Scantist

Expanded from its original open-source SCA product into autonomous, agentic penetration testing (PAIStrike) and AI runtime security governance (AIDefender) over roughly a decade — a real pattern of building new capability on the same research base.

Delivers genuine operational value across two distinct needs: reducing open-source supply-chain risk and, more recently, governing the security of AI systems themselves as teams adopt them.

Raised a disclosed $12.6M from credible investors including GSR Ventures and Singtel Innov8, plus multiple Singapore government grants and innovation-program recognition — solid evidence, though modest next to larger US/Israeli SCA and AI-security peers.

Software composition analysis is a mature, competitive category already served by vendors like Snyk and Black Duck; Scantist's newer autonomous-pentesting and AI-security-governance products are more novel but not yet proven as category-redefining.

Academic origin (an NTU security research lab) and multiple government grant awards lend credibility, but no independent, named enterprise case study with concrete efficacy metrics was found.

Spans both a persistent need (open-source software supply chain security) and a fast-growing one (AI system security), giving the company durable relevance as both concerns continue to matter.