cloud-native-security
(7)
The Open-Source Trojan Horse: How ARMO Turned 11,000 GitHub Stars Into a Cloud-Security Business
ARMO gave away a Kubernetes scanner, watched 40,000 companies download it, then built a runtime-security business on top. This is the story of the open-source Trojan horse - and the eBPF sensor that made it work.
Brooke Motta Built a Security Company From a Hike - Then Taught It to Watch Behavior
A career spent selling security taught Brooke Motta to listen for the gap between a new technology and the tools meant to protect it. RAD Security began on a Flagstaff trail and now follows behavior across cloud workloads and AI agents.
Aqua Security
Aqua Security is a cloud native security company founded in 2015 that helps enterprises protect containerized and cloud native applications from development to production. Its Aqua Platform is a Cloud Native Application Protection Platform (CNAPP) that combines agent and agentless technology to scan code and images, enforce policies, manage cloud posture, and stop attacks at runtime. Aqua is also the creator of Trivy, the widely adopted open source vulnerability and misconfiguration scanner. Headquartered in Boston and Ramat Gan, Israel, the company protects more than 500 large enterprises and has raised $325M in total funding at a valuation above $1 billion.
Tracebit
Tracebit is a London-based cybersecurity company that builds cloud-native deception technology. It automatically deploys realistic decoy resources - called canaries - across a customer's cloud accounts, CI/CD pipelines, identity providers and developer workstations. Because the decoys hold no real data, any interaction with them is a high-fidelity signal that an attacker is already inside. Founded in 2023 by ex-Tessian engineers Andy Smith and Sam Cox, Tracebit aims to cut the time it takes an organisation to detect a breach from months to minutes, and has deployed millions of canaries protecting customers such as Docker, Snyk, Riot Games and Synthesia.
RAD Security
RAD Security is a San Francisco cloud-native security company that pairs runtime telemetry with agentic AI to help teams detect, investigate, and respond to threats across Kubernetes and cloud environments. Founded in 2021 as KSOC and rebranded RAD Security in 2024, it builds behavioral, eBPF-driven detection and a roster of AI 'RADBots' that triage alerts, generate compliance evidence, and automate security workflows. The company raised a $14M Series A in February 2025, bringing total funding to about $20M.
Michael Dube
Michael Dube is the Chief Executive Officer of Aqua Security, a Boston- and Ramat Gan-based cloud native security company that protects more than 40% of the Fortune 100. He was elevated to CEO in November 2025 after joining as Chief Revenue Officer in April 2024, succeeding co-founder Dror Davidoff. Dube spent nearly three decades in enterprise cybersecurity sales leadership at CrowdStrike, Splunk, Cybereason and Check Point before Aqua.
Wallarm
Wallarm is a San Francisco-based API and application security company protecting more than half of public-facing APIs at large enterprises with a unified platform for API discovery, attack prevention, and AI-era threat protection.