RapidFort

Market position

The company describes itself as a technical leader in software supply chain security and reports inclusion in Gartner research; its site references a 2026 Gartner Magic Quadrant for Software Supply Chain Security report. An investor describes it as "a leader in Software Supply Chain Security." It reported surpassing 100 customers in October 2025 and won the 2025 CyberShark Pitch Competition [2][4][6].

Stated differentiators are runtime-validated hardening that removes unused components without requiring code, OS or pipeline changes; curated images built on mainstream LTS Linux distributions to avoid proprietary OS vendor lock-in; patched rather than daily-rebuilt images intended to remain production stable; coverage of both first-party and third-party components; and integrated STIG/CIS benchmark support for regulated and federal environments [0][1][3].

Technology

The platform combines static vulnerability scanning with runtime instrumentation. Profiling captures which binaries, libraries and packages actually execute in production, generating a Runtime Bill of Materials (RBOM) that drives automated removal of dormant or unreachable components from container images; the company states profiling overhead is under 1%. Curated images are built and continuously patched on LTS Linux distributions rather than a proprietary OS, and hardened images are rebuilt every 24 hours. Compliance tooling evaluates images against STIG, CIS and FIPS-related benchmarks and produces remediation guidance and audit evidence [0][1][3].

Go-to-market

Go-to-market is direct enterprise and federal sales supported by partners, conference presence (for example a booth and session at the Billington CyberSecurity Summit 2026) and content assets such as webinars, blogs, an ROI calculator and analyst-report offers. Following its Series A the company stated it would scale sales, marketing and partnerships, deepen integrations, and improve onboarding for regulated-industry deployments [0][1][2][5].

Development, DevOps and security teams at software vendors and enterprises running containerized applications, with industry pages for finance, healthcare, public sector, AI and software. The company emphasizes regulated and mission-critical environments, including federal customers and vendors serving classified infrastructure, and says its customer base ranges from startups to Fortune 500 enterprises [0][1][2][5].

Geography

Headquarters address listed as 440 North Wolfe Road, Sunnyvale, CA 94085; one funding report datelines the company as San Francisco, CA-based. Sources describe federal and enterprise customers in the United States; no other offices are identified [2][3][5].

History

The company's press archive references an earlier $8.5M seed round for its attack surface management platform, and the February 2026 Series A release names Felicis Ventures as the prior lead investor. Publicly documented milestones include the 2025 CyberShark Pitch Competition win (October 2025), reported customer and image-count milestones plus Gartner research inclusion (October 2025), The Modern Data Company deployment (November 2025), and the $42M Series A (February 2026) [4][5][6].

Risks & controversies

No controversies are reported in the sources. Most performance figures (99.9% CVE elimination, 90% attack surface reduction, cost and release-time savings, cumulative package and image counts) are company-published claims without independent verification, and the curated-image count differs between the October 2025 announcement (15,000) and the current website (35,000+), reflecting different points in time [0][1][6].