Alma Security

Alma Security is a New York-based application security startup, founded in 2023 by Bar Dvir and Ben Grossmann, building runtime protection focused on business-logic and data-layer risks rather than classic code vulnerabilities. Its platform instruments the application runtime — APIs, microservices, internal service-to-service communication, and databases — to generate context-specific telemetry, build automatic threat models, and flag data-leakage and logic-abuse patterns that static or perimeter-based tools typically miss.

The company pitches fast time-to-value, claiming one-click deployment and runtime visibility within about ten minutes, which targets a real adoption friction point in application security: many runtime and API security tools require substantial instrumentation or code changes before they produce useful signal. Alma has raised $5.5 million in a single disclosed round from 645 Ventures, putting it firmly in seed-stage territory with a small team (11-50 employees) and limited public track record.

As a two-year-old company, Alma Security’s core claims — deployment speed, detection breadth across the application layer, and business-logic-specific threat modeling — have not yet been validated by named enterprise customers, third-party benchmarks, or public incident case studies in available reporting. It competes in a crowded runtime and API security space against better-capitalized players, and its differentiation (business-logic and data-flow focus, versus pure API-schema or WAF-style protection) is a real architectural choice worth evaluating on its own technical merits, but buyers should treat efficacy claims as unproven until validated in their own environment.