Stytch Acquisition, Valuation, Funding & Investors

Socket secures open source software supply chains against attacks targeting application dependencies. The platform blocks threats proactively in the JavaScript ecosystem rather than merely reporting known vulnerabilities. San Francisco-headquartered and developed by maintainers of packages with billions of monthly downloads, Socket defends developers through real-time detection across npm and other registries.

Progress Software Corp provides software operate in one operating segment: software products for the development, deployment, and management of responsible, AI-powered applications and digital experiences. The following are products: Chef, Corticon, Data Direct, Developer Tools, Flowmon, Kemp LoadMaster, MarkLogic, MOVEit, OpenEdge, Semaphore, ShareFile, Sitefinity, WhatsUp Gold. Geographical regions include the United States, Canada, EMEA, Latin America, and Asia Pacific.

Aikido Security is a Ghent-based cybersecurity platform that unifies code scanning, cloud security, and runtime protection. Its AI-driven system automatically detects and remediates vulnerabilities across applications, infrastructure, and deployments. Engineering teams at companies like bol.com and Showpad rely on Aikido for comprehensive coverage without workflow disruptions. The platform scans repositories, containers, and cloud environments such as AWS and Kubernetes, prioritizing fixes to eliminate security debt efficiently.

Aqua Security is a Tel Aviv-headquartered provider of cloud-native application security platforms protecting containerized and serverless workloads. The Aqua Platform scans images in CI/CD pipelines, enforces runtime policies on Kubernetes clusters, and monitors hybrid clouds from AWS, Azure, and Google Cloud. Serving over 400 enterprises including Deutsche Telekom and BNP Paribas, it blocks vulnerabilities with 99 percent accuracy across development to production. Recent integrations support OpenTelemetry for threat detection in microservices architectures.

BigID is a New York-headquartered data intelligence platform that employs machine learning for data discovery, classification, and privacy management. The software supports compliance with GDPR and CCPA across petabyte-scale environments, safeguarding customer and employee data in cloud, on-premises, and hybrid infrastructures for enterprises worldwide.

BlueVoyant is a New York-based cyber defense company founded in 2017 that combines cybersecurity technology with managed services to protect organizations against internal and external threats. Its platform provides managed detection and response (MDR), third-party and supply-chain cyber risk management, digital risk protection, and incident response and threat intelligence services, delivered by teams based in the US, Israel, Europe, and Latin America. The company serves both government agencies, including the Defense Industrial Base, and private enterprises seeking to strengthen their cyber risk posture.

Bugcrowd is a San Francisco-headquartered crowdsourced cybersecurity platform that matches organizations with ethical hackers to identify vulnerabilities via AI-driven matchmaking. Established in 2012, it maintains the largest database of validated vulnerabilities and hacker profiles, supporting continuous testing programs for clients like Atlassian, Indeed, and Mastercard. Bugcrowd operates globally with penetration testing, bug bounties, and attack surface management across web, mobile, and API assets.

CHEQ is a New York-based cybersecurity company protecting brands from bots, AI agents, and online threats using a triple-layer intelligence engine analyzing over six trillion signals daily from one million domains. Trusted by more than 15,000 enterprises including Fortune 50 firms, CHEQ integrates with marketing and security tools, achieving a false positive rate below 0.009 percent. The Tel Aviv-headquartered firm operates globally to secure customer journeys.

Contrast Security is a code security platform embedding analysis and attack prevention into applications. Its deep instrumentation provides runtime protection without scans or extra infrastructure. The Bethesda-headquartered company serves enterprises securing software portfolios against known and unknown threats.

Cyberhaven is a Palo Alto-based data security company built around Data Detection and Response, tracking how sensitive data moves and transforms across cloud and on-premises environments to prevent insider threats and data exfiltration. Its proprietary Large Lineage Model analyzes data origins and workflows in real time, giving enterprises visibility and control over data even as it flows between endpoints, cloud services, and AI systems. Founded in 2016, the company addresses emerging risks such as shadow AI, where employees inadvertently share confidential information with AI tools, and counts organizations including Fox, Reddit, and SurveyMonkey among its customers.

Defense Unicorns is an Austin, Texas-headquartered software firm building open-source platforms for US national security. Its UMA (Unicorn Management Architecture) enables continuous integration/deployment of mission apps in air-gapped DoD networks, supporting Kubernetes on classified clouds like IL5. Adopted by US Air Force for ABMS and JADC2 programs, the technology deploys AI models at tactical edges. Founded in 2020 by ex-Palantir engineers, Defense Unicorns collaborates with AWS GovCloud and holds CMMC Level 3 certification.

Expel is a Herndon, Virginia-based managed detection and response provider serving enterprises with 24/7 threat monitoring across cloud, endpoints, and networks. Its platform detects incidents like ransomware, phishing, and supply chain attacks using AI alongside human analysts. Clients access the Workbench interface for live investigations into business email compromise and application compromises. Expel integrates with tools like Splunk and CrowdStrike, supporting over 100 customers including financial firms. Founded in 2015, it operates SOCs in the U.S. and Europe with ISO 27001 certification.

Halcyon is a cybersecurity company headquartered in Tel Aviv, Israel, developing AI-powered ransomware protection for enterprises. Its platform uses pre-execution detection, behavioral analysis, and decoy files across Windows, Mac, and Linux endpoints. Launched in 2021, Halcyon protects financial firms and healthcare providers in Europe and North America.

Hasura is a San Francisco and Bangalore-based provider of the Hasura GraphQL Engine, an open-source tool that generates instant GraphQL APIs over Postgres databases and other data sources. Launched in 2018, it enables real-time subscriptions, fine-grained access control, and integrations with services like Kafka and BigQuery. The company offers Hasura Cloud for managed deployments and serves enterprises building backend APIs.

Immuta is a Boston-headquartered data security provider trusted by Fortune 500 firms and US government agencies. Its platform automates sensitive data discovery, classification, and access controls across AWS, Azure, and Snowflake. Immuta integrates with Snowflake and Databricks for policy enforcement and monitoring. Founded in 2015, it serves finance, healthcare, and defense sectors with over 50 employees.

Nsfocus Technologies Group Co Ltd is a China based internet and application security company. It offers enterprise-level network security solutions and services. The products offered by the company are Anti-DDoS system, Cloud DDoS protection service, Threat intelligence subscription service, Web application firewall, and Web vulnerability scanning system. In addition, it also offers solutions such as cloud DDoS defenses, on-premises DDoS defenses, Hybrid DDoS defenses, global threat intelligence, among others. The company has a business presence in China and other international countries.

Founded in 2000, Rapid7 is a cybersecurity company that began providing vulnerability management solutions. It has, however, expanded its portfolio to provide extended detection and response; security information and event management; cloud security, threat intelligence, and application security; and security orchestration, automation, and response. The Boston-based company went public in 2015.

Riskified Ltd has built a next-generation eCommerce risk management platform that allows online merchants to create trusted relationships with their consumers. It generates revenue by granting merchants access to its eCommerce risk management platform and reviewing and approving eCommerce transactions for legitimacy. Its merchants include some of the ecommerce brands including Wayfair, Lastminute.com, SHEIN, and Macy’s. Its merchants operate in a variety of verticals, including Payments, Money Transfer & Crypto, Tickets & Travel, Electronics, Home, Fashion & Luxury Goods, General Retail and Food. The company derived maximum revenue from Israel.