All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Apiiro, founded in 2019, sells application security software to security teams at large enterprises. Its patented Deep Code Analysis engine maps a customer’s code and its full history to the systems where that code runs. Apiiro’s AI agents fix security flaws and add security instructions to developers’ prompts for AI coding assistants. Apiiro’s named customers include BlackRock, TIAA, USAA, Bloomberg, SoFi and Shell. It has raised $135 million, most recently a $100 million Series B led by General Catalyst. Its CEO previously co-founded and led Aorato, a security company sold to Microsoft. Calcalist reported that Palo Alto Networks held talks to acquire Apiiro that ended over valuation. A platform vendor like it could build or buy similar code analysis and sell it inside a broader suite.
| Description | Application security company whose patented Deep Code Analysis maps an enterprise's software architecture from code to runtime, with AI agents that fix code risks and steer AI coding assistants toward secure code. | [f1] |
|---|---|---|
| Founded | 2019 | [f2] |
| HQ | New York, New York, United States | [f2] |
| Funding | $135M total | [f2] |
| Latest funding | Series B, $100M (2022), led by General Catalyst | [f2] |
| Product | What it does |
|---|---|
| Apiiro Application Security Platform | ASPM platform unifying design-time threat modeling, SAST, SCA, secrets, IaC, API, and supply chain risk into one risk graph built on Deep Code Analysis, with native scanners on an open platform. |
| Deep Code Analysis (DCA) | Patented engine that continuously analyzes whole codebases with call-flow and code-to-runtime reachability, inventorying APIs, dependencies, secrets, AI models, AI agents, and MCP servers. |
| AutoFix AI Agent | AI agent introduced in August 2025 that pulls software graph, policy, and runtime context into the IDE to propose validated triage and remediation for design and code risks. |
| Apiiro Guardian Agent | AI application-security agent that infuses a developer's prompts to AI coding assistants with security guidance drawn from the organization's threat models, compliance policies, and architecture. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
The Apiiro Application Security Platform inventories, prioritizes, and remediates risks across applications, code, and the software supply chain. This conventional application security maps to the Cyber Defense Matrix. [f3]
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Apiiro Guardian Agent grounds AI coding agents in the application architecture, generates architecture-aware threat models, and enriches coding prompts so they produce secure, compliant code. This capability is mapped to the AI Defense Matrix. [f4]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Apiiro names the enterprise application security team as its buyer and argues that AI-driven development leaves that team facing 3-4x more complex code and 10x more risk. Those figures are Apiiro’s own. DevOps.com and AppSec Santa describe the same problem without quantifying it, so the buyer and pain are clear but the scale is vendor-asserted. [s6, s28, s13] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Apiiro’s own pages document Deep Code Analysis, the Risk Graph, native scanners, AutoFix and Guardian Agent in detail, and an AppSec Santa review describes the code-behavior analysis. The patent documents the graph mechanism rather than validating its implementation, and the Gartner rankings reach the record through Apiiro’s own account. One outside technical appraisal does not supply the multiple independent validation points rung 4 needs, so depth sits at rung 3 on concrete vendor-side detail. [s3, s5, s13, s21, s6] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | AI coding agents are the credible enabler, the change Apiiro built its January 2026 Guardian Agent launch around. Apiiro is the source for each buyer-side signal. They are its account of Gartner’s rankings, two Prudential executives quoted in its January 2026 release, and its Athena coalition membership, which Open Source For You relays from the announcement. The cited sources contain no independently documented buyer-side signal, so the demand evidence is indirect. [s15, s6, s31, s5] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Calcalist reports that Idan Plotnik co-founded and ran Aorato, which was sold to Microsoft for $200 million, with Yonatan Eldar as its head of development, and Microsoft’s own announcement confirms the acquisition. That is one prior in-domain build with an exit, shared by both founders. Rung 4 needs plurality plus independent evidence, and the record shows one build rather than several, so team credibility stays at 3. [s25, s23, s11] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 | Apiiro names Shell, Cloudera, SoFi and Paddle under a trusted-by heading on its homepage, and its 2026 releases list BlackRock, TIAA, USAA, Bloomberg and Shell as customers and quote two Prudential executives. Partnership and marketplace motion is documented beyond those pages. CRN quotes the CEO on GitHub and Google marketplace sales, and the AutoFix release names a ServiceNow partnership and quotes an Akamai executive. Open Source For You reports the Athena coalition membership. The customer names and the 104% ARR growth figure are the company’s own. [s1, s15, s32, s9, s35, s31, s18] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | CRN and SecurityWeek report $135 million raised in total, and Tracxn dates the latest round, a $100 million Series B led by General Catalyst, to November 2022. Apiiro has kept shipping since then, AutoFix in 2025 and Guardian Agent in 2026, and Tracxn counts 132 employees. Its 104% ARR growth is a company figure with no disclosed revenue base, so the raise reads as proportional to the enterprise motion while efficiency stays unconfirmed. [s9, s10, s29, s18, s15, s35] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Independent sources place Apiiro in application security posture management without vendor coaching. AppSec Santa reviews it as an ASPM platform and contrasts it with Cycode, ArmorCode and Legit, and Tracxn files it under application security. The Gartner, IDC and Frost & Sullivan placements it cites are displayed by Apiiro itself, so the category fit is clear while leadership of the category is vendor-reported. [s13, s29, s1, s6] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Deep Code Analysis, backed by a granted patent, and the Risk Graph built on it add friction to absorption. AppSec Santa describes the engine as analyzing code behavior. Calcalist reported that Palo Alto Networks negotiated to acquire Apiiro until talks stopped over valuation, so a platform vendor next to this buyer has shown interest in owning the capability. Apiiro has that friction but no evidenced moat that bundling could not eventually replicate. [s21, s13, s25, s9] |
Apiiro sells to the application security team inside large enterprises, the group responsible for code across many repositories, pipelines and running systems. Its pitch is that AI-driven development has left that team facing 3-4x more complex code and 10x more risk, figures Apiiro publishes itself.
Outside coverage confirms the problem without sizing it. A DevOps.com analysis describes the paradox that AI coding tools make developers more productive while increasing the vulnerabilities that need fixing. AppSec Santa describes Apiiro as aggregating findings from a buyer’s existing SAST, DAST and SCA tools to decide which ones matter. [s6, s28, s13]
Apiiro’s core technology is Deep Code Analysis, which connects to source control through an API and builds a graph of every application component across the codebase’s history. Apiiro describes it as a call-flow and code-to-runtime reachability engine that matches code resources to where they run. Apiiro holds US patent 11,301,356, granted in April 2022, for a system that builds historic and real-time commits into a multidimensional graph.
Apiiro uses native scanners for SAST, SCA, secrets, API security and IaC. It correlates their findings with third-party findings on that graph. AppSec Santa describes the engine as tracing data flows across function and service boundaries. The homepage adds inventories of AI models, agents, MCP servers and AI datasets found in code.
Apiiro builds two AI agents on that graph. AutoFix, launched in preview in August 2025, proposes fixes inside the developer’s IDE through a remote MCP connection. Guardian Agent, launched in private preview in January 2026, intercepts developers’ prompts to AI coding assistants and adds security instructions drawn from the customer’s architecture and policies before the code is generated. [s3, s6, s21, s13, s1, s4, s35, s5, s15]
Apiiro competes in application security posture management, where it positions itself as the analysis layer over a buyer’s existing scanners. AppSec Santa draws the line against named rivals: Cycode leans toward pipeline governance, Legit toward process visibility, and ArmorCode does not perform the deep code analysis Apiiro performs.
A larger platform vendor has tried to buy Apiiro. Calcalist reported that Palo Alto Networks negotiated to acquire Apiiro until talks stopped over valuation, and CRN reported that Apiiro raised its Series B two weeks later. Apiiro now pitches Guardian Agent to buyers adopting AI coding assistants. [s13, s25, s9, s15]
Apiiro sells to large enterprises through marketplaces and partners. Its homepage names Shell, Cloudera, SoFi and Paddle under a trusted-by heading and quotes a Shell engineering lead, and its 2026 releases list BlackRock, TIAA, USAA, Bloomberg and Shell as customers. AppSec Santa notes that those customer lists are vendor figures rather than audited ones.
The company reports 104% ARR growth in 2025 and says that, as of the end of 2025, it had closed the industry’s four largest enterprise ASPM deals to date. Both are its own figures. Partnerships widen distribution. CRN quotes the CEO on GitHub and Google marketplace sales, and Apiiro names Akamai and ServiceNow as partners. Open Source For You reports that Apiiro joined Chainguard’s Athena coalition, whose members include J.P. Morgan and Morgan Stanley. [s1, s15, s32, s13, s18, s9, s35, s31]
Idan Plotnik and Yonatan Eldar founded Apiiro after building and selling Aorato, an enterprise security company Microsoft acquired in 2014. Calcalist reports the sale at $200 million, with Plotnik as Aorato’s co-founder and CEO and Eldar as its head of development, and Microsoft’s announcement confirms the deal.
Plotnik then spent several years at Microsoft as a director and group manager, and he told TechTarget that his team there moved the acquired product to a cloud-native architecture. Apiiro’s own research record adds to that: GitHub’s advisory for a path traversal flaw credits Moshe Zioni, Apiiro’s VP of security research, with finding it. TechTarget reports that Apiiro won the RSA Conference Innovation Sandbox Contest. [s25, s23, s11, s39]
For a product that reads a customer’s source code, trust collateral is a buying requirement. Apiiro lists ISO/IEC 27001 and SOC 2 in its trust center. Its report listings include SOC 2, pentest and vulnerability assessment reports.
The same portal lists customer audit rights and cyber insurance among its documents. [s8, s13]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Cycode | competes with | Competes for the same enterprise application security posture management buyer, and AppSec Santa compares the two directly. | |
| Legit Security | competes with | Competes for the enterprise AppSec buyer, and AppSec Santa lists it as an alternative to Apiiro. | |
| ArmorCode | competes with | AppSec Santa lists it as an alternative for buyers who want a findings aggregator. | |
| Snyk | competes with | Competes for the application security budget that Apiiro's code and supply chain coverage targets. | |
| Checkmarx | competes with | Competes for the enterprise application security testing and posture management budget. | |
| Arnica | competes with | Competes for application security posture management buyers. | |
| Palo Alto Networks | adjacent | Platform vendor that, according to Calcalist, negotiated to acquire Apiiro before its Series B. | N/AWe scored these companies at different scopes, so the totals measure different things. |
Add analyzed competitors to compare them side by side with Apiiro.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
reinforce or reposition
Apiiro sells application security software that its customers’ own teams run. Its Deep Code Analysis engine maps code to running systems across a codebase’s full history. Apiiro holds a granted US patent for building past and live code commits into a graph of an application’s history. Customers connect the platform to source control, pull requests and build pipelines and can write their own rules, so leaving means rebuilding that setup. Apiiro lists SOC 2 and ISO/IEC 27001 in its trust center. A funded rival can obtain these attestations through ordinary enterprise preparation. Apiiro launched Guardian Agent in private preview in January 2026.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Apiiro sells software that the customer’s security and development teams operate: the platform connects to source control through an API, and AutoFix and Guardian Agent run in the developer’s IDE. The customer’s teams own the outcomes, and no managed service that takes accountability for them appears in the cited sources. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Leaving Apiiro means rebuilding the graph-based inventory, the custom rules and workflows, and the pull-request and pipeline guardrails a customer configured. The switching mechanism is documented, and the cited record does not size the migration. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Apiiro lists ISO/IEC 27001, SOC 2, and SOC 2 and pentest reports in its trust center. A funded rival can obtain those attestations through ordinary enterprise preparation, so they do not block a replacement. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Deep Code Analysis builds a call-flow and code-to-runtime reachability graph across entire codebases and their full history. Apiiro holds a granted patent for scanning historic and real-time commits into a multidimensional graph. AppSec Santa describes the engine as tracing data flows across function and service boundaries. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Apiiro builds and sells for large regulated enterprises. Its releases name BlackRock, TIAA, USAA and Bloomberg as customers and quote two Prudential executives, and AppSec Santa places the customer list in the Fortune 500 and large-financial bracket. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | The platform reads code through an API and adds guardrails to pull requests and build pipelines, which is the role of a platform with application features. Guardian Agent intercepts developers’ prompts to AI coding assistants. It launched in private preview in January 2026, and the cited record does not show it generally available and running in the path of real prompts. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | Apiiro holds US patent 11,301,356, granted in April 2022 and listed as active. It covers risk assessment built from historic and real-time code commits in a multidimensional graph, and Apiiro’s releases describe Deep Code Analysis as patented. That is evidenced IP the company owns, and a funded rival could still design an alternative engine with time and effort. |
Apiiro targets the application security leader at a large enterprise, the buyer who owns risk across many repositories, pipelines and running systems. The customers it names cluster in financial services and other large enterprises: BlackRock, TIAA, USAA, Bloomberg, SoFi and Shell in its releases, and Shell, Cloudera, SoFi and Paddle on its homepage.
AppSec Santa places the customer list in the Fortune 500 and large-financial bracket rather than the small-business tier, and describes the platform as aggregating findings from existing SAST, DAST and SCA tools. DevOps.com reports Apiiro’s expectation that application security teams will fund Guardian Agent, which keeps the budget holder the same as for the core platform.
The technical core is Deep Code Analysis, which Apiiro describes as a call-flow and code-to-runtime reachability engine that analyzes entire codebases across their full history. Apiiro holds US patent 11,301,356, granted in April 2022 and listed as active. It covers a system that scans historic and real-time commits into a multidimensional graph of an application’s current state and history.
AI shows up in two roles. As an asset to inventory, the platform discovers AI models, agents, MCP servers and AI datasets inside code. As a method, AutoFix proposes fixes in the IDE. Guardian Agent intercepts developers’ prompts to assistants such as GitHub Copilot and Cursor and adds security instructions drawn from the customer’s threat models and architecture. Help Net Security reports that a later update added AI threat modeling to Guardian Agent.
AppSec Santa describes the engine independently as tracing data flows across function and service boundaries. Guardian Agent launched in private preview in January 2026, and no independent measurement of how much it reduces vulnerabilities is among the cited sources.
Apiiro sells through an enterprise sales motion extended by marketplaces and partners. CRN quotes the CEO saying Apiiro sells through the GitHub and Google marketplaces and was growing channel sales, and Apiiro names Akamai and ServiceNow as partners.
Apiiro says Gartner ranked it first for ASPM in the Critical Capabilities for application security testing. It also says Gartner named it a Leader in the 2026 Magic Quadrant for software supply chain security, and it reports 104% ARR growth in 2025. Apiiro is the source for all three, through its own pages and releases.
AppSec Santa reports that Apiiro does not publish prices on its website. The visible buying path on the homepage is a demo request.
Apiiro reports 104% ARR growth in 2025 without disclosing the revenue base behind that figure.
Apiiro connects to a customer’s source control through a read-only API, which Apiiro says scales to more than 100,000 repositories. Apiiro describes the integration as lightweight with no production impact, and AppSec Santa notes that Deep Code Analysis needs the full commit history.
Findings reach developers through pull requests, build pipelines and the IDE, where AutoFix runs over a remote MCP connection. The trust center lists a pentest report, a SOC 2 report and a vulnerability assessment.
Apiiro lists ISO/IEC 27001 and SOC 2 in its trust center. Its report listings include SOC 2, pentest and vulnerability assessment reports. It also lists customer audit rights and cyber insurance among its documents.
For a vendor whose product reads source code, those documents answer a security reviewer’s first questions, and they establish credibility with that reviewer rather than keeping rivals out.
Apiiro presents itself as an open platform. It integrates with application and cloud security tools and correlates their findings with its own scanners on one software graph. AppSec Santa confirms that it aggregates findings from existing SAST, DAST and SCA tools.
Apiiro also partners beyond the scanner market. A ServiceNow partnership maps code repositories to business applications in the customer’s CMDB, and Akamai says it partnered with Apiiro to join code and runtime insight. Apiiro also joined Chainguard’s Athena coalition for open-source security, whose members Open Source For You lists as including J.P. Morgan, Morgan Stanley, Cisco and Cloudflare.
Apiiro’s founders previously worked at Aorato, which Microsoft acquired. Calcalist reports that Idan Plotnik co-founded and ran Aorato, sold to Microsoft for $200 million, and that Yonatan Eldar was its head of development. Microsoft announced the acquisition, which TechTarget dates to 2014.
Plotnik told TechTarget that his team at Microsoft moved Aorato’s product to a cloud-native architecture, and that he launched Apiiro after several years there. GitHub’s advisory for a path traversal flaw credits Apiiro’s VP of security research, Moshe Zioni, with finding it.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | GlobeNewswire (Apiiro release): Apiiro Launches Guardian Agent (January 28, 2026) | official | 2026-09-23 |
| f2 | CRN on Apiiro Series B (founded 2019, HQ New York, R&D Tel Aviv) | press | 2026-09-23 |
| f3 | Apiiro platform: unified application security | official | 2026-06-20 |
| f4 | AI Defense Matrix Catalog mapping (Apiiro Guardian Agent) | other | 2026-09-23 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.