DevSecOps Startups

GitLab is an intelligent orchestration platform for DevSecOps that enables teams and AI agents to collaborate on the full software development lifecycle, from planning through deployment, with integrated security and compliance capabilities.

24 investors

Armory provides continuous deployment software that helps development teams automate and manage application releases across their infrastructure at scale, with built-in safety and security controls.

10 investors

Speedscale provides API testing and development tools that help organizations test and debug applications more efficiently. The platform serves software development teams and enterprises looking to improve their development workflows.

7 investors

Doppler provides a secrets management platform for developers, DevOps, and security teams to securely manage sensitive credentials and configuration data within their development workflows.

6 investors

Bitrise is a mobile DevOps platform that provides continuous integration and deployment workflows for mobile app development. The company offers free resources to nonprofits, NGOs, and charities for their mobile app development needs.

5 investors

Infracost provides cloud cost management and FinOps tools that help engineering teams estimate cloud costs and optimize spending across AWS, Azure, and GCP. The platform serves enterprise customers and development teams seeking to reduce cloud infrastructure expenses.

5 investors

Mezmo provides an intelligence layer for production AI that enables platform engineering and SRE teams to deploy reliable AI-powered workflows in production. The company pairs a control plane (AURA) with an optimized data plane to support use cases like incident detection, root cause analysis, and automated operational workflows.

5 investors

Cloudanix provides cloud security solutions that help engineering teams identify and remediate security findings across their cloud infrastructure. The platform maps findings to identity, assets, and blast radius with associated remediation guidance.

4 investors

Sqreen provides runtime application security monitoring for enterprises, analyzing code execution in real time to protect applications, APIs, and microservices from attacks while maintaining performance.

4 investors

Teleport is an infrastructure identity platform that modernizes identity, access, and policy for computing environments. The company helps engineering teams reduce complexity and attack surface by simplifying trusted computing for critical infrastructure.

4 investors

Dagger provides a platform for test orchestration with a runtime, system API, and SDKs across multiple languages. It serves developers building and automating end-to-end tests.

3 investors

Hoop.dev provides a security gateway that inspects and controls database queries, API calls, and commands at the protocol layer, masking sensitive data and blocking risky operations before they execute. The tool operates as middleware for engineering teams to prevent unauthorized data access and enforce security policies without requiring code changes or SDK installation.

3 investors

Mattermost is a secure team collaboration platform designed to complement Microsoft Teams and Microsoft 365, providing on-premises or private cloud deployment with advanced customization, data control, and integration capabilities for mission-critical and highly regulated environments.

3 investors

Tolmo develops autonomous security agents that continuously monitor and identify vulnerabilities in production applications at cloud scale. The platform serves security teams and engineering organizations to automate runtime security operations.

3 investors

Alter provides an authentication layer and vault for AI agents to securely access third-party APIs and SaaS platforms. The platform handles OAuth tokens, API keys, fine-grained access policies, and audit logging through a single SDK.

2 investors

Aptible provides cloud infrastructure and compliance management platform for developers in regulated industries including healthcare, financial services, and life sciences. The platform abstracts away complexity around HIPAA, HITRUST, SOC 2, and GDPR compliance so engineering teams can focus on building applications.

2 investors

Fig develops autocomplete software, visual applications, and keyboard shortcuts for terminal interfaces, designed to make command-line tools more usable for both novice and experienced developers.

2 investors

Foxpass provides cloud-based PKI and RADIUS services that enable zero-trust authentication for Wi-Fi and VPN connections using identity and certificate-based methods. The platform serves enterprises seeking simplified network access control without on-premise hardware or local servers.

2 investors

Massdriver provides infrastructure automation and management for cloud-native organizations, enabling developers and operations teams to provision and manage infrastructure with ease while maintaining compliance and operational standards. The platform abstracts away complexity by offering standardized, consumable building blocks that handle Day Two operations including monitoring, scaling, and compliance out of the box.

2 investors

Nestybox develops a container runtime called Sysbox that integrates with Docker and Kubernetes to allow containers to function with VM-like isolation and flexibility. The software targets enterprises seeking a more cost-effective and portable alternative to traditional virtual machines.

2 investors

BitPatrol provides real-time secret detection and credential scanning for developer codebases using machine learning. The platform integrates into CI/CD pipelines to identify and alert on exposed secrets, tokens, and keys for software development teams.

1 investor

CryptoSeal offers VPN services to users seeking private network access.

1 investor

EdgeBit monitors software dependencies and supply chain risk in real time by cross-referencing build pipelines and server infrastructure with multiple data sources. The platform helps security teams prioritize vulnerability investigation for application dependencies.

1 investor

Firezone provides zero-trust network access software built on WireGuard that secures connections to corporate applications and infrastructure. The product serves enterprise organizations and teams requiring secure, remote access to internal systems.

1 investor