# Security Startups: full catalog
# 148 companies across 12 categories
# Catalog data as of: 2026-08-23
# Machine index: https://securitystartups.com/llms.txt
# Full JSON: https://securitystartups.com/api/startups.json

## 42Crunch
OpenAPI-first API security that audits the contract, tests it, then wraps a micro-firewall around the live endpoint.
- Category: API and runtime
- HQ: Dublin, Ireland
- Founded: 2016
- Signal: Released OAS 3.1 support for API Protection in the 42Crunch platform, February 2026
- URL: https://42crunch.com
- Details: https://securitystartups.com/companies/42crunch

## 7AI
Swarming AI agents that take over the investigation work human SOCs cannot staff.
- Category: Detection and response
- HQ: Boston, USA
- Founded: 2024
- Funding stage: Series A
- Total funding: $166M
- Investors: Index Ventures, Greylock, CRV, Spark Capital
- Signal: Raised $130M Series A led by Index Ventures, December 2025
- URL: https://7ai.com
- Details: https://securitystartups.com/companies/7ai

## Abnormal AI
API-native email and SaaS defense that baselines human behavior to catch BEC and account takeover.
- Category: Email and collaboration
- HQ: San Francisco, United States
- Founded: 2018
- Funding stage: Series D
- Total funding: $546M
- Investors: Wellington Management, Greylock, Insight Partners, Menlo Ventures
- Signal: Raised $250M Series D at a $5.1B valuation, August 2024
- URL: https://abnormal.ai
- Details: https://securitystartups.com/companies/abnormal-ai

## Action1
Cloud-native patch management that remediates endpoints without a VPN or on-prem console.
- Category: Endpoint and browser
- HQ: Houston, USA
- Founded: 2016
- Funding stage: Bootstrapped
- Signal: H1 2026 ARR from six-figure deals grew 275% year over year
- URL: https://www.action1.com
- Details: https://securitystartups.com/companies/action1

## Aembit
Workload IAM that issues short-lived, secretless credentials for services, scripts, and AI agents.
- Category: Secrets and non-human identity
- HQ: Silver Spring, United States
- Founded: 2021
- Funding stage: Series A
- Total funding: $45M
- Investors: Acrew Capital, Ballistic Ventures, Ten Eleven, CrowdStrike Falcon Fund
- Signal: Raised $25M Series A led by Acrew Capital, September 2024
- URL: https://aembit.io
- Details: https://securitystartups.com/companies/aembit

## Aevral
GitHub App that scans an owned default-branch SHA for authz, IDOR, and business logic. By ISMS Copilot.
- Category: Application security
- HQ: France
- Founded: 2026
- Funding stage: Seed
- Signal: Product brand Aevral and aevral.com purchased 2026-08-23, launch imminent
- URL: https://aevral.com
- Details: https://securitystartups.com/companies/aevral

## Aikido Security
One platform that scans code, cloud, and runtime, then triages and auto-fixes what is actually reachable.
- Category: Application security
- HQ: Ghent, Belgium
- Founded: 2022
- Funding stage: Series B
- Total funding: $84M
- Investors: DST Global, PSG Equity, Singular, Notion Capital
- Signal: Raised $60M Series B at a $1B valuation, January 2026
- URL: https://www.aikido.dev
- Details: https://securitystartups.com/companies/aikido-security

## Akeyless
SaaS vault for secrets, keys, and certificates that never stores the master key in the customer's cloud.
- Category: Secrets and non-human identity
- HQ: Ramat Gan, Israel
- Founded: 2018
- Funding stage: Series B
- Total funding: $79M
- Investors: Deutsche Bank Ventures, Team8, NGP Capital
- Signal: Took a strategic investment from Deutsche Bank Ventures, October 2024
- URL: https://www.akeyless.io
- Details: https://securitystartups.com/companies/akeyless

## Anchore
Open-source Syft/Grype plus enterprise SBOM management for containers and the pipeline that builds them.
- Category: Software supply chain
- HQ: Santa Barbara, USA
- Founded: 2016
- Funding stage: Series B
- Signal: Published the 2025 Anchore supply-chain blog series, December 2025
- URL: https://anchore.com
- Details: https://securitystartups.com/companies/anchore

## Apiiro
Code-to-runtime ASPM graph that ranks material application risk, not every scanner finding.
- Category: Application security
- HQ: New York, USA
- Founded: 2019
- Funding stage: Series B
- Total funding: $135M
- Investors: General Catalyst, Greylock, Kleiner Perkins
- Signal: Joined Chainguard's Athena coalition and made AutoFix free for OSS maintainers, August 2026
- URL: https://apiiro.com
- Details: https://securitystartups.com/companies/apiiro

## Apono
Just-in-time cloud access that kills standing privileges for humans, machines, and agents.
- Category: Identity and access
- HQ: Tel Aviv, Israel
- Founded: 2022
- Funding stage: Series B
- Total funding: $54.5M
- Investors: USVP, Swisscom Ventures, Vertex Ventures
- Signal: Raised $34M Series B led by USVP, November 2025
- URL: https://www.apono.io
- Details: https://securitystartups.com/companies/apono

## AppOmni
SaaS security posture for Salesforce, ServiceNow, Microsoft 365, and the agents now living inside them.
- Category: Email and collaboration
- HQ: San Mateo, United States
- Founded: 2018
- Funding stage: Series C
- Total funding: $123M
- Investors: Thoma Bravo, Scale Venture Partners, ServiceNow
- Signal: Reported 43% year-over-year revenue growth and five of the top 10 Fortune 500 as customers, February 2025
- URL: https://appomni.com
- Details: https://securitystartups.com/companies/appomni

## Aqua Security
Code-to-runtime CNAPP that ranks CVEs by live workload behavior and can stop an exploit without waiting for a patch.
- Category: Cloud security
- HQ: Burlington, United States
- Founded: 2015
- Funding stage: Series E
- Total funding: $265M
- Investors: Insight Partners, Lightspeed Venture Partners, Evolution Equity Partners, ION Crossover Partners
- Signal: Raised $60M at a $1B-plus valuation, January 2024
- URL: https://www.aquasec.com
- Details: https://securitystartups.com/companies/aqua-security

## Arctic Wolf
Concierge MDR on the Aurora platform, now with its own endpoint prevention.
- Category: Detection and response
- HQ: Eden Prairie, USA
- Founded: 2012
- Funding stage: Series F
- Total funding: $900M
- Investors: Lightspeed Venture Partners, Viking Global Investors, DTCP
- Signal: Launched Aurora Endpoint Security and acquired Cylance from BlackBerry in 2025
- URL: https://arcticwolf.com
- Details: https://securitystartups.com/companies/arctic-wolf

## ARMO
Kubernetes-rooted CNAPP and CADR, built on CNCF Kubescape, that uses eBPF runtime to decide which CVEs and misconfigs matter.
- Category: Cloud security
- HQ: Tel Aviv, Israel
- Founded: 2019
- Funding stage: Series A
- Total funding: $35M
- Investors: Tiger Global, Hyperwise Ventures, Pitango
- Signal: Kubescape 4.0 released with runtime threat detection GA, March 2026
- URL: https://www.armosec.io
- Details: https://securitystartups.com/companies/armo

## ArmorCode
Scanner-agnostic ASPM that correlates hundreds of tools into the findings that actually matter.
- Category: Application security
- HQ: Palo Alto, USA
- Founded: 2020
- Funding stage: Series B
- Total funding: $81M
- Investors: Cheyenne Ventures, Ballistic Ventures, Sierra Ventures, NGP Capital
- Signal: Raised $16M strategic round, taking total funding to $81M, March 2026
- URL: https://www.armorcode.com
- Details: https://securitystartups.com/companies/armorcode

## Arnica
Pipelineless SAST, SCA, secrets, and IaC that scans every push and talks to the developer in Slack.
- Category: Application security
- HQ: Alpharetta, USA
- Founded: 2021
- Funding stage: Seed
- Total funding: $7M
- Investors: Joule Ventures, First Rays Venture Partners
- Signal: Shipped PR secrets scanning and secrets-in-HEAD detection, June 2026
- URL: https://www.arnica.io
- Details: https://securitystartups.com/companies/arnica

## Aryon Security
Cloud policy enforcement that blocks misconfigs and over-privilege at deploy time, before CSPM has anything to scan.
- Category: Cloud security
- HQ: Tel Aviv, Israel
- Founded: 2024
- Funding stage: Series A
- Total funding: $38M
- Investors: Brightmind Partners, Skinos Ventures, Datadog Ventures, Blumberg Capital, Viola Ventures
- Signal: Raised $29M Series A, June 2026
- URL: https://www.aryon.security
- Details: https://securitystartups.com/companies/aryon-security

## AttackIQ
Security control validation platform built around MITRE ATT&CK and purple-team testing.
- Category: Offensive and exposure
- HQ: Los Altos, USA
- Founded: 2013
- Funding stage: Series C
- Signal: Named among 2026 CTEM and BAS alternatives in independent vendor comparisons
- URL: https://www.attackiq.com
- Details: https://securitystartups.com/companies/attackiq

## Backslash Security
Reachability-aware AppSec now aimed at AI coding agents, IDEs, MCPs, and the packages they pull.
- Category: Software supply chain
- HQ: Tel Aviv, Israel
- Founded: 2022
- Funding stage: Series A
- Total funding: $27M
- Investors: KOMPAS VC, Maniv, StageOne Ventures
- Signal: Raised $19M Series A led by KOMPAS VC, February 2026
- URL: https://www.backslash.security
- Details: https://securitystartups.com/companies/backslash-security

## Bedrock Data
Metadata lake DSPM that classifies petabyte estates in place, then governs AI access in plain language.
- Category: Data security
- HQ: Menlo Park, United States
- Founded: 2023
- Funding stage: Series A
- Total funding: $35M
- Investors: Greylock, Mangusta Capital, Mantis VC
- Signal: Raised $25M Series A led by Greylock, November 2025
- URL: https://bedrockdata.ai
- Details: https://securitystartups.com/companies/bedrock-data

## BigID
Hybrid DSPM and data intelligence platform for discovery, privacy, and AI risk across cloud and on-prem.
- Category: Data security
- HQ: New York, United States
- Founded: 2016
- Funding stage: Series D
- Total funding: $308M
- Investors: Riverwood Capital, Advent International, Silver Lake Waterman
- Signal: First DSPM vendor to cross $100M in annual revenue, 2024
- URL: https://bigid.com
- Details: https://securitystartups.com/companies/bigid

## Boost Security
Pipeline and package gates that block supply-chain junk before AI-written code swallows it.
- Category: Software supply chain
- HQ: Montreal, Canada
- Founded: 2020
- Funding stage: Seed
- Total funding: $16M
- Investors: White Star Capital, Sorenson Capital, Amiral Ventures
- Signal: Raised $4M and acquired SecureIQx and Korbit.ai, May 2026
- URL: https://boostsecurity.io
- Details: https://securitystartups.com/companies/boost-security

## Censys
Internet-wide map of exposed infrastructure used for ASM, threat hunting, and exposure management.
- Category: Offensive and exposure
- HQ: Ann Arbor, USA
- Founded: 2017
- Funding stage: Series D
- Total funding: $198M
- Investors: Morgan Stanley Expansion Capital, Greylock, GV, Intel Capital
- Signal: Raised $40M Series D plus $30M debt led by Morgan Stanley Expansion Capital, March 2026
- URL: https://censys.com
- Details: https://securitystartups.com/companies/censys

## Chainguard
Zero-to-low CVE container images and language libraries rebuilt from verified source.
- Category: Software supply chain
- HQ: Kirkland, USA
- Founded: 2021
- Funding stage: Series D
- Total funding: $892M
- Investors: Kleiner Perkins, IVP, Sequoia, Lightspeed
- Signal: Closed $280M growth round from General Catalyst at a $3.5B valuation, October 2025
- URL: https://www.chainguard.dev
- Details: https://securitystartups.com/companies/chainguard

## Cloudsmith
Universal artifact control plane for what AI and humans actually put into production.
- Category: Software supply chain
- HQ: Belfast, United Kingdom
- Founded: 2016
- Funding stage: Series C
- Total funding: $124M
- Investors: TCV, Insight Partners
- Signal: Raised $72M Series C led by TCV and Insight Partners, April 2026
- URL: https://cloudsmith.com
- Details: https://securitystartups.com/companies/cloudsmith

## Clover Security
Design-led product security agents that review PRDs, architecture, and specs before code exists.
- Category: Application security
- HQ: New York, USA
- Founded: 2023
- Funding stage: Series A
- Total funding: $36M
- Investors: Notable Capital, Team8, SVCI
- Signal: Emerged from stealth with $36M seed and Series A, November 2025
- URL: https://clover.security
- Details: https://securitystartups.com/companies/clover-security

## Clutch Security
Zero Trust for non-human identities: discover the secret, then make stolen static credentials useless.
- Category: Secrets and non-human identity
- HQ: Tel Aviv, Israel
- Founded: 2023
- Funding stage: Series A
- Total funding: $28.5M
- Investors: SignalFire, Lightspeed, Merlin Ventures
- Signal: Raised $20M Series A led by SignalFire, January 2025
- URL: https://www.clutch.security
- Details: https://securitystartups.com/companies/clutch-security

## Conceal
Browser-native SSE that gives zero-trust access without a VPN, VDI, or backhauled proxy.
- Category: Endpoint and browser
- HQ: Augusta, USA
- Founded: 2012
- Funding stage: Series B
- Total funding: $36M
- Investors: Two Bear Capital, AllegisCyber, Gula Tech Adventures
- Signal: Raised $26M Series B led by Two Bear Capital, October 2025
- URL: https://conceal.io
- Details: https://securitystartups.com/companies/conceal

## Concentric AI
Semantic DSPM that labels unstructured data by meaning, then remediates oversharing on-prem and in the cloud.
- Category: Data security
- HQ: San Mateo, United States
- Founded: 2018
- Funding stage: Series B
- Total funding: $67M
- Investors: Top Tier Capital, HarbourVest, Ballistic Ventures, Citi Ventures
- Signal: Raised $45M Series B led by Top Tier Capital and HarbourVest, October 2024
- URL: https://concentric.ai
- Details: https://securitystartups.com/companies/concentric-ai

## ConductorOne
AI-native identity platform that folds IGA, IAM, and PAM into one access control plane.
- Category: Identity and access
- HQ: San Francisco, United States
- Founded: 2020
- Funding stage: Series B
- Total funding: $111M
- Investors: Greycroft, Accel, Felicis, CrowdStrike Falcon Fund
- Signal: Raised $79M Series B led by Greycroft, October 2025
- URL: https://www.conductorone.com
- Details: https://securitystartups.com/companies/conductorone

## Conifers
MSSP-first agentic SOC that wires intel, hunting, detections, investigation, and response into one loop.
- Category: Detection and response
- HQ: Dallas, USA
- Founded: 2024
- Funding stage: Series A
- Total funding: $25M
- Investors: SYN Ventures, Picus Capital, Washington Harbour
- Signal: Raised $25M Series A led by SYN Ventures, January 2025
- URL: https://www.conifers.ai
- Details: https://securitystartups.com/companies/conifers

## Contrast Security
IAST, RASP, and ADR that instrument the running app so exploits are seen in the code path, not the packet.
- Category: API and runtime
- HQ: Los Altos, United States
- Founded: 2014
- Funding stage: Series E
- Total funding: $269M
- Investors: Warburg Pincus, Liberty Strategic Capital
- Signal: Published the Software Under Siege 2025 report on application-layer attacks, August 2025
- URL: https://www.contrastsecurity.com
- Details: https://securitystartups.com/companies/contrast-security

## Corgea
AI SAST that hunts broken auth and business-logic bugs, then writes a patch developers can merge.
- Category: Application security
- HQ: San Francisco, USA
- Founded: 2023
- Funding stage: Seed
- Total funding: $2.6M
- Investors: Shorooq, Y Combinator
- Signal: Raised $2.6M seed led by Shorooq, with Y Combinator participating, November 2024
- URL: https://corgea.com
- Details: https://securitystartups.com/companies/corgea

## Corsha
Machine identity provider for operational technology, factories, and defense networks that still run API keys.
- Category: Secrets and non-human identity
- HQ: Washington, United States
- Founded: 2017
- Funding stage: Series A
- Total funding: $30M
- Investors: SineWave Ventures, Ten Eleven, Razor's Edge, Booz Allen Ventures
- Signal: Raised $18M Series A-1 led by SineWave Ventures, April 2025
- URL: https://corsha.com
- Details: https://securitystartups.com/companies/corsha

## Cyberhaven
Data detection and response that traces lineage as files move, transform, and hit AI tools.
- Category: Data security
- HQ: Palo Alto, United States
- Founded: 2016
- Funding stage: Series D
- Total funding: $250M
- Investors: StepStone, Khosla Ventures, Redpoint, Adams Street
- Signal: Raised $100M Series D at a $1B valuation, April 2025
- URL: https://www.cyberhaven.com
- Details: https://securitystartups.com/companies/cyberhaven

## Cycode
ASPM with its own SAST, SCA, and pipeline scanners, plus a graph for AI-written code.
- Category: Application security
- HQ: New York, USA
- Founded: 2019
- Funding stage: Series B
- Total funding: $81M
- Investors: Insight Partners, Forgepoint Capital, YL Ventures
- Signal: Named a Leader in Gartner's first Magic Quadrant for Software Supply Chain Security, June 2026
- URL: https://cycode.com
- Details: https://securitystartups.com/companies/cycode

## CyCognito
Seedless external attack-surface discovery that finds cloud, subsidiary, and third-party assets attackers can actually reach.
- Category: Cloud security
- HQ: Palo Alto, United States
- Founded: 2017
- Funding stage: Series C
- Total funding: $153M
- Investors: Accel, Lightspeed Venture Partners, The Westly Group, Sorenson Ventures
- Signal: Named a Leader and Outperformer in the 2026 GigaOm Radar for Attack Surface Management
- URL: https://www.cycognito.com
- Details: https://securitystartups.com/companies/cycognito

## Cyera
AI-native DSPM that classifies sensitive data, then governs what people and agents can do with it.
- Category: Data security
- HQ: New York, United States
- Founded: 2021
- Funding stage: Series G
- Total funding: $2.3B
- Investors: Evolution Equity, Sequoia, Accel, Blackstone, Coatue
- Signal: Raised $600M Series G at a $12B valuation, June 2026
- URL: https://www.cyera.com
- Details: https://securitystartups.com/companies/cyera

## Cymulate
BAS-born exposure validation that now pushes findings into automated control updates.
- Category: Offensive and exposure
- HQ: Tel Aviv, Israel
- Founded: 2016
- Funding stage: Series D
- Total funding: $141M
- Signal: Shipped Vero AI for agentic cyber defense engineering on the live platform, 2026
- URL: https://cymulate.com
- Details: https://securitystartups.com/companies/cymulate

## Cynet
All-in-one XDR agent for teams that cannot staff a SOC or buy seven point products.
- Category: Endpoint and browser
- HQ: Boston, USA
- Founded: 2014
- Funding stage: Series C
- Total funding: $79M
- Investors: Greenfield Partners, Norwest Venture Partners, Vintage Investment Partners
- Signal: Named Leader and Outperformer in the 2026 GigaOm Radar for XDR
- URL: https://www.cynet.com
- Details: https://securitystartups.com/companies/cynet

## Defakto
SPIFFE-based non-human IAM that replaces static secrets with short-lived workload identities.
- Category: Secrets and non-human identity
- HQ: Palo Alto, United States
- Founded: 2022
- Funding stage: Series B
- Total funding: $50M
- Investors: XYZ Venture Capital, The General Partnership, Bloomberg Beta
- Signal: Raised $30.75M Series B led by XYZ Ventures, October 2025
- URL: https://www.defakto.security
- Details: https://securitystartups.com/companies/defakto

## Descope
Customer identity workflows that let product teams ship login, MFA, and agent auth without an IAM rebuild.
- Category: Identity and access
- HQ: Los Altos, United States
- Founded: 2022
- Funding stage: Seed
- Total funding: $88M
- Investors: Lightspeed, Notable Capital, Dell Technologies Capital
- Signal: Closed $35M seed extension, $88M total, September 2025
- URL: https://www.descope.com
- Details: https://securitystartups.com/companies/descope

## Detectify
Hacker-powered surface monitoring for domains, apps, and APIs, now with an MCP server for AI workflows.
- Category: Offensive and exposure
- HQ: Stockholm, Sweden
- Founded: 2013
- Funding stage: Series B
- Signal: Launched a Detectify MCP server for AI security workflows, 2026
- URL: https://detectify.com
- Details: https://securitystartups.com/companies/detectify

## DoControl
SaaS data security that watches sharing in Google Workspace, Slack, and Box, then revokes it automatically.
- Category: Email and collaboration
- HQ: New York, United States
- Founded: 2020
- Funding stage: Series B
- Total funding: $45M
- Investors: Insight Partners, RTP Global
- Signal: Launched Dot, an AI SaaS data security assistant, June 2025
- URL: https://www.docontrol.io
- Details: https://securitystartups.com/companies/docontrol

## Doppler
Developer-first secrets platform that syncs env vars, rotates them, and logs who changed what.
- Category: Secrets and non-human identity
- HQ: San Francisco, United States
- Founded: 2018
- Funding stage: Series A
- Total funding: $29M
- Investors: CRV, Sequoia, GV, Y Combinator
- Signal: Launched Change Requests for approved secret edits, October 2024
- URL: https://www.doppler.com
- Details: https://securitystartups.com/companies/doppler

## Dropzone AI
Software-only AI SOC analyst that investigates alerts without a managed service attached.
- Category: Detection and response
- HQ: Seattle, USA
- Founded: 2023
- Funding stage: Series B
- Total funding: $57M
- Investors: Theory Ventures, Madrona, Decibel Partners, IQT
- Signal: Raised $37M Series B led by Theory Ventures, July 2025
- URL: https://www.dropzone.ai
- Details: https://securitystartups.com/companies/dropzone-ai

## EasyDMARC
Self-serve DMARC, SPF, and DKIM platform for teams that need enforcement without a mail consultant.
- Category: Email and collaboration
- HQ: Los Angeles, United States
- Founded: 2017
- Funding stage: Series A
- Total funding: $22.3M
- Investors: Radian Capital
- Signal: Raised $20M Series A led by Radian Capital, September 2024
- URL: https://easydmarc.com
- Details: https://securitystartups.com/companies/easydmarc

## Endor Labs
Reachability-first AppSec: SAST and SCA that only page you when the vulnerable function is actually called.
- Category: Application security
- HQ: Palo Alto, USA
- Founded: 2021
- Funding stage: Series B
- Total funding: $163M
- Investors: DFJ Growth, Lightspeed, Coatue, Salesforce Ventures
- Signal: Raised $93M Series B led by DFJ Growth, April 2025
- URL: https://www.endorlabs.com
- Details: https://securitystartups.com/companies/endor-labs

## Escape
AI pentesting for APIs and web apps that proves exploitability, including IDOR and business logic, not just crawler noise.
- Category: API and runtime
- HQ: Paris, France
- Founded: 2020
- Funding stage: Series A
- Total funding: $22M+
- Investors: IRIS, Y Combinator, Kima Ventures
- Signal: Raised $18M to expand agentic pentesting for APIs and business logic, March 2026
- URL: https://escape.tech
- Details: https://securitystartups.com/companies/escape

## Exaforce
Real-time knowledge graph plus Exabot agents that investigate and stop attacks as they happen.
- Category: Detection and response
- HQ: San Jose, USA
- Founded: 2023
- Funding stage: Series B
- Total funding: $200M
- Investors: Khosla Ventures, Mayfield, Peak XV Partners, HarbourVest
- Signal: Raised $125M Series B at a $725M valuation, May 2026
- URL: https://www.exaforce.com
- Details: https://securitystartups.com/companies/exaforce

## Expel
Vendor-agnostic MDR that works on the SIEM and EDR you already bought.
- Category: Detection and response
- HQ: Herndon, USA
- Founded: 2016
- Funding stage: Series E
- Total funding: $289M
- Investors: Index Ventures, Battery Ventures, CapitalG, Scale Venture Partners
- Signal: Launched MDR coverage for the full AI attack surface, August 2026
- URL: https://expel.com
- Details: https://securitystartups.com/companies/expel

## Finite State
Product and firmware SBOM platform for the devices you buy and the binaries you did not compile.
- Category: Software supply chain
- HQ: Columbus, USA
- Founded: 2017
- Funding stage: Series B
- Signal: Won Cybersecurity Stars award for firmware security leadership, June 2026
- URL: https://finitestate.io
- Details: https://securitystartups.com/companies/finite-state

## Fleet
Open-source osquery control plane for Mac, Windows, Linux, and phones, cloud or self-hosted.
- Category: Endpoint and browser
- HQ: San Francisco, USA
- Founded: 2020
- Funding stage: Series B
- Total funding: $52M
- Investors: Ten Eleven Ventures, CRV, Open Core Ventures
- Signal: Raised $27M Series B led by Ten Eleven Ventures, June 2025
- URL: https://fleetdm.com
- Details: https://securitystartups.com/companies/fleet

## Fortanix
Confidential computing and key management so data stays encrypted while AI and apps use it.
- Category: Data security
- HQ: Santa Clara, United States
- Founded: 2016
- Funding stage: Series C
- Total funding: $122M
- Investors: Goldman Sachs, Intel Capital, Foundation Capital, In-Q-Tel
- Signal: Joined Cisco Secure AI Factory with NVIDIA for Confidential AI inference, June 2026
- URL: https://www.fortanix.com
- Details: https://securitystartups.com/companies/fortanix

## GitGuardian
Secrets detection plus NHI lifecycle, from leaked keys in git to the agents still using them.
- Category: Secrets and non-human identity
- HQ: Paris, France
- Founded: 2017
- Funding stage: Series C
- Total funding: $108M
- Investors: Insight Partners, Quadrille Capital, Balderton, Sapphire Ventures
- Signal: Raised $50M Series C led by Insight Partners, February 2026
- URL: https://www.gitguardian.com
- Details: https://securitystartups.com/companies/gitguardian

## Gray Swan
Frontier-lab red teaming (Shade) and runtime defense (Cygnal) trained on unpublished attacks.
- Category: AI security
- HQ: Pittsburgh, USA
- Founded: 2024
- Funding stage: Series A
- Total funding: $40M
- Investors: Wing Venture Capital, Madrona, Obvious Ventures, Snowflake Ventures
- Signal: Raised $40M Series A co-led by Wing and Madrona, May 2026
- URL: https://www.grayswan.ai
- Details: https://securitystartups.com/companies/gray-swan

## Guardio
Consumer browser protection that treats everyday users like they deserve an enterprise SOC.
- Category: Endpoint and browser
- HQ: Tel Aviv, Israel
- Founded: 2018
- Funding stage: Series B
- Total funding: $127M
- Investors: ION Crossover Partners, Tiger Global, Vintage Investment Partners
- Signal: Raised $80M Series B led by ION Crossover Partners, November 2025
- URL: https://guard.io
- Details: https://securitystartups.com/companies/guardio

## Hadrian
Outside-in autonomous hacker that discovers, exploits, and validates external exposure continuously.
- Category: Offensive and exposure
- HQ: Amsterdam, Netherlands
- Founded: 2021
- Funding stage: Seed
- Total funding: $14M
- Investors: HV Capital, Village Global, ABN AMRO Ventures
- Signal: Shipped Sense, Plan, Attack AI agents to operationalize CTEM, November 2025
- URL: https://hadrian.io
- Details: https://securitystartups.com/companies/hadrian

## HarfangLab
ANSSI-certified French EDR for buyers who cannot put a US cloud agent on sensitive endpoints.
- Category: Endpoint and browser
- HQ: Paris, France
- Founded: 2018
- Funding stage: Series A
- Total funding: $33M
- Investors: Elaia, Credit Mutuel Innovation, MassMutual Ventures
- Signal: Added Attack Surface Management to its endpoint platform, September 2025
- URL: https://harfanglab.io
- Details: https://securitystartups.com/companies/harfanglab

## HiddenLayer
Model scanner, attack simulation, and runtime firewall for agentic, generative, and predictive AI.
- Category: AI security
- HQ: Austin, USA
- Founded: 2022
- Funding stage: Series A
- Total funding: $56M
- Investors: M12, Moore Strategic Ventures, Ten Eleven Ventures, IBM Ventures
- Signal: Selected to support the US DOE Prometheus initiative under the Genesis Mission, August 2026
- URL: https://www.hiddenlayer.com
- Details: https://securitystartups.com/companies/hiddenlayer

## Horizon3.ai
NodeZero autonomous pentest that exploits live networks the way an attacker would, continuously.
- Category: Offensive and exposure
- HQ: San Francisco, USA
- Founded: 2019
- Funding stage: Series E
- Total funding: $429M
- Investors: NEA, NightDragon, Craft Ventures, SignalFire
- Signal: Raised $250M Series E at a $2B-plus valuation, August 2026
- URL: https://horizon3.ai
- Details: https://securitystartups.com/companies/horizon3-ai

## Huntress
Managed EDR, identity, and SIEM for businesses that do not run a 24/7 SOC.
- Category: Detection and response
- HQ: Columbia, USA
- Founded: 2015
- Funding stage: Series D
- Total funding: $300M
- Investors: Kleiner Perkins, Meritech Capital, Sapphire Ventures
- Signal: Surpassed $250M ARR and 270,000 businesses protected, July 2026
- URL: https://www.huntress.com
- Details: https://securitystartups.com/companies/huntress

## Infisical
Open-source secrets manager you can self-host or run as SaaS, now adding agent-safe credential proxying.
- Category: Secrets and non-human identity
- HQ: San Francisco, United States
- Founded: 2022
- Funding stage: Series A
- Total funding: $19M
- Investors: Elad Gil, Y Combinator, Gradient Ventures
- Signal: Raised $16M Series A led by Elad Gil, June 2025
- URL: https://infisical.com
- Details: https://securitystartups.com/companies/infisical

## Intezer
Forensic-grade AI SOC that investigates 100% of alerts, including the low-severity ones MDR skips.
- Category: Detection and response
- HQ: New York, USA
- Founded: 2016
- Funding stage: Series C
- Total funding: $60M
- Investors: Norwest Venture Partners, Intel Capital, OpenView, Magma Venture Partners
- Signal: Expanded AI SOC platform for teams outgrowing MDR, March 2026
- URL: https://www.intezer.com
- Details: https://securitystartups.com/companies/intezer

## IONIX
External attack-surface platform that discovers cloud, subsidiary, and supply-chain assets, then validates which exposures are actually exploitable.
- Category: Cloud security
- HQ: Tel Aviv, Israel
- Founded: 2016
- Funding stage: Series A
- Total funding: $50M
- Investors: U.S. Venture Partners, Team8, Hyperwise Ventures, Maor Investments
- Signal: Added $15M to Series A, bringing total funding to $50.3M, February 2024
- URL: https://www.ionix.io
- Details: https://securitystartups.com/companies/ionix

## IRONSCALES
AI email security that mixes automated remediation with a network of admin-reported phishing.
- Category: Email and collaboration
- HQ: Atlanta, United States
- Founded: 2013
- Funding stage: Series C
- Total funding: $80M
- Investors: PSG, Jump Capital, K1
- Signal: Launched Winter 2026 agentic release with Red Teaming, Phishing SOC, and Simulation agents, March 2026
- URL: https://ironscales.com
- Details: https://securitystartups.com/companies/ironscales

## Island
Enterprise browser that embeds DLP, ZTNA, and last-mile control into Chromium instead of another VDI farm.
- Category: Email and collaboration
- HQ: Dallas, United States
- Founded: 2020
- Funding stage: Series E
- Total funding: $730M
- Investors: Coatue, Sequoia, Insight Partners, Cyberstarts
- Signal: Raised $250M Series E at a $4.8B valuation, March 2025
- URL: https://www.island.io
- Details: https://securitystartups.com/companies/island

## JumpCloud
Cloud directory that binds workforce identity, devices, and access without living on Active Directory.
- Category: Identity and access
- HQ: Louisville, United States
- Founded: 2012
- Funding stage: Series F
- Total funding: $400M+
- Investors: Sapphire Ventures, General Atlantic, BlackRock
- Signal: Acquired Breez to add identity threat detection, October 2025
- URL: https://jumpcloud.com
- Details: https://securitystartups.com/companies/jumpcloud

## Keep Aware
Browser detection and response that watches behavior inside existing Chrome and Edge sessions.
- Category: Endpoint and browser
- HQ: Austin, USA
- Founded: 2022
- Funding stage: Seed
- Total funding: $2.4M
- Investors: LiveOak Ventures
- Signal: Published The State of Browser Security Report 2026 from production telemetry
- URL: https://keepaware.com
- Details: https://securitystartups.com/companies/keep-aware

## Knostic
Need-to-know access control so Copilots, coding agents, and MCP tools stop oversharing.
- Category: AI security
- HQ: Tel Aviv, Israel
- Founded: 2023
- Funding stage: Seed
- Total funding: $11M
- Signal: Raised $11M to ship need-to-know controls for enterprise AI, March 2025
- URL: https://www.knostic.ai
- Details: https://securitystartups.com/companies/knostic

## Kodem
Runtime-backed AppSec that proves a CVE is loaded in memory before it hits the backlog.
- Category: Application security
- HQ: Tel Aviv, Israel
- Founded: 2021
- Funding stage: Series A
- Total funding: $25M
- Investors: Greylock, TPY Capital
- Signal: Published Rapyd case study showing runtime-led AppSec without extra headcount, July 2025
- URL: https://www.kodemsecurity.com
- Details: https://securitystartups.com/companies/kodem

## Lasso Security
Discovery, posture, automated red team, and gateway runtime for models and agents.
- Category: AI security
- HQ: Tel Aviv, Israel
- Founded: 2023
- Funding stage: Seed
- Total funding: $6M
- Investors: Entree Capital, Samsung Next
- Signal: Published Securing Agentic AI: The Intent Security Framework, March 2026
- URL: https://www.lasso.security
- Details: https://securitystartups.com/companies/lasso-security

## Legit Security
AI-native ASPM that discovers the software factory, then VibeGuard blocks bad AI code in the IDE.
- Category: Application security
- HQ: Tel Aviv, Israel
- Founded: 2020
- Funding stage: Series B
- Total funding: $70M
- Investors: CRV, Bessemer Venture Partners, TCV, CyberStarts
- Signal: Shipped VibeGuard to secure AI-generated code at the developer endpoint, 2026
- URL: https://www.legitsecurity.com
- Details: https://securitystartups.com/companies/legit-security

## Levo.ai
Runtime API and AI security with eBPF visibility, agentless discovery, and inline protection that stays off the data path for privacy.
- Category: API and runtime
- HQ: San Francisco, United States
- Founded: 2021
- Signal: Shipped Launch Week 2026 with AI Firewall, AI Gateway, and MCP discovery and testing, February 2026
- URL: https://www.levo.ai
- Details: https://securitystartups.com/companies/levo-ai

## Lineaje
AI-driven lineage of every component, including the ones hiding in firmware and public-sector stacks.
- Category: Software supply chain
- HQ: Santa Clara, USA
- Founded: 2021
- Funding stage: Series A
- Total funding: $27M
- Investors: Prosperity7 Ventures, Neotribe, Hitachi, Tenable Ventures
- Signal: Raised $20M Series A co-led by Prosperity7, Neotribe, and Hitachi, July 2024
- URL: https://www.lineaje.com
- Details: https://securitystartups.com/companies/lineaje

## Lumos
Autonomous IGA that reviews, provisions, and rightsizes access for people, NHIs, and AI agents.
- Category: Identity and access
- HQ: San Francisco, United States
- Founded: 2020
- Funding stage: Series B
- Total funding: $65M
- Investors: Scale Venture Partners, Andreessen Horowitz, Harpoon
- Signal: Launched Identity Agent Force to govern human, NHI, and AI access, June 2026
- URL: https://www.lumos.com
- Details: https://securitystartups.com/companies/lumos

## Manifest
SBOM and AIBOM intelligence so you can actually use the bills of materials you generate.
- Category: Software supply chain
- HQ: Washington, USA
- Founded: 2022
- Funding stage: Series A
- Total funding: $23M
- Investors: Ensemble VC, First Round Capital, Homebrew, AE Ventures
- Signal: Raised $15M Series A led by Ensemble VC, April 2025
- URL: https://www.manifestcyber.com
- Details: https://securitystartups.com/companies/manifest

## Material Security
Workspace security for Google and Microsoft 365 that assumes the mailbox will get owned and limits the blast.
- Category: Email and collaboration
- HQ: San Francisco, United States
- Founded: 2017
- Funding stage: Series C
- Total funding: $100M+
- Investors: Founders Fund, Andreessen Horowitz
- Signal: Published original analysis of the May 2026 Composio Gmail OAuth token breach, June 2026
- URL: https://material.security
- Details: https://securitystartups.com/companies/material-security

## MIND
AI-native DLP and insider risk that classifies, then blocks exfil at the endpoint without a policy farm.
- Category: Data security
- HQ: Seattle, United States
- Founded: 2023
- Funding stage: Series A
- Total funding: $40M+
- Investors: Paladin Capital, Crosspoint Capital, YL Ventures, Okta Ventures
- Signal: Raised $30M Series A seven months after stealth, June 2025
- URL: https://mind.io
- Details: https://securitystartups.com/companies/mind

## Mindgard
Attacker-style recon and automated red team for models, agents, IDEs, and the systems around them.
- Category: AI security
- HQ: London, United Kingdom
- Founded: 2022
- Funding stage: Series A
- Total funding: $42M
- Investors: Album VC, Karma Ventures, .406 Ventures, Lakestar
- Signal: Raised $30M Series A led by Album VC, August 2026
- URL: https://mindgard.ai
- Details: https://securitystartups.com/companies/mindgard

## Mitiga
Cloud, SaaS, identity, and AI detection and response with a forensic lake built for attacks that never touch an endpoint agent.
- Category: Cloud security
- HQ: New York, United States
- Founded: 2019
- Funding stage: Series B
- Total funding: $82M
- Investors: SYN Ventures, ClearSky, Atlantic Bridge, Blackstone, Cisco Investments
- Signal: Raised $30M Series B led by SYN Ventures, January 2025
- URL: https://www.mitiga.io
- Details: https://securitystartups.com/companies/mitiga

## NetRise
Firmware and binary SBOM that unpacks what vendors actually shipped, not what the datasheet claimed.
- Category: Software supply chain
- HQ: Austin, USA
- Founded: 2020
- Funding stage: Series A
- Total funding: $25M
- Investors: Squadra Ventures
- Signal: Raised $10M Series A, taking total funding to about $25M, April 2025
- URL: https://www.netrise.io
- Details: https://securitystartups.com/companies/netrise

## Nightfall AI
AI-native DLP for SaaS, endpoints, browsers, and GenAI prompts that learns from investigations.
- Category: Data security
- HQ: San Francisco, United States
- Founded: 2018
- Funding stage: Series B
- Total funding: $60M
- Investors: Bain Capital Ventures, Venrock, WestBridge Capital
- Signal: Launched Nyx, an autonomous DLP copilot, July 2025
- URL: https://www.nightfall.ai
- Details: https://securitystartups.com/companies/nightfall-ai

## Noma Security
AI-SPM, agent access control, red team, and AI-DR in one control plane for homegrown and SaaS agents.
- Category: AI security
- HQ: New York, USA
- Founded: 2023
- Funding stage: Series B
- Total funding: $132M
- Investors: Evolution Equity Partners, Ballistic Ventures, Glilot Capital
- Signal: Raised $100M Series B led by Evolution Equity Partners, July 2025
- URL: https://www.noma.security
- Details: https://securitystartups.com/companies/noma-security

## Obsidian Security
SaaS identity and agent governance inside the third-party apps where work actually happens.
- Category: Identity and access
- HQ: Palo Alto, United States
- Founded: 2017
- Funding stage: Series D
- Total funding: $204M
- Investors: Crescent Cove, Greylock, Menlo Ventures, GV
- Signal: Raised $85M Series D at $1.1B valuation, August 2026
- URL: https://www.obsidiansecurity.com
- Details: https://securitystartups.com/companies/obsidian-security

## Oligo Security
Application detection and response that watches live code execution and blocks exploits as they run.
- Category: API and runtime
- HQ: Tel Aviv, Israel
- Founded: 2022
- Funding stage: Series B
- Total funding: $140M
- Investors: Ballistic Ventures, Lightspeed, TLV Partners, Greenfield Partners
- Signal: Raised $60M, crossing $140M in total funding, August 2026
- URL: https://www.oligo.security
- Details: https://securitystartups.com/companies/oligo-security

## Opal Security
Policy-as-code access control plane for employees, service accounts, and AI agents.
- Category: Identity and access
- HQ: New York, United States
- Founded: 2020
- Funding stage: Series B
- Total funding: $59M
- Investors: Greylock, Battery Ventures, Box Group
- Signal: Raised $23M and hired a new product bench, June 2026
- URL: https://www.opal.dev
- Details: https://securitystartups.com/companies/opal-security

## Orca Security
Agentless CNAPP that SideScans cloud disks and APIs for the full estate without installing a workload agent.
- Category: Cloud security
- HQ: Portland, United States
- Founded: 2019
- Funding stage: Series C
- Total funding: $640M
- Investors: ICONIQ, Redpoint, CapitalG, YL Ventures, Temasek
- Signal: Named a Strong Performer in The Forrester Wave: Cloud Native Application Protection Solutions, Q1 2026
- URL: https://orca.security
- Details: https://securitystartups.com/companies/orca-security

## OX Security
Prompt-to-runtime AppSec that tries to show only the 5 percent of findings that can actually breach you.
- Category: Application security
- HQ: New York, USA
- Founded: 2021
- Funding stage: Series B
- Total funding: $94M
- Investors: DTCP, Team8, IBM Ventures, Microsoft
- Signal: Raised $60M Series B led by DTCP, taking total funding to $94M, May 2025
- URL: https://www.ox.security
- Details: https://securitystartups.com/companies/ox-security

## P0 Security
Cloud IGA and PAM that answers who or what can touch production, then enforces it at runtime.
- Category: Identity and access
- HQ: San Francisco, United States
- Founded: 2022
- Funding stage: Series A
- Total funding: $20M
- Investors: SYN Ventures, Lightspeed, Zscaler
- Signal: Closed $15M Series A led by SYN Ventures, September 2024
- URL: https://www.p0.dev
- Details: https://securitystartups.com/companies/p0-security

## Pentera
Automated security validation that actually exploits attack paths inside the customer's network.
- Category: Offensive and exposure
- HQ: Burlington, USA
- Founded: 2015
- Funding stage: Series D
- Total funding: $250M
- Investors: Evolution Equity Partners, AWZ Ventures, Blackstone
- Signal: Raised $60M Series D led by Evolution Equity Partners, March 2025
- URL: https://pentera.io
- Details: https://securitystartups.com/companies/pentera

## Picus Security
Breach-and-attack simulation plus autonomous pentest that scores whether controls actually stop the attack.
- Category: Offensive and exposure
- HQ: San Francisco, USA
- Founded: 2013
- Funding stage: Series C
- Signal: Raised $45M Series C to lead adversarial exposure validation, September 2024
- URL: https://www.picussecurity.com
- Details: https://securitystartups.com/companies/picus-security

## Pillar Security
Inventory, agentic red team, and self-improving runtime guardrails for the agent lifecycle.
- Category: AI security
- HQ: Miami, USA
- Founded: 2023
- Funding stage: Seed
- Total funding: $9M
- Investors: Shield Capital, Golden Ventures, Ground Up Ventures
- Signal: Named a 2026 Gartner Cool Vendor in AI Software Security
- URL: https://www.pillar.security
- Details: https://securitystartups.com/companies/pillar-security

## Pixee
Agentic AppSec that triages scanner noise and opens mergeable fix PRs in your house style.
- Category: Application security
- HQ: Baltimore, USA
- Founded: 2022
- Funding stage: Seed
- Total funding: $15M
- Investors: Decibel, Wing VC, TEDCO
- Signal: Raised $15M seed led by Decibel and Wing VC, May 2025
- URL: https://www.pixee.ai
- Details: https://securitystartups.com/companies/pixee

## Privacera
Fine-grained data access and AI governance from the team that built Apache Ranger.
- Category: Data security
- HQ: Newark, United States
- Founded: 2016
- Funding stage: Series B
- Total funding: $63.5M
- Investors: Accel, Insight Partners, Battery Ventures, Sapphire Ventures
- Signal: Shipped major PAIG updates aligned to the NIST AI RMF, February 2025
- URL: https://privacera.com
- Details: https://securitystartups.com/companies/privacera

## Prophet Security
Agentic SOC platform covering investigation, hunting, and detection engineering in one mesh.
- Category: Detection and response
- HQ: Menlo Park, USA
- Founded: 2023
- Funding stage: Series A
- Total funding: $41M
- Investors: Accel, Bain Capital Ventures
- Signal: Raised $30M Series A led by Accel, July 2025
- URL: https://www.prophetsecurity.ai
- Details: https://securitystartups.com/companies/prophet-security

## Push Security
Browser-native ITDR that stops phishing, token theft, and account takeover where the session lives.
- Category: Identity and access
- HQ: Boston, United States
- Founded: 2019
- Funding stage: Series B
- Total funding: $49M
- Investors: Redpoint Ventures, GV, Datadog Ventures
- Signal: Raised $30M Series B led by Redpoint Ventures, April 2025
- URL: https://pushsecurity.com
- Details: https://securitystartups.com/companies/push-security

## Qevlar AI
European agentic SOC that turns every alert investigation into posture insight.
- Category: Detection and response
- HQ: Paris, France
- Founded: 2023
- Funding stage: Series A
- Total funding: $45M
- Investors: Partech, Forgepoint Capital, EQT Ventures
- Signal: Raised $30M co-led by Partech and Forgepoint Capital International, March 2026
- URL: https://www.qevlar.com
- Details: https://securitystartups.com/companies/qevlar-ai

## RAD Security
Behavioral runtime CDR for Kubernetes and AI workloads, fingerprinting what a cluster should do so zero-days show up as drift.
- Category: Cloud security
- HQ: San Francisco, United States
- Founded: 2021
- Funding stage: Series A
- Total funding: $20M
- Investors: Cheyenne Ventures, .406 Ventures, Vertex Ventures, Forgepoint Capital, Akamai
- Signal: Raised $14M Series A, February 2025
- URL: https://www.radsecurity.ai
- Details: https://securitystartups.com/companies/rad-security

## Reco
SaaS and agent security that maps every app, identity, and AI connector, then remediates the risky ones.
- Category: Email and collaboration
- HQ: New York, United States
- Founded: 2020
- Funding stage: Series B
- Total funding: $85M
- Investors: Zeev Ventures, Insight Partners, boldstart, Angular Ventures
- Signal: Raised $30M Series B, total funding $85M, February 2026
- URL: https://www.reco.ai
- Details: https://securitystartups.com/companies/reco

## Red Sift
Email authentication and brand protection that gets domains to DMARC enforcement without a DNS circus.
- Category: Email and collaboration
- HQ: London, United Kingdom
- Founded: 2015
- Funding stage: Series B
- Total funding: $70M
- Signal: Won a 2025 Cybersecurity Excellence Award for OnDMARC, March 2025
- URL: https://redsift.com
- Details: https://securitystartups.com/companies/red-sift

## Relyance AI
Data-flow DSPM that shows how customer data actually moves through products, vendors, and AI features.
- Category: Data security
- HQ: San Francisco, United States
- Founded: 2020
- Funding stage: Series B
- Total funding: $50M+
- Investors: Thomvest Ventures, M12, Menlo Ventures, Unusual Ventures
- Signal: Raised $32.1M Series B led by Thomvest Ventures, October 2024
- URL: https://www.relyance.ai
- Details: https://securitystartups.com/companies/relyance-ai

## Runlayer
MCP gateway plus identity, observability, and threat detection for enterprise agents.
- Category: AI security
- HQ: New York, USA
- Founded: 2025
- Funding stage: Seed
- Total funding: $11M
- Investors: Khosla Ventures, Felicis
- Signal: Emerged from stealth with $11M seed from Khosla (Keith Rabois) and Felicis, November 2025
- URL: https://www.runlayer.com
- Details: https://securitystartups.com/companies/runlayer

## SAFE
Cyber risk quantification platform that added an agentic CTEM loop on top of CRQ and TPRM.
- Category: Offensive and exposure
- HQ: Palo Alto, USA
- Founded: 2012
- Funding stage: Series C
- Total funding: $170M
- Investors: Avataar Ventures, Eight Roads, Sorenson Capital
- Signal: Raised $70M Series C and launched a fully autonomous CTEM offering, July 2025
- URL: https://safe.security
- Details: https://securitystartups.com/companies/safe

## Salt Security
Runtime API security that discovers shadow and zombie APIs, then spots business-logic abuse in live traffic.
- Category: API and runtime
- HQ: Palo Alto, United States
- Founded: 2016
- Funding stage: Series D
- Total funding: $281M
- Investors: Sequoia, CapitalG, CrowdStrike Falcon Fund, Y Combinator
- Signal: Published a year of monthly API and AI security releases, December 2025
- URL: https://salt.security
- Details: https://securitystartups.com/companies/salt-security

## Seal Security
Backports security patches onto the exact open-source versions you already run, including EOL.
- Category: Software supply chain
- HQ: Tel Aviv, Israel
- Founded: 2022
- Funding stage: Series A
- Total funding: $20M
- Investors: Vertex Ventures Israel, Crew Capital, SBI Group
- Signal: Raised $13M Series A led by Vertex Israel, July 2025
- URL: https://www.seal.security
- Details: https://securitystartups.com/companies/seal-security

## Semgrep
Rules-plus-AI SAST, SCA, and secrets that developers run in seconds and AppSec can actually tune.
- Category: Application security
- HQ: San Francisco, USA
- Founded: 2017
- Funding stage: Series D
- Total funding: $204M
- Investors: Menlo Ventures, Sequoia, Lightspeed, Felicis, Redpoint
- Signal: Raised $100M Series D led by Menlo Ventures, February 2025
- URL: https://semgrep.dev
- Details: https://securitystartups.com/companies/semgrep

## Semperis
Identity threat detection and forest recovery for Active Directory, Entra ID, and Okta.
- Category: Identity and access
- HQ: Hoboken, United States
- Founded: 2013
- Funding stage: Growth
- Total funding: $325M
- Investors: KKR, Insight Partners, J.P. Morgan, Hercules Capital
- Signal: Secured $125M growth financing at a $1B+ valuation, June 2024
- URL: https://www.semperis.com
- Details: https://securitystartups.com/companies/semperis

## Sentra
Cloud-native DSPM that discovers, classifies, and readies enterprise data for AI without agents.
- Category: Data security
- HQ: New York, United States
- Founded: 2021
- Funding stage: Series B
- Total funding: $100M+
- Investors: Key1 Capital, Bessemer, Zeev Ventures, Munich Re Ventures
- Signal: Closed $50M Series B, bringing total funding over $100M, April 2025
- URL: https://www.sentra.io
- Details: https://securitystartups.com/companies/sentra

## Silverfort
Runtime identity protection that puts MFA and least privilege on systems IAM vendors leave naked.
- Category: Identity and access
- HQ: Plano, United States
- Founded: 2016
- Funding stage: Series D
- Total funding: $222M
- Investors: Brighton Park Capital, Greenfield Partners
- Signal: Acquired Fabrix Security for autonomous runtime identity security, April 2026
- URL: https://www.silverfort.com
- Details: https://securitystartups.com/companies/silverfort

## Simbian
Self-improving AI SOC that unifies defense, hunting, and offense on one agent family.
- Category: Detection and response
- HQ: Mountain View, USA
- Founded: 2023
- Funding stage: Seed
- Total funding: $10.5M
- Investors: Cota Capital, Rain Capital, Wipro Ventures
- Signal: Named to the CB Insights AI 100, May 2026, after 15x customer growth in 2025
- URL: https://simbian.ai
- Details: https://securitystartups.com/companies/simbian

## SixMap
Internet-scale IPv4/IPv6 discovery that maps what an attacker can actually see of you.
- Category: Offensive and exposure
- HQ: Columbia, USA
- Founded: 2020
- Funding stage: Series A
- Total funding: $24M
- Investors: IAG Capital Partners
- Signal: Launched new product capabilities for AI-driven attack-surface change, December 2025
- URL: https://www.sixmap.io
- Details: https://securitystartups.com/companies/sixmap

## Skyhawk Security
AI purple team that replays CNAPP and SIEM findings against a digital twin to prove which cloud CVEs are actually weaponizable.
- Category: Cloud security
- HQ: Tel Aviv, Israel
- Founded: 2022
- Funding stage: Series A
- Total funding: $35M
- Investors: Tiger Global
- Signal: Named a CRN 2025 Stellar Startup for the third consecutive year, November 2025
- URL: https://skyhawk.security
- Details: https://securitystartups.com/companies/skyhawk-security

## Smallstep
Private CA and device identity so internal TLS, SSH, and laptops get short-lived certificates instead of passwords.
- Category: Secrets and non-human identity
- HQ: San Francisco, United States
- Founded: 2016
- Funding stage: Series A
- Total funding: $26M
- Investors: StepStone Group, Bain Capital Ventures, boldstart
- Signal: Published hardware-bound device identity essay, May 2026
- URL: https://smallstep.com
- Details: https://securitystartups.com/companies/smallstep

## Snyk
Developer-first SAST, SCA, container, and IaC platform now wrapping AI agents and models too.
- Category: Application security
- HQ: Boston, USA
- Founded: 2015
- Funding stage: Series G
- Investors: Accel, GV, Boldstart Ventures, QIA
- Signal: Launched Evo Agentic Development Security to govern coding agents, June 2026
- URL: https://snyk.io
- Details: https://securitystartups.com/companies/snyk

## Socket
Behavioral SCA that blocks malicious packages at install time, before a CVE exists.
- Category: Software supply chain
- HQ: San Francisco, USA
- Founded: 2022
- Funding stage: Series C
- Total funding: $125M
- Investors: Thrive Capital, Andreessen Horowitz, Abstract Ventures, Capital One Ventures
- Signal: Raised $60M Series C at a $1B valuation led by Thrive Capital, May 2026
- URL: https://socket.dev
- Details: https://securitystartups.com/companies/socket

## Sonrai Security
Cloud permissions firewall that enforces least privilege on humans, machines, and AI identities using native AWS, Azure, and GCP controls.
- Category: Cloud security
- HQ: New York, United States
- Founded: 2017
- Funding stage: Series C
- Total funding: $89M
- Investors: Menlo Ventures, Polaris Partners, Ten Eleven Ventures, ISTARI
- Signal: Reported 4x ARR growth as Cloud Permissions Firewall adoption surged, January 2026
- URL: https://sonraisecurity.com
- Details: https://securitystartups.com/companies/sonrai-security

## StackHawk
Developer-first API DAST that runs in CI so AI-generated endpoints get tested before they ship.
- Category: API and runtime
- HQ: Denver, United States
- Founded: 2019
- Funding stage: Series B
- Total funding: $47.3M
- Investors: Sapphire Ventures, Costanoa Ventures
- Signal: Raised $12M strategic round from Sapphire and Costanoa, total $47.3M, May 2025
- URL: https://www.stackhawk.com
- Details: https://securitystartups.com/companies/stackhawk

## Straiker
Discover, adversarially test, and kill-switch AI agents and MCP connections in production.
- Category: AI security
- HQ: Mountain View, USA
- Founded: 2025
- Funding stage: Series A
- Total funding: $85M
- Investors: Marathon Management Partners, Bain Capital Ventures, Lightspeed, Citi Ventures
- Signal: Raised $64M Series A, taking total funding to $85M, June 2026
- URL: https://www.straiker.ai
- Details: https://securitystartups.com/companies/straiker

## Stream Security
Cloud detection and response on a live CloudTwin of every workload, identity, and network path.
- Category: Cloud security
- HQ: Tel Aviv, Israel
- Founded: 2020
- Funding stage: Series B
- Total funding: $55M
- Investors: U.S. Venture Partners, Citi Ventures, Glilot Capital Partners, TLV Partners, Energy Impact Partners
- Signal: Raised $30M Series B, October 2024
- URL: https://www.stream.security
- Details: https://securitystartups.com/companies/stream-security

## Sublime Security
Agentic email security with open detection rules and AI that writes new coverage in hours.
- Category: Email and collaboration
- HQ: Washington, United States
- Founded: 2019
- Funding stage: Series C
- Total funding: $244M
- Investors: Georgian, Index Ventures, IVP, Citi Ventures
- Signal: Raised $150M Series C led by Georgian, October 2025
- URL: https://sublime.security
- Details: https://securitystartups.com/companies/sublime-security

## Sweet Security
Runtime CNAPP that watches cloud and AI agents as they act, then turns the finding into a guardrail.
- Category: Cloud security
- HQ: Tel Aviv, Israel
- Founded: 2023
- Funding stage: Series B
- Total funding: $120M
- Investors: Evolution Equity Partners, Glilot Capital Partners, Munich Re Ventures, CyberArk Ventures
- Signal: Raised $75M Series B, November 2025
- URL: https://www.sweet.security
- Details: https://securitystartups.com/companies/sweet-security

## Sysdig
Runtime CNAPP built on kernel-level system calls, Falco detections, and AI agents that act inside the tools you already run.
- Category: Cloud security
- HQ: San Francisco, United States
- Founded: 2013
- Funding stage: Series G
- Total funding: $744M
- Investors: Accel, Insight Partners, Bain Capital Ventures, Permira
- Signal: Named a Leader in The Forrester Wave: Cloud Native Application Protection Solutions, Q1 2026
- URL: https://www.sysdig.com
- Details: https://securitystartups.com/companies/sysdig

## Tamnoon
Human-plus-AI cloud remediation that closes CNAPP findings without breaking the workload that owns them.
- Category: Cloud security
- HQ: Sammamish, United States
- Founded: 2022
- Funding stage: Series A
- Total funding: $17M
- Investors: Bright Pixel Capital, Merlin Ventures, Elron Ventures, Blu Venture Investors
- Signal: Raised $12M Series A, September 2024
- URL: https://www.tamnoon.io
- Details: https://securitystartups.com/companies/tamnoon

## Teleport
Infrastructure identity for SSH, Kubernetes, databases, and MCP servers without standing secrets.
- Category: Identity and access
- HQ: Oakland, United States
- Founded: 2015
- Funding stage: Series C
- Total funding: $169M
- Investors: Bessemer, Insight Partners, Kleiner Perkins
- Signal: Launched Beams trusted runtimes for AI agents, March 2026
- URL: https://goteleport.com
- Details: https://securitystartups.com/companies/teleport

## Teleskope
Agentic data security that classifies with business context and remediates without a ticket queue.
- Category: Data security
- HQ: New York, United States
- Founded: 2022
- Funding stage: Series A
- Total funding: $32.2M
- Investors: M13, Primary Venture Partners, Lerer Hippeau
- Signal: Raised $25M Series A led by M13, total funding $32.2M, November 2025
- URL: https://www.teleskope.ai
- Details: https://securitystartups.com/companies/teleskope

## TENEX.AI
AI-native MDR that triages every alert in under a minute, with humans on the loop.
- Category: Detection and response
- HQ: Sarasota, USA
- Founded: 2024
- Funding stage: Series B
- Total funding: $277M
- Investors: Crosspoint Capital Partners, Andreessen Horowitz, Shield Capital
- Signal: Raised $250M Series B led by Crosspoint, March 2026
- URL: https://tenex.ai
- Details: https://securitystartups.com/companies/tenex-ai

## Terra Security
Agentic pentest platform with a human in the loop across web, API, network, and AI surfaces.
- Category: Offensive and exposure
- HQ: Tel Aviv, Israel
- Founded: 2024
- Funding stage: Seed
- Total funding: $8M
- Investors: SYN Ventures
- Signal: Raised $8M (Q2 2025) to scale agentic continuous pentesting
- URL: https://www.terra.security
- Details: https://securitystartups.com/companies/terra-security

## ThreatLocker
Default-deny allowlisting that stops unapproved software and AI agents from running at all.
- Category: Endpoint and browser
- HQ: Orlando, USA
- Founded: 2017
- Funding stage: Series F
- Total funding: $480M
- Investors: Elephant, Arthur Ventures, D. E. Shaw Ventures, Koch Disruptive Technologies
- Signal: Raised $190M Series F led by Elephant, July 2026
- URL: https://www.threatlocker.com
- Details: https://securitystartups.com/companies/threatlocker

## Tigera
Calico-powered Kubernetes network security and microsegmentation, plus Lynx for governing AI agent calls on the cluster.
- Category: Cloud security
- HQ: San Francisco, United States
- Founded: 2016
- Funding stage: Series B
- Total funding: $65M
- Investors: Insight Partners, Madrona
- Signal: Shipped the Winter 2026 Calico Cloud release with an AI assistant and multi-cluster traffic observability, March 2026
- URL: https://www.tigera.io
- Details: https://securitystartups.com/companies/tigera

## Tines
Workflow automation that security teams actually own, now with agentic AI on top.
- Category: Detection and response
- HQ: Dublin, Ireland
- Founded: 2018
- Funding stage: Series C
- Total funding: $271M
- Investors: Goldman Sachs, SoftBank, Accel, Addition
- Signal: Raised $125M Series C at a $1.13B valuation, February 2025
- URL: https://www.tines.com
- Details: https://securitystartups.com/companies/tines

## Token Security
Machine-first identity security that finds every NHI, names an owner, and cuts leftover privilege.
- Category: Secrets and non-human identity
- HQ: Tel Aviv, Israel
- Founded: 2023
- Funding stage: Series A
- Total funding: $27M
- Investors: Notable Capital, TLV Partners
- Signal: Named to Rising in Cyber 2026 after a $20M Series A, May 2026
- URL: https://www.token.security
- Details: https://securitystartups.com/companies/token-security

## Torq
Hyperautomation platform turning SOAR playbooks into an agentic SOC.
- Category: Detection and response
- HQ: Tel Aviv, Israel
- Founded: 2020
- Funding stage: Series D
- Total funding: $332M
- Investors: Merlin Ventures, Insight Partners, Bessemer Venture Partners, Evolution Equity Partners
- Signal: Raised $140M Series D at a $1.2B valuation, January 2026
- URL: https://torq.io
- Details: https://securitystartups.com/companies/torq

## Truffle Security
Verified secret scanning that proves a leaked key still works, then helps you kill it.
- Category: Secrets and non-human identity
- HQ: San Francisco, United States
- Founded: 2021
- Funding stage: Series B
- Total funding: $40M+
- Investors: a16z, Intel Capital, Abstract Ventures
- Signal: Raised $25M Series B led by Intel Capital and a16z, November 2025
- URL: https://trufflesecurity.com
- Details: https://securitystartups.com/companies/truffle-security

## Unosecur
Agentless identity fabric for human, machine, and AI identities across hybrid cloud and on-prem.
- Category: Identity and access
- HQ: Berlin, Germany
- Founded: 2021
- Funding stage: Seed
- Total funding: $5M
- Investors: VentureFriends, DFF Ventures, Leo Capital
- Signal: Raised $5M seed led by VentureFriends and DFF Ventures, April 2025
- URL: https://www.unosecur.com
- Details: https://securitystartups.com/companies/unosecur

## Upwind
Runtime-first CNAPP that ranks cloud risk from what is actually running, not from a static CVE dump.
- Category: Cloud security
- HQ: San Francisco, United States
- Founded: 2022
- Funding stage: Series B
- Total funding: $430M
- Investors: Bessemer Venture Partners, Salesforce Ventures, Greylock, Craft Ventures
- Signal: Raised $250M Series B at a $1.5B valuation, January 2026
- URL: https://www.upwind.io
- Details: https://securitystartups.com/companies/upwind

## Veza
Access graph that shows what every identity can actually do, not just which group it sits in.
- Category: Identity and access
- HQ: Los Gatos, United States
- Founded: 2020
- Funding stage: Series D
- Total funding: $235M
- Investors: NEA, Accel, GV, True Ventures
- Signal: Raised $108M Series D at $808M valuation, April 2025
- URL: https://veza.com
- Details: https://securitystartups.com/companies/veza

## Vicarius
Vulnerability remediation that actually patches, not another scanner that files tickets.
- Category: Endpoint and browser
- HQ: New York, USA
- Founded: 2016
- Funding stage: Series B
- Total funding: $60M
- Investors: Bright Pixel Capital, AllegisCyber, JVP
- Signal: Named in Forrester's Q1 2026 Proactive Security Platforms Landscape
- URL: https://www.vicarius.io
- Details: https://securitystartups.com/companies/vicarius

## Vijil
Continuous trust tests so enterprise agents stay reliable after they leave the lab.
- Category: AI security
- HQ: Menlo Park, USA
- Founded: 2024
- Funding stage: Series A
- Total funding: $23M
- Investors: BrightMind Partners, Mayfield, Gradient Ventures
- Signal: Raised $17M Series A led by BrightMind Partners, November 2025
- URL: https://vijil.ai
- Details: https://securitystartups.com/companies/vijil

## Wallarm
Inline API and agent security that blocks abuse in real time instead of paging after the request lands.
- Category: API and runtime
- HQ: San Francisco, United States
- Founded: 2013
- Funding stage: Series C
- Total funding: $75M
- Investors: Toba Capital, Y Combinator, Partech
- Signal: Raised $55M Series C led by Toba Capital, July 2025
- URL: https://www.wallarm.com
- Details: https://securitystartups.com/companies/wallarm

## WitnessAI
Observe, control, and protect employees, models, apps, and agents from one AI security plane.
- Category: AI security
- HQ: Mountain View, USA
- Founded: 2023
- Funding stage: Series B
- Total funding: $86M
- Investors: Sound Ventures, GV, Ballistic Ventures, Samsung Ventures
- Signal: Raised $58M led by Sound Ventures, January 2026
- URL: https://witness.ai
- Details: https://securitystartups.com/companies/witnessai

## WorkOS
Enterprise identity APIs so product companies can ship SSO, SCIM, and audit without becoming an IAM vendor.
- Category: Identity and access
- HQ: San Francisco, United States
- Founded: 2019
- Funding stage: Series C
- Investors: Meritech, Sapphire, Greenoaks
- Signal: Raised $100M Series C at $2B valuation, March 2026
- URL: https://workos.com
- Details: https://securitystartups.com/companies/workos

## XM Cyber
Hybrid attack-path graph that shows how an identity, cloud, or on-prem foothold becomes a breach.
- Category: Offensive and exposure
- HQ: Tel Aviv, Israel
- Founded: 2016
- Funding stage: Series B
- Total funding: $49M
- Signal: Named a Challenger in the first Gartner Magic Quadrant for Exposure Assessment Platforms, 2025
- URL: https://xmcyber.com
- Details: https://securitystartups.com/companies/xm-cyber

## Xygeni
SCA plus malware and pipeline security for teams whose code is increasingly written by agents.
- Category: Software supply chain
- HQ: Pamplona, Spain
- Founded: 2021
- Funding stage: Seed
- Total funding: $4M
- Investors: Investing Profit Wisely
- Signal: Won Global Infosec awards for ASPM and GenAI application security, 2026
- URL: https://xygeni.io
- Details: https://securitystartups.com/companies/xygeni

## Zafran
CTEM that proves which CVEs are exploitable, then mitigates with the controls you already own.
- Category: Offensive and exposure
- HQ: New York, USA
- Founded: 2022
- Funding stage: Series C
- Total funding: $130M
- Investors: Menlo Ventures, Sequoia Capital, Cyberstarts
- Signal: Raised $60M Series C led by Menlo Ventures, December 2025
- URL: https://www.zafran.io
- Details: https://securitystartups.com/companies/zafran

## Zenity
Agent security that watches the decision, not just the prompt, across SaaS, cloud, and endpoint.
- Category: AI security
- HQ: New York, USA
- Founded: 2021
- Funding stage: Series C
- Total funding: $185M
- Investors: Norwest, SoftBank Vision Fund 2, Vertex Ventures, Intel Capital
- Signal: Raised $125M Series C led by Norwest, August 2026
- URL: https://zenity.io
- Details: https://securitystartups.com/companies/zenity

## ZeroPath
AI-native SAST for business logic, auth bypasses, and chained exploit paths, with generated patches.
- Category: Application security
- HQ: San Francisco, USA
- Founded: 2024
- Funding stage: Seed
- Investors: Y Combinator, SurgePoint Capital
- Signal: Named an RSAC 2026 Innovation Sandbox Top 10 finalist
- URL: https://zeropath.com
- Details: https://securitystartups.com/companies/zeropath