Apolicy
Acquired2 known investors
Sysdig offers cloud-native application protection (CNAPP) with real-time runtime security, threat detection, and vulnerability management for development and security teams. Its offering includes an agent that runs inside AI coding platforms to embed programmable security into developer workflows.
Also known as Apolicy.io Β· Apolicy.IO, Inc.
Investors Β· 2
Also in the syndicate Β· 1
Company profile
researched Aug 2026Apolicy was a cloud-native security and compliance company that built a policy orchestration platform for Kubernetes and cloud infrastructure. The platform automated risk assessment, policy management, and remediation across the software development process, aiming to secure Kubernetes environments from source to production through risk identification, remediation and policy enforcement.
Its infrastructure-as-code (IaC) security technology validated configuration files against production environments so the two remained identical, enforced compliance and governance by applying policies as code, and detected runtime drift. Detected drift could be mapped back to the originating IaC source file and auto-remediated through a pull request. The platform also consolidated alerts by identifying which production instances were affected by a given IaC error, enabling risk-based prioritization using application context. Policies were built on the Open Policy Agent (OPA) open-source standard and could be enforced through a Kubernetes admission controller.
The company operated from the United States and Israel and was acquired by Sysdig in 2021, with its capabilities becoming part of the Sysdig Secure DevOps Platform.
Founding story
Apolicy was founded in 2019 by Maor Goldberg (CEO), Eran Leib (VP of Product) and Shlomi Wexler (VP of Development), a team that had previously founded Whitebox Security, which SailPoint Technologies acquired in 2015. The founders stated they created the company because reliance on industry standards and benchmarks with a one-size-fits-all approach to setting and enforcing Kubernetes policies and guardrails was insufficient, and set out to deliver prescriptive risk analysis, policy orchestration and remediation in a unified platform.
Business model
Apolicy sold a policy management and orchestration platform to organizations running cloud-native infrastructure; one source describes the revenue model as subscription-based with pricing tiers scaled to different organizational needs. Following the 2021 acquisition, its product was folded into the Sysdig Secure DevOps Platform and is no longer sold standalone.
Subscription-based access to its policy management platform across pricing tiers, per one data provider's profile.
Traction
Apolicy raised $3.5 million in seed funding, primarily from StageOne Ventures, and said at the time that it was supporting demand from a growing user base. Financial and customer metrics were not disclosed, and the acquisition price was not disclosed.
Latest developments
Sysdig announced its intent to acquire Apolicy on July 20, 2021, with closing expected in about four weeks and terms undisclosed. The founding team joined Sysdig and the Apolicy offering was incorporated into the Sysdig Secure DevOps Platform, which addresses security for containers, Kubernetes and public cloud infrastructure.
βΈFull profile β market position, technology, go-to-market, geography, history
Market position
Apolicy operated in the cloud-native application protection and IaC security segment. Its investor described the team as setting out to disrupt the cloud-native application protection space. The acquisition paralleled a similar move by Sysdig competitor Aqua Security, which acquired tfsec to add IaC security scanning.
According to Sysdig's CEO, Apolicy's approach went beyond scanning IaC files: it could also remediate and fix detected issues automatically, and it was built on the Open Policy Agent (OPA) standard, which Sysdig viewed as the emerging default for expressing compliance and security policy. Its ability to map a runtime deviation back to the specific IaC source file and fix it with a pull request was cited as a distinguishing capability relative to scan-only IaC tools.
Technology
The platform was built on Open Policy Agent (OPA), an open-source policy standard, and applied policy-as-code across multiple IaC environments including tools such as Terraform and CloudFormation. It enforced OPA-based policies via a Kubernetes admission controller, detected runtime drift and mapped it to the source configuration file for auto-remediation via pull request, and prioritized fixes by correlating IaC errors with the affected production instances.
Go-to-market
The company sold to cloud platform, DevOps and security teams adopting infrastructure-as-code and GitOps practices, and said at its seed announcement that it would use the funding to accelerate product development and support demand from a growing user base.
Organizations running Kubernetes and public cloud infrastructure, specifically developer, DevOps and security teams responsible for cloud configuration risk, compliance and governance.
Geography
Apolicy operated in the United States and Israel; one data provider lists the company as headquartered in San Francisco, California, while press coverage of the acquisition describes it as an Israeli company.
History
Apolicy was founded in 2019 in the United States and Israel by Maor Goldberg, Eran Leib and Shlomi Wexler, who had previously founded Whitebox Security, acquired by SailPoint Technologies in 2015. StageOne Ventures backed the team in late 2019 and led a $3.5 million seed round announced on June 18, 2020, at which point the company also unveiled its cloud-native policy platform. On July 20, 2021, Sysdig announced its intent to acquire Apolicy for an undisclosed sum, with the deal expected to close in roughly four weeks; the three founders joined Sysdig and the Apolicy product was incorporated into the Sysdig Secure DevOps Platform.
Compiled by commissioned research from 7 cited public sources β announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed β not independently audited.
Timeline Β· 3
launches, deals, and filingsSysdig announced its intent to acquire Apolicy to add infrastructure-as-code security with auto-remediation to the Sysdig Secure DevOps Platform. The price was not disclosed and the deal was expected to close in about four weeks. Founders Maor Goldberg (CEO), Eran Leib (VP Product Management) and Shlomi Wexler (VP R&D) were to join Sysdig, with Apolicy's product incorporated into the Sysdig Secure DevOps Platform.
Apolicy announced a $3.5 million seed round from StageOne Ventures and private investors from the information security sector, alongside the unveiling of its policy platform for cloud-native environments. Proceeds were earmarked for product development and supporting demand from its user base.
$3.5M source β
Alongside its seed funding announcement, Apolicy introduced a cloud-native policy orchestration platform automating risk assessment, policy management and remediation across the development process.
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
βΈResearch sources Β· 7
primary sources listed
- Apolicyapolicy.io Β· web
7 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Apolicy do?
- Israeli-American maker of a Kubernetes and infrastructure-as-code policy orchestration platform, acquired by Sysdig in 2021.
- Who are Apolicy's investors?
- Apolicy's investors include StageOne Ventures.