supply-chain-security
(11)
Ennoventure, Inc.
Ennoventure is a deep-tech brand protection company that embeds invisible, cryptographic signatures directly into ordinary product packaging artwork. Using AI and cryptography, the signatures print with existing equipment - no new labels, materials, or hardware - and can be verified in about a second with an ordinary smartphone camera. Founded in 2018 by MIT Sloan alumnus Padmakumar Nair and technologist Shalini Nair, the company gives brands a scalable SaaS platform to authenticate products, detect grey-market diversion, monitor online marketplaces for counterfeits, and engage consumers, protecting global names such as Nestle and Unilever across pharma, FMCG, automotive, and more.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Nudge Security
Nudge Security is an Austin-based cybersecurity company that helps organizations discover and govern the SaaS and AI applications their employees adopt, often without IT's knowledge. Founded in 2021 by Russell Spitler and Jaime Blasco, the platform combines Day One SaaS and AI app discovery, security posture management, identity governance, third-party risk, and spend management, then reaches employees directly with 'security nudges' via browser, Slack, and Teams to guide safer choices without blocking work. It raised a $22.5M Series A in November 2025 and serves nearly 200 customers.
Overhaul
Overhaul is an Austin-based supply chain risk management and visibility company that helps global shippers and logistics providers see, protect, and control high-value cargo in transit. Its device-agnostic software combines real-time monitoring, predictive risk intelligence, a 24/7 Global Security Operations Center, and insurance and recovery services to prevent theft, damage, spoilage, and compliance failures. Founded in 2016 by supply-chain-security veteran Barry Conlon, Overhaul serves Fortune 100 brands across pharmaceuticals, technology, automotive, and food and beverage, and raised a $105M Series C in August 2025.
Proof Authentication
Proof Authentication is a Boston-based technology company that builds anti-counterfeiting and brand-protection solutions for large consumer brands. Its patented approach pairs a non-duplicatable printed mark with a custom smartphone app, letting consumers verify a product's authenticity in seconds while giving brands real-time data to enforce against counterfeits. Formed in 2021 to acquire the DSS Digital division of Document Security Systems, the company is led by CEO Dan McKinnon, former Head of Global Brand Protection at New Balance, and serves Fortune 500 companies.
Alta Resource Technologies
Alta Resource Technologies is a Boulder, Colorado deep-tech startup using engineered proteins to selectively separate rare earth elements and other critical minerals from low-grade ores, mining tailings, and electronic waste. Its 'precision mining' platform, licensed from Lawrence Livermore National Laboratory and co-developed with Pennsylvania State University, binds individual metals with high selectivity, aiming to cut the cost and environmental damage of conventional chemical refining while helping secure a domestic U.S. supply of materials used in EVs, wind turbines, electronics, and defense systems.
Binarly
Binarly is a firmware and software supply chain security company that reads the code no one else looks at - the layer below the operating system. Its AI-powered Transparency Platform analyzes firmware binaries to surface known and unknown vulnerabilities, malicious implants, misconfigurations and cryptographic weaknesses, then builds a genuine software bill of materials by reconstructing dependencies from the binary itself rather than trusting a manifest. Founded in 2021 by veteran reverse engineers Alex Matrosov and Claudiu Teodorescu, the company has disclosed hundreds of high-impact firmware vulnerabilities, including the widely covered PKfail Secure Boot flaw.
Tidal Metals
Tidal Metals is a Trenton/Hamilton, New Jersey deep-tech company that extracts primary magnesium metal from seawater and desalination brine using nothing but renewable electricity and physical processes - no ore mining, no carbon emissions, and no waste stream. Founded by three plasma-physics PhDs who met at the Princeton Plasma Physics Laboratory, the company aims to rebuild a domestic U.S. magnesium supply chain currently dominated by China, serving aerospace, defense, and next-generation automotive manufacturing.
DUST Identity
DUST Identity authenticates physical objects with a thin coat of engineered diamond dust. Each randomly oriented constellation of microscopic diamonds forms a fingerprint that cannot be copied, and that fingerprint is bound to a tamper-evident digital record. The result is an unbroken chain of trust from raw material to final delivery, used across aerospace, defense, electronics, luxury goods, and sports memorabilia.
Obsidian Security
Obsidian Security is a Fortune 1000-focused cybersecurity company that secures business-critical SaaS applications, identities, and AI agents. Founded in 2017 by former Cylance and Carbon Black leaders, its platform unifies SaaS Security Posture Management (SSPM), Identity Threat Detection and Response (ITDR), and emerging AI agent and SaaS supply chain protection - giving enterprises visibility and control over the sprawling, interconnected SaaS ecosystems where modern breaches now begin.
Semgrep
Semgrep is a San Francisco application-security company that builds a unified AppSec platform (Code/SAST, Supply Chain/SCA, and Secrets) used by engineering teams at Dropbox, Figma, Snowflake and others. Born out of an open-source tool originally written at Facebook, it lets security teams write code-like rules and ship them through CI - cutting false positives and pushing fixes back to developers.