kubernetes-security
(8)
The VPN Had a Front Door. Twingate Brought a Guest List.
A pair of former Dropbox colleagues saw the same old problem inside the corporate network: access was too broad, too awkward, and too easy to leave on. Their company now sells a quieter way in - one resource, one identity, one decision at a time.
The Secret Is in the Moment the Data Wakes Up
Anjuna Security built a business around an awkward instant: the moment encrypted data must be used. Its software puts that work inside hardware-protected environments, then asks a better question than 'Who can get in?': 'What can anyone see once they do?'
The Most Dangerous Second in AI
Operant AI is betting that the decisive moment in cybersecurity is no longer before software ships or after an alarm rings. It is the instant an AI agent decides to act.
The Open-Source Trojan Horse: How ARMO Turned 11,000 GitHub Stars Into a Cloud-Security Business
ARMO gave away a Kubernetes scanner, watched 40,000 companies download it, then built a runtime-security business on top. This is the story of the open-source Trojan horse - and the eBPF sensor that made it work.
Aqua Security
Aqua Security is a cloud native security company founded in 2015 that helps enterprises protect containerized and cloud native applications from development to production. Its Aqua Platform is a Cloud Native Application Protection Platform (CNAPP) that combines agent and agentless technology to scan code and images, enforce policies, manage cloud posture, and stop attacks at runtime. Aqua is also the creator of Trivy, the widely adopted open source vulnerability and misconfiguration scanner. Headquartered in Boston and Ramat Gan, Israel, the company protects more than 500 large enterprises and has raised $325M in total funding at a valuation above $1 billion.
Tracebit
Tracebit is a London-based cybersecurity company that builds cloud-native deception technology. It automatically deploys realistic decoy resources - called canaries - across a customer's cloud accounts, CI/CD pipelines, identity providers and developer workstations. Because the decoys hold no real data, any interaction with them is a high-fidelity signal that an attacker is already inside. Founded in 2023 by ex-Tessian engineers Andy Smith and Sam Cox, Tracebit aims to cut the time it takes an organisation to detect a breach from months to minutes, and has deployed millions of canaries protecting customers such as Docker, Snyk, Riot Games and Synthesia.
RAD Security
RAD Security is a San Francisco cloud-native security company that pairs runtime telemetry with agentic AI to help teams detect, investigate, and respond to threats across Kubernetes and cloud environments. Founded in 2021 as KSOC and rebranded RAD Security in 2024, it builds behavioral, eBPF-driven detection and a roster of AI 'RADBots' that triage alerts, generate compliance evidence, and automate security workflows. The company raised a $14M Series A in February 2025, bringing total funding to about $20M.
SecLogic
SecLogic is a Boston-based cybersecurity company building an AI-driven cyber risk orchestration platform for the cloud era. Its two flagship products - CyberQ Shield, an agentless Cloud Native Application Protection Platform (CNAPP) that finds and auto-remediates misconfigurations and vulnerabilities across AWS, Azure, GCP and beyond, and CyberQ ORO, an Organization Risk Orchestration tool that quantifies human risk through multi-vector phishing simulation and awareness training - aim to give security leaders a single pane of glass across both their machines and their people. Founded in 2021 and backed by pre-seed funding, SecLogic operates across the US, Europe and India.