Security Startups

EnvKey provides encrypted storage for application secrets and configuration data like API keys and database credentials, with a user interface for controlling access levels and integrating into development environments.

2 investors

Gecko is a code security platform that uses AI to analyze codebases, infrastructure, and logic to detect exploitable vulnerabilities and provide developer fixes. It targets enterprise and startup development teams seeking to find complex, multi-step attack chains and business logic flaws in their code and microservices.

2 investors

Infisical is an all-in-one platform for managing application secrets, certificates, and privileged access across cloud, on-premises, and AI infrastructure, serving developer teams and organizations. The platform provides centralized storage, rotation, and auditing of credentials without requiring custom scripts or ad-hoc secret management solutions.

2 investors

JumpWire provides data access control software that sits between applications and databases to identify and restrict access to sensitive fields based on organizational policies. The platform enables fine-grained permission controls for who can read or modify specific data properties, and works within existing infrastructure without requiring data migrations or application changes.

2 investors

Optery removes personal information from the internet by helping consumers opt out of data brokers and people search sites that collect and sell their data. The platform provides visibility into where personal information is exposed online and automates the opt-out process.

2 investors

Tall Poppy provides digital safety tools and incident response services designed to protect individuals from online harassment and attacks.

2 investors

A security platform that detects and prevents malicious activity targeting software applications, serving both small and large companies through developer-focused tooling.

2 investors

Tinfoil develops secure hardware and systems, with expertise in privacy and security protocols.

2 investors

Vectrix scans SaaS applications to detect security misconfigurations and compliance gaps, alerting IT and security teams to issues such as exposed files, weak password policies, and missing authentication controls across platforms like Google Workspace, Microsoft 365, Slack, and Zoom.

2 investors

AppCanary is a security vulnerability monitoring and alertment service for developers working with open-source dependencies.

1 investor

Blyss operates an AI platform that runs machine learning models inside secure enclaves with end-to-end encryption, ensuring user data remains encrypted even during computation. The platform serves developers, enterprises, and organizations seeking to deploy AI features while maintaining strict data confidentiality.

1 investor

Bunkyr provides an API that lets applications implement zero-knowledge encryption and password recovery without requiring users to manage seed phrases or backup codes. The platform handles encrypted data protection and account recovery for developers building end-to-end encrypted applications.

1 investor

Documents.Me provides encryption software that protects files stored locally and in cloud services. The company serves enterprise clients seeking secure file sharing capabilities.

1 investor

EdgeBit monitors software dependencies and supply chain risk in real time by cross-referencing build pipelines and server infrastructure with multiple data sources. The platform helps security teams prioritize vulnerability investigation for application dependencies.

1 investor

Federacy provides manual penetration testing services for startups and enterprises to identify vulnerabilities in web and mobile applications, APIs, and network infrastructure. The service satisfies SOC2, ISO 27001, HIPAA, and vendor security assessment requirements.

1 investor

Firezone provides zero-trust network access software built on WireGuard that secures connections to corporate applications and infrastructure. The product serves enterprise organizations and teams requiring secure, remote access to internal systems.

1 investor

Golf provides governance and security monitoring for AI agents and MCP (Model Context Protocol) connections in enterprise environments. The platform discovers, enforces policies, and audits data access across third-party AI tools like Claude, Cursor, and Copilot that operate outside traditional gateways.

1 investor

Keyri provides fraud prevention and authentication software that uses device fingerprinting and biometric methods to help companies detect fraudulent activity and verify user identities across mobile and web applications.

1 investor

Kuna develops home security products focused on prevention, combining hardware and software that evolves with safety needs. It offers consumer home security systems built around reliability and an intuitive user experience.

1 investor

LogosGuard is a browser extension that automatically redacts sensitive data before prompts are sent to AI tools like ChatGPT and Claude. The tool detects and replaces personal information with placeholders before submission, ensuring users can safely leverage AI without accidentally leaking private data.

1 investor

LunaTrace provides a hosted open source tool that identifies vulnerabilities in software dependencies and generates prioritized remediation guidance to accelerate patching. The platform serves development teams seeking to reduce security and compliance risk with less noise than traditional vulnerability scanning.

1 investor

Nebula Security uses AI-driven security pipelines to accelerate vulnerability research in widely used software such as operating systems, browsers, and applications. The company identifies security bugs and vulnerabilities significantly faster than traditional manual research methods.

1 investor

Observa detects and alerts on unintended database exposures to help organizations identify and remediate data leaks before they're exploited.

1 investor

OneCLI is an open-source credential gateway that secures AI agents by injecting API keys at the network layer, preventing agents and LLMs from accessing credentials directly. It works across any agent framework and enforces policies at the proxy level for endpoint blocking, rate limiting, and approval workflows.

1 investor