Wabbi

Wabbi builds an application security posture management (ASPM) platform designed to run continuously inside the software development lifecycle rather than as a periodic scan bolted onto release cycles. The platform aggregates findings from existing SAST, DAST, SCA, and secrets-scanning tools, correlates them against a risk index per application, and enforces security policy gates directly in CI/CD pipelines so vulnerabilities are caught and prioritized before code ships rather than after.

Founded in 2018 and headquartered in Boston, Massachusetts, Wabbi is a small, venture-backed team that raised an oversubscribed seed round led by Mendoza Ventures with participation from Cisco Investments in 2021. The company has positioned itself specifically around orchestration and prioritization — correlating and de-duplicating output from a fragmented AppSec tool stack — rather than replacing scanners outright, which lowers the switching cost for security teams already invested in existing tooling.

Wabbi was named a Vendor to Watch in IDC MarketScape’s 2025 ASPM assessment, an early signal of analyst attention in a category that has become crowded as ASPM emerged as its own market segment. As a small company competing against both dedicated ASPM vendors and platform incumbents adding posture-management modules, its differentiation will depend on continued execution and enterprise traction rather than brand recognition alone.