api-security
(10)
Akamai Technologies
Akamai began with a pixel hidden on Disney's website. Twenty-seven years later, the network built to beat the 'World Wide Wait' is becoming a security perimeter and an AI cloud - without giving up the pipes that made it matter.
Appknox
Most security tools inspect the code developers write. Appknox follows the app that users actually touch - from compiled binary and real-device behavior to the moment a counterfeit copy appears in an app store.
Casco
Casco is a San Francisco cybersecurity startup that runs autonomous, AI-driven penetration tests on web apps, APIs, cloud infrastructure, and AI systems. Founded in 2025 by ex-AWS engineers Rene Brandel and Ian Saultz, it pairs continuous machine-driven attack simulation with human security experts, delivering compliance-ready reports for standards like SOC 2, ISO 27001, and the EU AI Act. A Y Combinator (X25) company, Casco says it serves 300+ companies and secures AI systems used across a majority of the Fortune 500.
ammune.ai
ammune.ai (formerly L7 Defense) is a cybersecurity company that builds ammune™, a fully autonomous, AI-based platform for protecting APIs - and, increasingly, AI systems and data centers - from cyberattacks. Using unsupervised machine learning, ammune auto-discovers APIs and builds a tailored protection layer for each one inline from the first request, blocking dozens of attack types (bots, DDoS, business-logic abuse, injection) in real time without pre-training or rule-writing. The platform is platform-agnostic, running on-premises, in the cloud, in Kubernetes clusters, and offloaded onto DPUs such as NVIDIA BlueField-2, and it recently expanded toward offline, air-gapped protection for AI workloads.
Mend.io
Mend.io, formerly WhiteSource, is a Boston- and Tel Aviv-based application security company that helps development and security teams find and fix vulnerabilities in open source dependencies, custom code, and AI-generated code. Its platform spans software composition analysis (SCA), static and dynamic testing (SAST/DAST), API security, automated dependency updates via Renovate, and a growing suite of AI security tools. Serving more than 1,000 customers including a quarter of the Fortune 100, Mend.io emphasizes automated remediation - producing exact code fixes rather than long lists of alerts - to help teams reduce security debt without slowing delivery.
應援科技 OenTech
應援科技 OenTech is a Taipei-based fintech that runs a one-stop integrated payment cloud platform combining third-party payment processing with a CRM-style supporter management system. Tailored for nonprofits, creators, political campaigns, temples and merchants, it lets organizations accept donations, sell tickets and merchandise, manage memberships and issue receipts on a single, security-certified stack. Certified to PCI-DSS Level 1, ISO 27001 and ISO 27701, Oen positions itself as one of Taiwan's most secure payment platforms and now serves more than 1,000 organizations.
Contrast Security
Contrast Security is a Pleasanton, California-based cybersecurity company that secures software from the inside out. Founded in 2014 by OWASP veterans Jeff Williams and Arshan Dabirsiaghi, it pioneered an instrumentation-based approach that embeds security sensors directly into running applications to detect vulnerabilities and block live attacks in real time. Its runtime security platform spans Interactive Application Security Testing (IAST), Runtime Application Self-Protection (RASP), static analysis (SAST), software composition analysis (SCA), and Application Detection and Response (ADR), serving Fortune 500 enterprises and government agencies.
MirrorTab
MirrorTab is a San Francisco cybersecurity startup that stops browser-based attacks by moving the browser session server-side. Its isolation technology intercepts and sanitizes a web session at the edge before it ever reaches a user's device, so malware, malicious extensions, bots, and AI-driven automation never touch the application's code, data, or APIs. Founded in 2021 by Honey co-founder Brian Silverstein, the company raised an $8.5M seed round led by Valley Capital Partners in February 2025 and targets financial services, e-commerce, and government.
Impart Security
Impart Security is a San Francisco cybersecurity company building a unified runtime protection platform for AI, APIs, and web applications. Founded in 2020 by Signal Sciences veterans Jonathan DiVincenzo, Marc Harrison, and Brian Joe, the company merges WAF, API security, Cloud Application Detection & Response, and AI Runtime Protection into one engine that runs autonomous defense agents inside production traffic.
Wallarm
Wallarm is a San Francisco-based API and application security company protecting more than half of public-facing APIs at large enterprises with a unified platform for API discovery, attack prevention, and AI-era threat protection.