DevSecOps Startups

GitLab is an intelligent orchestration platform for DevSecOps that enables teams and AI agents to collaborate on the full software development lifecycle, from planning through deployment, with integrated security and compliance capabilities.

25 investors

Armory provides continuous deployment software that helps development teams automate and manage application releases across their infrastructure at scale, with built-in safety and security controls.

15 investors

Doppler provides a secrets management platform for developers, DevOps, and security teams to securely manage sensitive credentials and configuration data within their development workflows.

11 investors

Mezmo provides an intelligence layer for production AI that enables platform engineering and SRE teams to deploy reliable AI-powered workflows in production. The company pairs a control plane (AURA) with an optimized data plane to support use cases like incident detection, root cause analysis, and automated operational workflows.

9 investors

Speedscale provides API testing and development tools that help organizations test and debug applications more efficiently. The platform serves software development teams and enterprises looking to improve their development workflows.

8 investors

Teleport is an infrastructure identity platform that modernizes identity, access, and policy for computing environments. The company helps engineering teams reduce complexity and attack surface by simplifying trusted computing for critical infrastructure.

7 investors

Infracost provides cloud cost management and FinOps tools that help engineering teams estimate cloud costs and optimize spending across AWS, Azure, and GCP. The platform serves enterprise customers and development teams seeking to reduce cloud infrastructure expenses.

6 investors

Sqreen provides runtime application security monitoring for enterprises, analyzing code execution in real time to protect applications, APIs, and microservices from attacks while maintaining performance.

6 investors

Tolmo develops autonomous security agents that continuously monitor and identify vulnerabilities in production applications at cloud scale. The platform serves security teams and engineering organizations to automate runtime security operations.

6 investors

Aptible provides cloud infrastructure and compliance management platform for developers in regulated industries including healthcare, financial services, and life sciences. The platform abstracts away complexity around HIPAA, HITRUST, SOC 2, and GDPR compliance so engineering teams can focus on building applications.

5 investors

Bitrise is a mobile DevOps platform that provides continuous integration and deployment workflows for mobile app development. The company offers free resources to nonprofits, NGOs, and charities for their mobile app development needs.

5 investors

Cloudanix provides cloud security solutions that help engineering teams identify and remediate security findings across their cloud infrastructure. The platform maps findings to identity, assets, and blast radius with associated remediation guidance.

4 investors

Fig develops autocomplete software, visual applications, and keyboard shortcuts for terminal interfaces, designed to make command-line tools more usable for both novice and experienced developers.

4 investors

InsForge is an agent-native cloud infrastructure platform that provides backend services (authentication, database, storage, compute, AI model gateway, and more) designed specifically for AI coding agents to operate end-to-end. The platform targets solo developers and small teams building applications without infrastructure complexity.

4 investors

Mattermost is a secure team collaboration platform designed to complement Microsoft Teams and Microsoft 365, providing on-premises or private cloud deployment with advanced customization, data control, and integration capabilities for mission-critical and highly regulated environments.

4 investors

Alter provides an authentication layer and vault for AI agents to securely access third-party APIs and SaaS platforms. The platform handles OAuth tokens, API keys, fine-grained access policies, and audit logging through a single SDK.

3 investors

Dagger provides a platform for test orchestration with a runtime, system API, and SDKs across multiple languages. It serves developers building and automating end-to-end tests.

3 investors

Hoop.dev provides a security gateway that inspects and controls database queries, API calls, and commands at the protocol layer, masking sensitive data and blocking risky operations before they execute. The tool operates as middleware for engineering teams to prevent unauthorized data access and enforce security policies without requiring code changes or SDK installation.

3 investors

Infield provides software to automate the management and upgrading of open source packages within applications, helping development teams reduce security vulnerabilities and dependency risks.

3 investors

Massdriver provides infrastructure automation and management for cloud-native organizations, enabling developers and operations teams to provision and manage infrastructure with ease while maintaining compliance and operational standards. The platform abstracts away complexity by offering standardized, consumable building blocks that handle Day Two operations including monitoring, scaling, and compliance out of the box.

3 investors

Metalware provides autonomous binary security testing for firmware without requiring source code, hardware, or test harnesses. The platform finds vulnerabilities and crashes in embedded systems for automotive, aerospace, medical, and critical infrastructure sectors.

3 investors

Netmaker provides a WireGuard-based VPN and secure connectivity platform for managing networks across cloud, on-premises, and edge environments. It serves organizations needing encrypted, peer-to-peer network connectivity with centralized orchestration and remote access capabilities.

3 investors

BitPatrol provides real-time secret detection and credential scanning for developer codebases using machine learning. The platform integrates into CI/CD pipelines to identify and alert on exposed secrets, tokens, and keys for software development teams.

2 investors

Firezone provides zero-trust network access software built on WireGuard that secures connections to corporate applications and infrastructure. The product serves enterprise organizations and teams requiring secure, remote access to internal systems.

2 investors