Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
MindFort
Y Combinator-backed swarms of AI agents that continuously attack live applications and ship validated exploits instead of scanner…
Seal Security
Generates backported, drop-in security patches for open source vulnerabilities so teams can remediate CVEs without forced major-version upgrades.
OpenZeppelin
Widely used smart contract security firm providing audits, a standard open-source contracts library, and continuous monitoring for blockchain…
CHEQ
A Tel Aviv 'go-to-market security' vendor blocking bots and invalid traffic from corrupting ad spend, lead pipelines, and…
Patchstack
Estonia-based application security vendor that runs a WordPress vulnerability database, coordinated disclosure program, and virtual patching to close…
IriusRisk
IriusRisk, headquartered in Huesca, Spain, built an automated threat modeling platform used by application security teams to identify…
Cleafy
Milan-based real-time banking fraud detection vendor protecting mobile and web banking sessions from malware, overlay attacks, and social-engineering…
Protectt.ai
Mumbai-based mobile security vendor whose runtime app protection and fraud prevention tools serve Indian banks and fintechs under…
Secure Code Warrior
Developer-first secure coding platform that builds security skills through hands-on training, aiming to prevent vulnerabilities before they ever…
StackHawk
A CI/CD-embedded API and application security testing platform built on ZAP, designed to catch vulnerabilities as developers write…
Cytix
Manchester-based continuous offensive security testing platform that analyzes code changes in real time to predict and test for…
Star Lab
Embedded-systems security software vendor, now part of Mercury Systems, providing secure boot, Linux hardening, and anti-tamper protection for…
Quantstamp
Y Combinator-backed blockchain security firm whose smart contract audits have covered protocols securing hundreds of billions in value.
Red Balloon Security
Red Balloon Security builds firmware reverse-engineering and embedded-device defense tools, including the OFRAK binary analysis platform, grown out…
CertiK
Large-scale Web3 security platform combining formal verification, smart contract audits and compliance tooling, reporting a $2 billion valuation…
DryRun Security
AI-native application security platform that reviews pull requests with full code context to catch logic-level vulnerabilities SAST tools…
Conviso Application Security
A Brazilian application security specialist, formed from Conviso's 2020 acquisition of DAST/WAF vendor N-Stalker, offering a unified platform…
Seraphic (now part of CrowdStrike)
Browser-native security technology that blocks phishing, malware, and browser-based attacks across Chrome, Edge, Safari, and Firefox, acquired by…
OpenText
A public information-management giant bundling Fortify, ArcSight, NetIQ, and Webroot under one security portfolio.
Pixee
AI-powered application security platform that automatically triages vulnerability findings and generates production-ready code fixes directly into GitHub, GitLab,…
eShard
French security testing vendor whose esDynamic platform finds side-channel, fault-injection, and software vulnerabilities in chips, embedded systems, and…
Prime Security
A Series A New York startup using agentic AI to catch security design flaws before code is written.
Cycode
Application security posture management platform covering code, pipelines and supply chain, with SAST added through its Bearer acquisition.
CodeIntegrity
Runtime guardrail platform for production AI agents, built by offensive-security researchers who publicly compromised the Notion app in…