Security Startups

Dyneti Technologies offers tools to reduce payment fraud. The company operates in the payments security space.

3 investors

Meldium provides password and identity management for teams, offering a central dashboard that connects to cloud apps to create, edit, and remove user accounts and manage shared passwords across them. The product targets companies and their employees managing access to cloud applications. The company was acquired by LogMeIn.

3 investors

Pangolin provides secure, zero-trust remote access to infrastructure using peer-to-peer tunnels and clientless browser access across on-premises, cloud, and edge environments. The open-source solution, based on WireGuard, verifies identity and context at every step.

3 investors

Smyte provides automated classification of website and mobile app event data to detect and stop bad actors, including spam, scams, harassment, and credit card fraud. It serves marketplaces and social networks.

3 investors

Strac helps enterprises protect sensitive information during customer interactions by preventing data exposure incidents. The company builds security tools to enable secure handling of personally identifiable information without operational friction.

3 investors

Templarbit offers a developer-oriented security platform that protects software applications from malicious activity, serving both small and large companies.

3 investors

Traceforce is an on-device security platform that monitors and controls AI applications, desktop apps, CLI agents, and MCP (Model Context Protocol) connectors across an organization's device fleet, tracking tool calls and blocking dangerous actions in real time. It offers device inventory, incident intelligence, automated remediation, and integrates with MDM tools like Jamf, JumpCloud, and NinjaOne for enterprise IT teams.

3 investors

Verdict Machine builds an AI-based cybersecurity platform that maps a financial institution's on-chain environment, evaluates proposed transactions against its policies before execution, and provides cyber risk assessment, wallet screening, and security posture monitoring. It serves banks, asset managers, and digital-asset infrastructure providers.

3 investors

AeroFS provides an enterprise file sync, share, and collaboration tool that deploys on a company's own infrastructure so files stay protected by the organization's internal security protocols. It offers a Dropbox-like user experience aimed at satisfying both end users and IT teams.

2 investors

AmberBox makes an indoor gunshot detection and response system that uses a patented tri-factor authentication method (percussion, audio, and infrared) to identify firearm discharges and automatically alert first responders. The system integrates with other security infrastructure such as cameras, access control, and mass notification systems, and is marketed for use in the United States.

2 investors

Bannerman is a marketplace for booking and managing security guard services, giving business customers visibility into guard schedules, attendance, and incident reporting. It operates across all 50 U.S. states.

2 investors

Bunkyr provides an API that lets applications implement zero-knowledge encryption and password recovery without requiring users to manage seed phrases or backup codes. The platform handles encrypted data protection and account recovery for developers building end-to-end encrypted applications.

2 investors

Corgea provides developer-first security solutions that enable developers and security teams to ship secure code without slowing down development velocity.

2 investors

EnvKey is a cross-platform, end-to-end encrypted configuration and secrets manager that lets developers securely store items like API keys and database credentials and grant least-privilege access to developers and servers. It is built so that no third party, including EnvKey, can access the stored secrets.

2 investors

Firezone provides zero-trust network access software built on WireGuard that secures connections to corporate applications and infrastructure. The product serves enterprise organizations and teams requiring secure, remote access to internal systems.

2 investors

JumpWire provides data access control software that sits between applications and databases to identify and restrict access to sensitive fields based on organizational policies. The platform enables fine-grained permission controls for who can read or modify specific data properties, and works within existing infrastructure without requiring data migrations or application changes.

2 investors

Palitronica develops physics-based hardware assurance solutions that use radio-frequency signal analysis and machine learning to detect defects, counterfeits, unauthorized design changes, and malicious tampering in electronics. The company serves manufacturers and purchasers in automotive, aerospace & defense, government, medical, and advanced manufacturing sectors.

2 investors

Rescue Forensics provides a digital forensics tool that archives large volumes of data from classified advertisement sites hosting commercial sex ads, giving law enforcement agencies evidence for anti-human-trafficking investigations.

2 investors

Slauth.io is a tool that automatically generates and optimizes identity and access management (IAM) policies, surfacing recommendations through pull requests and integrating with infrastructure-as-code tools like Terraform to streamline policy creation and deployment. The service targets DevOps and engineering teams seeking to reduce manual policy configuration work while maintaining security standards.

2 investors

Tall Poppy builds tools and services for personal digital safety, offering proactive measures to prevent online harassment from escalating and expert incident response when individuals are attacked. It provides these protections to employees on behalf of employers.

2 investors

Tesseral is an open source platform that provides identity and access management for business software, with features including single sign-on, user provisioning, role-based access control, and audit logging. It serves organizations managing access for employees, customers, services, and AI agents.

2 investors

Trident is an AI-assisted security platform for continuous web and API penetration testing and cloud attack-path analysis, connecting cloud assets, identities, data stores, and application findings to prioritize risks. It serves security teams and integrates with cloud, identity, data, and developer platforms such as AWS, Azure, Google Cloud, Kubernetes, Snowflake, Okta, and GitHub.

2 investors

Winfunc is an autonomous hacking agent that identifies, prioritizes, and patches software vulnerabilities in codebases using formal verification and artificial intelligence. The product targets development teams and security engineers who need vulnerability detection without manual intervention.

2 investors

Appcanary provides security tooling for software development, with a focus on web-scale engineering. The company was part of Y Combinator's S15 batch and was acquired by GitHub.

1 investor