cnapp
(14)
Uptycs and the art of asking what happened before
An alert tells you something happened. Uptycs sells the missing backstory - joining cloud, container and endpoint evidence so security teams can decide what deserves their afternoon.
Ganesh Pai Put the Cloud on the Witness Stand
The Uptycs founder has spent a career turning unruly infrastructure into questions a machine can answer. His latest wager is that security teams need evidence more than another black box.
Qualys Wants to Turn the World's Vulnerability Backlog Into a To-Do List
The 27-year-old security company helped put vulnerability scanning in the cloud. Now it is selling a harder idea: that one agent and one risk score can tell sprawling enterprises what to fix first - and help fix it.
Marina Segal Is Making Cloud Security Finish the Job
Cloud security learned to find every loose screw. The Seattle founder behind Tamnoon is building the careful, context-rich machinery that actually turns the wrench.
Gil Geron Built a Security Company Around an Unfashionable Skill: Changing His Mind
After nearly eleven years at Check Point, Gil Geron carried one lesson into Orca Security: a product gets better when its creator can let go. The result is an eight-founder company built on trust, context and a surprisingly practical view of AI.
Orca Security Bet Cloud Defense Was a Deployment Problem - Now AI Has to Fix What It Finds
Eight Check Point veterans built a $1.8 billion cloud-security company around an unglamorous insight: protection that takes months to deploy is protection full of holes. Orca’s next test is harder - turning its celebrated visibility into safe, useful action.
The Cloud Security Company That Actually Fixes the Alerts
Every cloud scanner is great at finding problems. Tamnoon built a business on the boring part nobody wanted: fixing them - and doing it without taking production down.
SubImage
SubImage is a San Francisco security startup building an open-core security graph that maps a company's cloud and SaaS infrastructure so teams can see who can access what, and why. Built by the original team behind Cartography, the open-source graph tool created at Lyft and now a CNCF project, SubImage sells a managed, agentless platform for attack path analysis, asset inventory, and misconfiguration detection. Backed by a $4.2M seed round, it positions itself as an open-core alternative to Wiz.
Aqua Security
Aqua Security is a cloud native security company founded in 2015 that helps enterprises protect containerized and cloud native applications from development to production. Its Aqua Platform is a Cloud Native Application Protection Platform (CNAPP) that combines agent and agentless technology to scan code and images, enforce policies, manage cloud posture, and stop attacks at runtime. Aqua is also the creator of Trivy, the widely adopted open source vulnerability and misconfiguration scanner. Headquartered in Boston and Ramat Gan, Israel, the company protects more than 500 large enterprises and has raised $325M in total funding at a valuation above $1 billion.
SecLogic
SecLogic is a Boston-based cybersecurity company building an AI-driven cyber risk orchestration platform for the cloud era. Its two flagship products - CyberQ Shield, an agentless Cloud Native Application Protection Platform (CNAPP) that finds and auto-remediates misconfigurations and vulnerabilities across AWS, Azure, GCP and beyond, and CyberQ ORO, an Organization Risk Orchestration tool that quantifies human risk through multi-vector phishing simulation and awareness training - aim to give security leaders a single pane of glass across both their machines and their people. Founded in 2021 and backed by pre-seed funding, SecLogic operates across the US, Europe and India.
Sachin Johar
Sachin Johar is the Co-Founder and CEO of SecLogic (SecLogic.ai), a Boston-based cloud security company that builds a cyber risk orchestration platform for multi-cloud environments. After roughly two decades inside the enterprise security and networking world - including a long run at Akamai Technologies and earlier strategy roles at Tata Communications and Intellisys - he co-founded SecLogic in late 2020 to attack a problem he watched companies struggle with from the inside: cloud sprawl creating invisible attack paths faster than security teams could close them. SecLogic's products, CyberQ SHIELD and CyberQ ORO, pair cloud security posture management with organization and human risk orchestration. The company raised a $300K pre-seed round in 2021 led by Spanache.vc with India Accelerator.
Amiram Shachar
Amiram Shachar is the Co-Founder and CEO of Upwind Security, a cloud-native security unicorn valued at $1.5 billion after its $250M Series B in January 2026. A serial entrepreneur with deep IDF Mamram roots, he previously founded Spot.io - sold to NetApp for $450M - before returning to build a runtime-first CNAPP platform that cuts security alert noise by 98%. He leads a team of ~350 people from San Francisco and Tel Aviv.
Tigera
Tigera is the creator of Calico, the open-source standard for Kubernetes networking and security that powers more than a million clusters every day. From its San Jose headquarters, the company sells Calico Cloud and Calico Enterprise - SaaS and on-prem platforms that bolt active runtime security, zero-trust microsegmentation, and observability onto container environments at any scale.
Upwind Security
Upwind is a runtime-first Cloud Native Application Protection Platform (CNAPP) that unifies cloud and AI security across the full lifecycle. Founded in 2022 by the team behind Spot.io, the company uses eBPF-based runtime telemetry to give security teams real-time context on what's actually exploitable in production - cutting noise, surfacing real threats, and protecting cloud-native and AI workloads at the speed they run.