Skip to content

Dam Secure

AI-native AppSec platform built to catch logic-level security flaws in AI/LLM-generated code that traditional scanners miss.

Visit Website ↗ + Add to Compare Claim This Company
47/100Emerging / Unranked

Overview

Dam Secure was founded in 2025 by Patrick Collins and Simon Harloff, both veterans of Zip Payments and Secure Code Warrior (Collins also previously built and exited mobile-tech company 5th Finger). The company, dual-based in Sydney, Australia and San Francisco, is built specifically around the premise that AI coding assistants (GitHub Copilot, Claude, Cursor) routinely produce code that passes functional tests but fails basic security expectations — so-called “logic gaps.” Its platform wraps around existing AI coding tools, applying vulnerability scanning, organization-specific code security guardrails, a persistent “Secure Knowledge Graph” of security context, and IDE/CI-CD integrations to catch issues before and after an AI agent writes code. It currently supports Java, C#, TypeScript, JavaScript, Python, and Go.

In January 2026, Dam Secure closed a seed round of roughly US$4M (reported as A$6.1M in Australian coverage) led by Paladin Capital Group, a Washington D.C.-based cyber/AI investor whose managing director Mourad Yesayan joined the board. The company names a small set of early customers (Dovetail, Pluss Communities, Skip Loans, RecordPoint, Zepto, and Serval) on its site. Dam Secure’s marketing claims specific performance figures — preventing “20% of vulnerabilities ever being generated,” detecting “40% more existing vulns,” shipping PRs “32% faster,” and surfacing “172% more business logic flaws” than conventional scanners, plus a sub-10% false-positive rate versus an asserted ~50% industry average — all of which are vendor-published and have not been independently verified.

For a CISO, Dam Secure is pitched as a guardrail purpose-built for the AI-generated-code era rather than a general SAST tool retrofitted for it. Its differentiation is narrow (founders’ direct product-security pedigree from Secure Code Warrior) but the company is only months old, with a single small funding round and a handful of named customers, placing it squarely in the earliest, least-proven tier of this market alongside several similarly positioned competitors.

Innovation Matrix Assessment

Innovation Velocity 6/10

A sub-one-year-old company has already shipped a multi-feature platform (vulnerability scanning, guardrails, Secure Knowledge Graph, Secure Spec, IDE/CI-CD integrations) and secured institutional seed funding, indicating fast execution, though it is too early to show repeatable iteration.

Operational Value 6/10

Founders' direct product-security backgrounds (Secure Code Warrior, Zip Payments) lend credibility to the operational premise of wrapping guardrails around AI coding tools, a real and growing CISO concern.

Market Momentum 4/10

One seed round (~$4M) and a handful of named customers (Dovetail, Pluss Communities, Skip Loans, RecordPoint, Zepto, Serval) is genuine but very early traction for a company founded in 2025.

Category Disruption 3/10

Addresses the same AI-generated-code logic-gap problem as several other new entrants (DryRun Security, Staris) with no independently evidenced technical edge over them yet.

Real-World Efficacy 3/10

All performance statistics (vulnerability prevention/detection rates, false-positive rate, PR speed gains) are vendor-self-reported with no independent test, audit, or named-incident evidence found.

Enduring Relevance 6/10

The underlying problem — AI coding assistants generating functionally-correct but insecure code — is widely documented and likely to persist and grow over the next several years.

Why CISOs Should Care

Offers a guardrail layer purpose-built for organizations rapidly adopting Copilot/Claude/Cursor-style AI coding tools, aiming to catch logic-level security gaps before merge.

What Makes It Different

A 'Secure Knowledge Graph' that persists organizational security context across an AI agent's planning and coding steps, rather than scanning finished diffs in isolation.

The Matrix Verdict

47/100 — EMERGING / UNRANKED

A very early-stage entrant with credible founder pedigree and a real problem thesis, but minimal independent evidence of efficacy or market traction to date.

Editorial Note: Claims vs. Verified Findings

Specific efficacy statistics (20% fewer vulnerabilities generated, 40% more detected, 32% faster PRs, 172% more business-logic flaws found, <10% false-positive rate) are vendor marketing claims that could not be independently verified; treated here as unverified claims, not established facts.

Sources