Aqua Security Valuation, Funding & Investors

Aikido Security is a Ghent-based cybersecurity platform that unifies code scanning, cloud security, and runtime protection. Its AI-driven system automatically detects and remediates vulnerabilities across applications, infrastructure, and deployments. Engineering teams at companies like bol.com and Showpad rely on Aikido for comprehensive coverage without workflow disruptions. The platform scans repositories, containers, and cloud environments such as AWS and Kubernetes, prioritizing fixes to eliminate security debt efficiently.

BigID is a New York-headquartered data intelligence platform that employs machine learning for data discovery, classification, and privacy management. The software supports compliance with GDPR and CCPA across petabyte-scale environments, safeguarding customer and employee data in cloud, on-premises, and hybrid infrastructures for enterprises worldwide.

BlueVoyant is a New York-based cyber defense company founded in 2017 that combines cybersecurity technology with managed services to protect organizations against internal and external threats. Its platform provides managed detection and response (MDR), third-party and supply-chain cyber risk management, digital risk protection, and incident response and threat intelligence services, delivered by teams based in the US, Israel, Europe, and Latin America. The company serves both government agencies, including the Defense Industrial Base, and private enterprises seeking to strengthen their cyber risk posture.

Bugcrowd is a San Francisco-headquartered crowdsourced cybersecurity platform that matches organizations with ethical hackers to identify vulnerabilities via AI-driven matchmaking. Established in 2012, it maintains the largest database of validated vulnerabilities and hacker profiles, supporting continuous testing programs for clients like Atlassian, Indeed, and Mastercard. Bugcrowd operates globally with penetration testing, bug bounties, and attack surface management across web, mobile, and API assets.

CHEQ is a New York-based cybersecurity company protecting brands from bots, AI agents, and online threats using a triple-layer intelligence engine analyzing over six trillion signals daily from one million domains. Trusted by more than 15,000 enterprises including Fortune 50 firms, CHEQ integrates with marketing and security tools, achieving a false positive rate below 0.009 percent. The Tel Aviv-headquartered firm operates globally to secure customer journeys.

Contrast Security is a code security platform embedding analysis and attack prevention into applications. Its deep instrumentation provides runtime protection without scans or extra infrastructure. The Bethesda-headquartered company serves enterprises securing software portfolios against known and unknown threats.

Cyberhaven is a Palo Alto-based data security company built around Data Detection and Response, tracking how sensitive data moves and transforms across cloud and on-premises environments to prevent insider threats and data exfiltration. Its proprietary Large Lineage Model analyzes data origins and workflows in real time, giving enterprises visibility and control over data even as it flows between endpoints, cloud services, and AI systems. Founded in 2016, the company addresses emerging risks such as shadow AI, where employees inadvertently share confidential information with AI tools, and counts organizations including Fox, Reddit, and SurveyMonkey among its customers.

Defense Unicorns is an Austin, Texas-headquartered software firm building open-source platforms for US national security. Its UMA (Unicorn Management Architecture) enables continuous integration/deployment of mission apps in air-gapped DoD networks, supporting Kubernetes on classified clouds like IL5. Adopted by US Air Force for ABMS and JADC2 programs, the technology deploys AI models at tactical edges. Founded in 2020 by ex-Palantir engineers, Defense Unicorns collaborates with AWS GovCloud and holds CMMC Level 3 certification.

Expel is a Herndon, Virginia-based managed detection and response provider serving enterprises with 24/7 threat monitoring across cloud, endpoints, and networks. Its platform detects incidents like ransomware, phishing, and supply chain attacks using AI alongside human analysts. Clients access the Workbench interface for live investigations into business email compromise and application compromises. Expel integrates with tools like Splunk and CrowdStrike, supporting over 100 customers including financial firms. Founded in 2015, it operates SOCs in the U.S. and Europe with ISO 27001 certification.

Halcyon is a cybersecurity company headquartered in Tel Aviv, Israel, developing AI-powered ransomware protection for enterprises. Its platform uses pre-execution detection, behavioral analysis, and decoy files across Windows, Mac, and Linux endpoints. Launched in 2021, Halcyon protects financial firms and healthcare providers in Europe and North America.

Immuta is a Boston-headquartered data security provider trusted by Fortune 500 firms and US government agencies. Its platform automates sensitive data discovery, classification, and access controls across AWS, Azure, and Snowflake. Immuta integrates with Snowflake and Databricks for policy enforcement and monitoring. Founded in 2015, it serves finance, healthcare, and defense sectors with over 50 employees.

JupiterOne is a Morrisville, North Carolina-headquartered cyber asset attack surface management platform. It continuously discovers, inventories, and models relationships across cloud, SaaS, on-prem, and code assets for security teams. Originating as a LifeOmic subsidiary in 2019, it supports compliance with NIST and SOC 2 via GraphQL APIs.

Kiteworks is a Palo Alto, California-headquartered cybersecurity firm offering a secure content communication platform. The solution enables compliant file sharing, email encryption, and SFTP transfers for regulated industries like healthcare and finance, integrating with Microsoft 365 and supporting zero-trust architecture.

Lookout is a San Francisco-headquartered endpoint-to-cloud security provider trusted by millions of consumers and enterprises including NASA and Box. The cloud-native platform protects data across iOS, Android, Windows, macOS, networks, and clouds like AWS with threat detection for mobile, email, and web risks.

Nsfocus Technologies Group Co Ltd is a China based internet and application security company. It offers enterprise-level network security solutions and services. The products offered by the company are Anti-DDoS system, Cloud DDoS protection service, Threat intelligence subscription service, Web application firewall, and Web vulnerability scanning system. In addition, it also offers solutions such as cloud DDoS defenses, on-premises DDoS defenses, Hybrid DDoS defenses, global threat intelligence, among others. The company has a business presence in China and other international countries.

Founded in 2000, Rapid7 is a cybersecurity company that began providing vulnerability management solutions. It has, however, expanded its portfolio to provide extended detection and response; security information and event management; cloud security, threat intelligence, and application security; and security orchestration, automation, and response. The Boston-based company went public in 2015.

Riskified Ltd has built a next-generation eCommerce risk management platform that allows online merchants to create trusted relationships with their consumers. It generates revenue by granting merchants access to its eCommerce risk management platform and reviewing and approving eCommerce transactions for legitimacy. Its merchants include some of the ecommerce brands including Wayfair, Lastminute.com, SHEIN, and Macy’s. Its merchants operate in a variety of verticals, including Payments, Money Transfer & Crypto, Tickets & Travel, Electronics, Home, Fashion & Luxury Goods, General Retail and Food. The company derived maximum revenue from Israel.

Red Violet Inc is a software and services company. It specializes in data analysis, providing cloud-based, mission-critical information solutions to enterprises in a variety of industries. Through its CORE data fusion platform, it provides mission-critical information about individuals, businesses and assets.