DevSecOps Startups

Foxpass provides cloud-hosted LDAP and RADIUS systems that control employee access to servers and networks, integrating with existing Google Apps accounts. It targets companies seeking to apply enterprise-grade access security to their infrastructure.

2 investors

Matano provides a cloud-native security information and event management platform that uses a Security Data Lake architecture as an alternative to traditional SIEM systems like Splunk or Elastic. The platform targets security teams operating in cloud-first environments.

2 investors

Nestybox develops a container runtime called Sysbox that integrates with Docker and Kubernetes to allow containers to function with VM-like isolation and flexibility. The software targets enterprises seeking a more cost-effective and portable alternative to traditional virtual machines.

2 investors

Slauth.io is a tool that automatically generates and optimizes identity and access management (IAM) policies, surfacing recommendations through pull requests and integrating with infrastructure-as-code tools like Terraform to streamline policy creation and deployment. The service targets DevOps and engineering teams seeking to reduce manual policy configuration work while maintaining security standards.

2 investors

Termius is an SSH client for desktop and mobile that syncs and shares server data through a secure cloud vault, similar to a password manager. It offers team collaboration features such as shared server lists, terminal sharing via unique links, and reusable shell command snippets, aimed at engineering and DevOps teams.

2 investors

Composal runs swarms of AI agents that interact with a product the way real users would, testing actual flows and edge cases to surface bugs and gaps before a release. It is a software testing tool for product and engineering teams evaluating whether features are ready to ship.

1 investor

A company providing physical infrastructure services including colocation, GPU/compute farms, and security and network buildouts.

1 investor

EdgeBit monitors software dependencies and supply chain risk in real time by cross-referencing build pipelines and server infrastructure with multiple data sources. The platform helps security teams prioritize vulnerability investigation for application dependencies.

1 investor

LunaSec built LunaTrace, a hosted open-source tool that scans software dependencies for security vulnerabilities and provides remediation guidance. The company notes it has shut down.

1 investor

OpenHack is an AI security engineer that scans code, runs autonomous pentests, verifies vulnerabilities with working proof-of-concept exploits, and prioritizes findings by business impact, generating fix pull requests. It serves engineering teams at startups and enterprises, covering application code, authentication flows, APIs, dependencies, and secrets.

1 investor

Pluralith is a visualization and management tool for Terraform infrastructure that generates diagrams from infrastructure code and integrates them into pull requests. It helps infrastructure teams understand, document, and monitor their cloud infrastructure changes with drift detection, cost tracking, and compliance monitoring.

1 investor

Stacktrace provides software that lets teams monitor the actions of AI agents, flag risky behavior, and notify responsible staff, while giving administrators controls to enforce policies that block unapproved tools like MCP servers and plugins before agents can use them. It serves teams operating AI agents in the agent monitoring and governance category.

1 investor