Corridor

Market position

Corridor is one of a number of AI-focused security startups raising capital during a venture funding boom in the AI cyber market; Forbes cites comparable rounds for Tenzai (valued at $330 million with a $75 million seed) and Irregular (a $450 million company that raised $80 million). Corridor's $200 million valuation roughly one year after founding places it in that cohort. Its category is described as AI security / DevSecOps.

Corridor positions itself as preventive rather than reactive: instead of scanning code after it is written, it feeds security context and rules to coding agents at generation time and reviews pull requests automatically, addressing what the company describes as traditional AppSec's slow reviews and high false-positive rates. Its lead investor characterizes the platform as a security and management system designed specifically for code generation that relocates where security sits in the development process, and Conviction's Mike Vernal cites native placement in existing developer workflows as the source of adoption. The founders claim their system finds vulnerabilities better than human reviewers, a claim echoed by Sublime Security's CSO, who says Corridor caught severe vulnerabilities that would be extremely difficult for a human reviewer to find due to complexity.

Technology

The platform is an AI system that observes both AI agents and human developers as they write code and alerts on vulnerabilities in real time. Components include guardrails that inject security context and rules into AI coding agents, automated pull-request scanning with findings and remediation guidance, codebase analysis producing severity-rated findings for vulnerabilities and weak configurations, and observability over AI-generated code and policy compliance. Integrations span CLI agents (Claude Code, Codex, Factory), editors (VS Code, Cursor, Devin Desktop), GitHub Copilot, and GitHub repositories.

Go-to-market

Corridor distributes through developer-workflow entry points: a self-serve sign-in and GitHub repository connection, one-line CLI installers, and marketplace-style extensions for VS Code, Cursor and Devin Desktop, with documentation claiming setup in under five minutes and team invitation flows. It also partners with AI coding platforms such as Cursor and Factory to embed its security capabilities directly into those environments. Series A proceeds are allocated in part to expanding research and sales teams.

Engineering and security teams at companies producing large volumes of AI-generated code, spanning expert developers supervising autonomous coding agents and non-technical sales or marketing teams building internal applications with AI. Named customers are AI customer service startup Pylon and AI email security company Sublime Security; the customer base is described as a mix of AI coding providers and security companies.

Geography

Headquartered in San Francisco, California. No other locations are described in the sources.

History

The company traces to a November 2024 phone call in which Jack Cable proposed to Ashwin Ramaswami that they start a company, the day after Ramaswami lost a Georgia State Senate race. Two months later, in early 2025, they launched Corridor. Cable had worked on election cybersecurity at CISA beginning in 2020 and went on to lead the agency's Secure By Design initiative, working with companies such as Microsoft and Google, leaving DHS in January 2025; prior to government he was a bug hunter credited with identifying over 350 vulnerabilities in software from companies including Google and Facebook and in government systems including the Department of Defense. Ramaswami also worked on election security at CISA, left in 2023 for a tech policy role at Schmidt Futures, and then ran for office. During 2025 the company recruited former Facebook CISO Alex Stamos, who is described as CPO, and later added Joel Wallenstrom, former CEO of Wickr, as general manager. In March 2026 Corridor announced a $25 million Series A at a $200 million valuation.

Risks & controversies

The sources do not report controversies. Contextual risk factors noted include the reliability of AI-generated code — a Veracode study cited by Forbes found all major AI models still regularly introduce vulnerabilities in basic coding tasks, with OpenAI's GPT-5 including a known vulnerability in one in four coding tasks — and heavy competition and valuation inflation in the AI cybersecurity funding boom. Corridor's own documentation notes its assistant responses are AI-generated and may contain mistakes.