Stacklet

Stacklet, founded in 2019 by Travis Stanfield and Kapil Thangavelu and based in Arlington, Virginia, commercializes Cloud Custodian, the open-source cloud governance-as-code project the founders originally created at Capital One. The Stacklet platform lets cloud, security and FinOps teams write policy-as-code rules that continuously scan AWS, Azure and Google Cloud resources for security misconfigurations, compliance drift and wasted spend, then automatically remediate or alert on violations. Because the underlying engine is open source and widely adopted independent of Stacklet’s commercial product, the company has built credibility with cloud engineering teams that might otherwise be skeptical of a proprietary governance tool.

The company has raised roughly $36.5 million to date, most recently a $14.5 million Series B in June 2024 led by SineWave Ventures with participation from Capital One Ventures, Foundation Capital and others — notable in that Capital One is both an investor and the origin point of the underlying Cloud Custodian technology. In 2026 Stacklet introduced Juno, an agentic AI layer intended to move customers from automated remediation toward more autonomous policy enforcement, and expanded coverage to govern AI-specific cloud resources such as Amazon Bedrock, Google Vertex AI and Azure AI Foundry.

Stacklet sits in the cloud security posture and governance space alongside larger CSPM vendors, differentiated by its open-source policy engine, developer-first policy-as-code approach, and focus on unifying security, cost and operational governance in a single rule framework rather than treating them as separate tools. At roughly 11-50 employees, it remains a small player relative to the CNAPP incumbents it competes against for enterprise cloud governance budget.