee devices, judge it against company policy, and remove or block what fails.

Emerged from stealth with $180M across seed, Series A, and a Series B led by Sequoia, Cyberstarts, Greenoaks, and Redpoint, July 2026

Consumer browser protection that treats everyday users like they deserve an enterprise SOC.

Raised $80M Series B led by ION Crossover Partners, November 2025

Model scanner, attack simulation, and runtime firewall for agentic, generative, and predictive AI.

Raised a $100M Series B led by Delta-v Capital, September 2026

AI-native ASPM that discovers the software factory, then VibeGuard blocks bad AI code in the IDE.

Shipped VibeGuard to secure AI-generated code at the developer endpoint, 2026

Autonomous IGA that reviews, provisions, and rightsizes access for people, NHIs, and AI agents.

Launched Identity Agent Force to govern human, NHI, and AI access, June 2026

Cloud, SaaS, identity, and AI detection and response with a forensic lake built for attacks that never touch an endpoint agent.

Raised $30M Series B led by SYN Ventures, January 2025

AI-native DLP for SaaS, endpoints, browsers, and GenAI prompts that learns from investigations.

Launched Nyx, an autonomous DLP copilot, July 2025

AI-SPM, agent access control, red team, and AI-DR in one control plane for homegrown and SaaS agents.

Raised $100M Series B led by Evolution Equity Partners, July 2025

Application detection and response that watches live code execution and blocks exploits as they run.

Raised $60M, crossing $140M in total funding, August 2026

Control plane for enterprise AI agents: finds sanctioned and shadow agents, watches what they try to do, and blocks harmful actions before they run.

Raised a $113M Series B led by Bessemer Venture Partners, July 2026

Policy-as-code access control plane for employees, service accounts, and AI agents.

Raised $23M and hired a new product bench, June 2026

Prompt-to-runtime AppSec that tries to show only the 5 percent of findings that can actually breach you.

Raised $60M Series B led by DTCP, taking total funding to $94M, May 2025

Fine-grained data access and AI governance from the team that built Apache Ranger.

Shipped major PAIG updates aligned to the NIST AI RMF, February 2025

Browser-native ITDR that stops phishing, token theft, and account takeover where the session lives.

Raised $30M Series B led by Redpoint Ventures, April 2025

SaaS and agent security that maps every app, identity, and AI connector, then remediates the risky ones.

Raised $30M Series B, total funding $85M, February 2026

Email authentication and brand protection that gets domains to DMARC enforcement without a DNS circus.

Won a 2025 Cybersecurity Excellence Award for OnDMARC, March 2025

Data-flow DSPM that shows how customer data actually moves through products, vendors, and AI features.

Raised $32.1M Series B led by Thomvest Ventures, October 2024

Supplier security as a shared network: each supplier keeps one security profile that every connected customer can see, instead of answering questionnaires one by one.

Raised a GBP 24M Series B led by Axiom Equity, July 2026

Cloud-native DSPM that discovers, classifies, and readies enterprise data for AI without agents.

Closed $50M Series B, bringing total funding over $100M, April 2025

Developer-first API DAST that runs in CI so AI-generated endpoints get tested before they ship.

Raised $12M strategic round from Sapphire and Costanoa, total $47.3M, May 2025

Cloud detection and response on a live CloudTwin of every workload, identity, and network path.

Raised $30M Series B, October 2024

Runtime CNAPP that watches cloud and AI agents as they act, then turns the finding into a guardrail.

Raised $75M Series B, November 2025

AI-native MDR that triages every alert in under a minute, with humans on the loop.

Raised $250M Series B led by Crosspoint, March 2026

Calico-powered Kubernetes network security and microsegmentation, plus Lynx for governing AI agent calls on the cluster.

Shipped the Winter 2026 Calico Cloud release with an AI assistant and multi-cluster traffic observability, March 2026

Verified secret scanning that proves a leaked key still works, then helps you kill it.

Raised $25M Series B led by Intel Capital and a16z, November 2025

Runtime-first CNAPP that ranks cloud risk from what is actually running, not from a static CVE dump.

Raised $250M Series B at a $1.5B valuation, January 2026

Vulnerability remediation that actually patches, not another scanner that files tickets.

Named in Forrester's Q1 2026 Proactive Security Platforms Landscape

Observe, control, and protect employees, models, apps, and agents from one AI security plane.

Raised $58M led by Sound Ventures, January 2026

Hybrid attack-path graph that shows how an identity, cloud, or on-prem foothold becomes a breach.

Named a Challenger in the first Gartner Magic Quadrant for Exposure Assessment Platforms, 2025