Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
LayerX
A browser-security and AI-usage-control vendor acquired by Akamai for about $205M and rebranded Akamai Workforce Protector.
Kodem Security
Application security platform using runtime intelligence in dynamic software composition analysis to determine which vulnerabilities are actually exploitable.
CodeLock
A DevSecOps startup building automated software-supply-chain integrity tooling that links every code change to a verifiable developer chain…
APIsec
AI-powered, continuous API security testing platform that models an application's behavior and generates real attacker-style exploits to validate…
build38
build38, based in Munich, Germany, builds mobile application shielding and in-app protection technology (App Shielding) that defends mobile…
Hacken
Tallinn-based blockchain security firm providing smart contract audits, penetration testing and proof-of-reserves services to web3 protocols and exchanges.
Cybeats
Cybeats builds SBOM Studio, a software bill of materials management and software supply chain security platform focused on…
Wabbi
Application security posture management (ASPM) platform that embeds continuous security testing and policy enforcement directly into the software…
Pynt
API security testing platform that discovers documented and shadow APIs from live traffic and runs context-aware, business-logic-focused security…
Equixly
Florence, Italy-based startup using autonomous AI agents to continuously penetration-test APIs for business-logic and authorization vulnerabilities.
Arcjet
Developer-first application security library that embeds bot detection, rate limiting, and AI/prompt-injection defenses directly into JavaScript and TypeScript…
Indusface
Indusface is an India-based application security vendor whose AppTrana platform delivers fully managed web application and API protection…
42Crunch
An API security platform that audits OpenAPI specifications for weaknesses and enforces those contracts at runtime to stop…
Security Journey
Developer secure-coding training platform with 800+ hands-on lessons and an AI-guided coding assistant, used by companies including HackerOne…
Grego AI
Miami startup using 'Deep Invariant Analysis' to hunt for software vulnerabilities that manual code review typically misses.
Cycode
Application security posture management platform covering code, pipelines and supply chain, with SAST added through its Bearer acquisition.
Codacy
Portuguese code quality and security platform combining static analysis, secret scanning and software composition analysis with newer AI…
Emproof
Emproof protects embedded software at the binary level against reverse engineering and exploitation, without requiring source code access…
DeepSource
Y Combinator-backed code review platform combining hybrid static analysis and AI to catch security vulnerabilities and code quality…
NightVision
NightVision is an application security startup providing AI-assisted dynamic testing that discovers and exploits API and web vulnerabilities…
Dedge Security
Madrid-based application security posture platform designed specifically for Web3 smart contracts and decentralized applications.
F5 (Application Delivery and Security Platform)
Seattle-based ADC leader whose BIG-IP and distributed platform protect apps and APIs from zero-days, DDoS, bot attacks, and…
Promon
Norwegian application shielding company protecting mobile, desktop and web apps against tampering, reverse engineering and repackaging attacks.
Ghost Security
Austin-based AI-native application and API security startup whose Exorcist agent automates API discovery and vulnerability remediation.