DevSecOps Startups

GitLab is an intelligent orchestration platform for DevSecOps that enables teams and AI agents to collaborate on the full software development lifecycle, from planning through deployment, with integrated security and compliance capabilities.

27 investors

Armory provides continuous deployment software that helps development teams deploy applications reliably and securely at scale. It targets developers and engineering teams looking to reduce time-to-market and deployment-related issues.

16 investors

Doppler provides a centralized secrets management platform that serves as a single source of truth for secrets and configuration across local development through production. It targets development and engineering teams working across any language, stack, or infrastructure, helping automate security and prevent configuration drift.

11 investors

Mezmo (formerly LogDNA) is an observability platform that ingests, processes, and routes log data for enterprises, supporting application development, delivery, security, and compliance use cases. It helps engineering teams get more value from their observability data across different sources, destinations, and scales.

9 investors

Speedscale provides API testing and development tools that help organizations test and debug applications more efficiently. The platform serves software development teams and enterprises looking to improve their development workflows.

8 investors

Teleport provides an identity platform that unifies identities for humans, machines, and AI to secure access to production infrastructure and defend against identity-based attacks. It is aimed at engineering teams managing distributed infrastructure.

7 investors

Aptible offers a Platform as a Service that lets development teams deploy and run applications without managing their own infrastructure on AWS, GCP, or Azure. Its secure, compliant, and scalable platform targets developers at companies of all stages, from startups to publicly traded and unicorn companies.

6 investors

Fig develops autocomplete software, visual applications, and keyboard shortcuts for terminal interfaces, designed to make command-line tools more usable for both novice and experienced developers.

6 investors

Infracost provides cloud cost management and FinOps tools that help engineering teams estimate cloud costs and optimize spending across AWS, Azure, and GCP. The platform serves enterprise customers and development teams seeking to reduce cloud infrastructure expenses.

6 investors

InsForge is an agent-native cloud infrastructure platform that provides backend services (authentication, database, storage, compute, AI model gateway, and more) designed specifically for AI coding agents to operate end-to-end. The platform targets solo developers and small teams building applications without infrastructure complexity.

6 investors

Sqreen offers an application security platform that protects, observes, and tests applications, APIs, and microservices by analyzing in-app execution in real time. It serves enterprises, with more than 800 organizations using the product.

6 investors

Tolmo develops autonomous security agents that continuously monitor and identify vulnerabilities in production applications at cloud scale. The platform serves security teams and engineering organizations to automate runtime security operations.

6 investors

Bitrise provides hosted continuous integration and delivery for mobile app development, letting teams automate building, testing, and deployment through a visual workflow editor with reusable, open-source steps and service integrations. It serves mobile developers, testers, project managers, and their clients.

5 investors

Alter provides an authentication layer and vault for AI agents to securely access third-party APIs and SaaS platforms. The platform handles OAuth tokens, API keys, fine-grained access policies, and audit logging through a single SDK.

4 investors

Cloudanix provides cloud security solutions that help engineering teams identify and remediate security findings across their cloud infrastructure. The platform maps findings to identity, assets, and blast radius with associated remediation guidance.

4 investors

Mattermost offers a self-hosted and cloud open-source collaboration platform with messaging, file sharing, integrations, audio and screen sharing, workflow automation, and project management. It serves technical and operational teams with high security requirements in the technology, public sector, national defense, and financial services industries, including governments and large banks.

4 investors

Metalware provides autonomous binary security testing for firmware without requiring source code, hardware, or test harnesses. The platform finds vulnerabilities and crashes in embedded systems for automotive, aerospace, medical, and critical infrastructure sectors.

4 investors

Dagger is a programmable CI/CD engine that runs pipelines inside standard OCI containers, letting developers define their pipelines as code in their application's programming language via SDKs. The same pipeline can run locally, on a CI runner, or on any container hosting service, with built-in caching and Docker ecosystem compatibility.

3 investors

Hoop.dev provides a security gateway that inspects and controls database queries, API calls, and commands at the protocol layer, masking sensitive data and blocking risky operations before they execute. The tool operates as middleware for engineering teams to prevent unauthorized data access and enforce security policies without requiring code changes or SDK installation.

3 investors

Infield provides software to automate the management and upgrading of open source packages within applications, helping development teams reduce security vulnerabilities and dependency risks.

3 investors

Massdriver provides infrastructure automation and management for cloud-native organizations, enabling developers and operations teams to provision and manage infrastructure with ease while maintaining compliance and operational standards. The platform abstracts away complexity by offering standardized, consumable building blocks that handle Day Two operations including monitoring, scaling, and compliance out of the box.

3 investors

Netmaker provides a WireGuard-based VPN and secure connectivity platform for managing networks across cloud, on-premises, and edge environments. It serves organizations needing encrypted, peer-to-peer network connectivity with centralized orchestration and remote access capabilities.

3 investors

BitPatrol provides real-time secret detection and credential scanning for developer codebases using machine learning. The platform integrates into CI/CD pipelines to identify and alert on exposed secrets, tokens, and keys for software development teams.

2 investors

Firezone provides zero-trust network access software built on WireGuard that secures connections to corporate applications and infrastructure. The product serves enterprise organizations and teams requiring secure, remote access to internal systems.

2 investors