All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
ARMO gives away its most widely adopted product. The Cloud Native Computing Foundation accepted its open-source Kubescape project as an incubating project in 2025, and Rapid7 describes it as adopted by over 100K organizations. In January 2026 Rapid7 also picked ARMO to power runtime protection in its Command Platform. ARMO builds its paid platform on the same engine. A sensor inside the Linux kernel learns each workload's normal behavior, flags deviations, and can quarantine suspicious containers. The public commercial record is far thinner than the adoption numbers: two named customer case studies, no disclosed revenue, and no funding announced since a $30 million round in 2022. Watch whether Rapid7 brings ARMO the enterprise contracts its own record does not yet show.
| Description | Cloud runtime security company that created and maintains the open-source Kubescape project and sells ARMO Platform, which combines Kubernetes posture management, runtime vulnerability prioritization, and behavioral threat detection and response. | [f1] |
|---|---|---|
| Founded | 2019 | [f2] |
| Funding | $34.5M total | [f3] |
| Latest funding | $30M Series A (April 2022) | [f4] |
| Product | What it does |
|---|---|
| ARMO Platform | Runtime security platform that baselines workload behavior with an eBPF sensor, detects and responds to anomalies, and adds Kubernetes posture, compliance, and vulnerability management. |
| Kubescape | Open-source Kubernetes security platform and CNCF incubating project that scans clusters, manifests, and CI/CD pipelines for misconfigurations and vulnerabilities, with runtime threat detection. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
ARMO Platform baselines cloud workload behavior with an eBPF sensor to detect runtime threats and respond automatically, and its Kubescape-based scanning inventories and hardens Kubernetes clusters and configurations. These capabilities are mapped to the Cyber Defense Matrix. [f5]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score |
|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. | 4/5 |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 4/5 |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
| Dimension | Score |
|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | ARMO: About Us | official | 2026-07-03 |
| f2 | Calcalist CTech: ARMO raises $30 million for open-source Kubernetes security platform | press | 2026-07-03 |
| f3 | SiliconANGLE: ARMO launches Behavioral Cloud Application Detection and Response to unify runtime security | press | 2026-07-03 |
| f4 | TechCrunch: ARMO raises $30M to build an end-to-end open source Kubernetes security platform | press | 2026-07-03 |
| f5 | ARMO homepage: platform capabilities | official | 2026-07-03 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | ARMO homepage: Runtime Behavioral Cloud Application Detection & Response (CADR) “+11K GitHub Stars +40K Companies +100K Deployments +15M Scans per Month” | official | 2026-07-03 |
| s2 | ARMO: About Us (leadership and Kubescape stewardship) “Leadership Shauli Rozen CEO & Co-founder Ben Hirschberg CTO & Co-founder” | official | 2026-07-03 |
| s3 | ARMO: Kubernetes Security Pricing & Cost Tiers “ARMO Platform pricing model depends on a few factors specific to your cloud environment, such as the number of vCPUs and other cloud resources.” | official | 2026-07-03 |
| s4 | ARMO: Behavioral Cloud Application Detection & Response (CADR) product page “ARMO CADR is a behavioral security solution designed to protect cloud applications.” | official | 2026-07-03 |
| s5 | ARMO: Cloud-Native Security for AI Workloads “Complete AI Discovery: Automatically detect AI agents, inference servers, and frameworks (LangChain, AutoGPT, etc.) across your clusters.” | official | 2026-07-03 |
| s6 | GitHub API: kubescape/kubescape repository metadata (Apache License 2.0, created August 2021) “"stargazers_count":11505” | official | 2026-07-03 |
| s7 | ARMO case study: Vandebron (Kubernetes security) “Vandebron chose ARMO Platform for its comprehensive approach to Cloud & Kubernetes security.” | official | 2026-07-03 |
| s8 | ARMO case study: Orange Business (on-prem, sovereign cloud) “In addition to internal use, Orange Business offers ARMO Platform as the default security solution for its Managed Kubernetes Service (MKS) customers , extending the same level of protection, visibility, and compliance to their clients.” | official | 2026-07-03 |
| s9 | Rapid7 press release (January 14, 2026): Rapid7 and ARMO Enable Organizations to Stop Cloud Attacks Earlier with Runtime Security “ARMO is the creator and main maintainer of Kubescape, one of the most widely adopted cloud-native open source security projects today adopted by over 100K organizations worldwide” | official | 2026-07-03 |
| s10 | TechCrunch (April 27, 2022): ARMO raises $30M to build an end-to-end open source Kubernetes security platform “it has raised a $30 million Series A funding round led by Tiger Global. New investor Hyperwise Ventures as well as existing investors Pitango First and Peled Ventures also participated in this round.” | press | 2026-07-03 |
| s11 | Calcalist CTech: ARMO raises $30 million for open-source Kubernetes security platform “ARMO was founded in 2019 by Shauli Rozen, Leonid Sandler and Ben Hirschberg.” | press | 2026-07-03 |
| s12 | SiliconANGLE (March 25, 2025): ARMO launches Behavioral Cloud Application Detection and Response to unify runtime security “ARMO is a venture capital-backed startup that has raised $34.5 million over two rounds, including a round of $30 million in April 2022.” | press | 2026-07-03 |
| s13 | InfoQ (March 29, 2026): Kubescape 4.0 Brings Runtime Security and AI Agent Scanning to Kubernetes “Kubescape was accepted as a CNCF Incubating project in January 2025, having entered the CNCF Sandbox in 2022.” | press | 2026-07-03 |
| s14 | Cloud Native Computing Foundation (CNCF) blog (February 26, 2025): Kubescape becomes a CNCF incubating project “Notable examples of Kubescape adoption include: Intel uses Kubescape for security prioritization AWS using it in security educational material Bitnami uses Kubescape to improve Helm chart security” | research | 2026-07-03 |
| s15 | Dark Reading (January 30, 2021): Cloud Security Startup Armo Emerges from Stealth with $4.5M “A new cloud security startup emerged from stealth this week with $4.5 million in funding and a mission to strengthen security for cloud-native workloads.” | press | 2026-07-03 |
| s16 | SC Media (January 20, 2026): Rapid7 partners with ARMO for cloud runtime security “Rapid7 has announced a strategic partnership with cloud security firm ARMO, integrating advanced runtime protection into its Rapid7 Command Platform to extend its exposure management capabilities with real-time threat detection” | press | 2026-07-03 |
| s17 | The Hacker News (April 24, 2025): Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools (ARMO research) “both Falco and Tetragon are blind to io_uring-based operations owing to the fact that they are heavily reliant on system call hooking.” | press | 2026-07-03 |
| s18 | KuppingerCole: Rising Star ARMO (Alexei Balaganski) “ARMO, based in Palo Alto, excels in cloud-native application security with Kubescape, an open-source platform for Kubernetes. Kubescape emphasizes behavioral analytics, runtime threat detection, and compliance visibility, addressing challenges like alert fatigue.” | research | 2026-07-03 |
| s19 | ARMO trust-surface probe: trust./security. subdomains (no DNS), /trust and /compliance 404, /security empty render, homepage SOC 2 badge, 2026-07-03 “https://www.armosec.io/wp-content/uploads/2024/05/SOC_2-1.svg” | official | 2026-07-03 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | ARMO homepage: Runtime Behavioral Cloud Application Detection & Response (CADR) “+11K GitHub Stars +40K Companies +100K Deployments +15M Scans per Month” | official | 2026-07-03 |
| s2 | ARMO: About Us (leadership and Kubescape stewardship) “Leadership Shauli Rozen CEO & Co-founder Ben Hirschberg CTO & Co-founder” | official | 2026-07-03 |
| s3 | ARMO: Kubernetes Security Pricing & Cost Tiers “ARMO Platform pricing model depends on a few factors specific to your cloud environment, such as the number of vCPUs and other cloud resources.” | official | 2026-07-03 |
| s4 | ARMO: Behavioral Cloud Application Detection & Response (CADR) product page “ARMO CADR is a behavioral security solution designed to protect cloud applications.” | official | 2026-07-03 |
| s5 | ARMO: Cloud-Native Security for AI Workloads “Complete AI Discovery: Automatically detect AI agents, inference servers, and frameworks (LangChain, AutoGPT, etc.) across your clusters.” | official | 2026-07-03 |
| s6 | GitHub API: kubescape/kubescape repository metadata (Apache License 2.0, created August 2021) “"stargazers_count":11505” | official | 2026-07-03 |
| s7 | ARMO case study: Vandebron (Kubernetes security) “Vandebron chose ARMO Platform for its comprehensive approach to Cloud & Kubernetes security.” | official | 2026-07-03 |
| s8 | ARMO case study: Orange Business (on-prem, sovereign cloud) “In addition to internal use, Orange Business offers ARMO Platform as the default security solution for its Managed Kubernetes Service (MKS) customers , extending the same level of protection, visibility, and compliance to their clients.” | official | 2026-07-03 |
| s9 | Rapid7 press release (January 14, 2026): Rapid7 and ARMO Enable Organizations to Stop Cloud Attacks Earlier with Runtime Security “ARMO is the creator and main maintainer of Kubescape, one of the most widely adopted cloud-native open source security projects today adopted by over 100K organizations worldwide” | official | 2026-07-03 |
| s10 | TechCrunch (April 27, 2022): ARMO raises $30M to build an end-to-end open source Kubernetes security platform “it has raised a $30 million Series A funding round led by Tiger Global. New investor Hyperwise Ventures as well as existing investors Pitango First and Peled Ventures also participated in this round.” | press | 2026-07-03 |
| s11 | Calcalist CTech: ARMO raises $30 million for open-source Kubernetes security platform “ARMO was founded in 2019 by Shauli Rozen, Leonid Sandler and Ben Hirschberg.” | press | 2026-07-03 |
| s12 | SiliconANGLE (March 25, 2025): ARMO launches Behavioral Cloud Application Detection and Response to unify runtime security “ARMO is a venture capital-backed startup that has raised $34.5 million over two rounds, including a round of $30 million in April 2022.” | press | 2026-07-03 |
| s13 | InfoQ (March 29, 2026): Kubescape 4.0 Brings Runtime Security and AI Agent Scanning to Kubernetes “Kubescape was accepted as a CNCF Incubating project in January 2025, having entered the CNCF Sandbox in 2022.” | press | 2026-07-03 |
| s14 | Cloud Native Computing Foundation (CNCF) blog (February 26, 2025): Kubescape becomes a CNCF incubating project “Notable examples of Kubescape adoption include: Intel uses Kubescape for security prioritization AWS using it in security educational material Bitnami uses Kubescape to improve Helm chart security” | research | 2026-07-03 |
| s15 | Dark Reading (January 30, 2021): Cloud Security Startup Armo Emerges from Stealth with $4.5M “A new cloud security startup emerged from stealth this week with $4.5 million in funding and a mission to strengthen security for cloud-native workloads.” | press | 2026-07-03 |
| s16 | SC Media (January 20, 2026): Rapid7 partners with ARMO for cloud runtime security “Rapid7 has announced a strategic partnership with cloud security firm ARMO, integrating advanced runtime protection into its Rapid7 Command Platform to extend its exposure management capabilities with real-time threat detection” | press | 2026-07-03 |
| s17 | The Hacker News (April 24, 2025): Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools (ARMO research) “both Falco and Tetragon are blind to io_uring-based operations owing to the fact that they are heavily reliant on system call hooking.” | press | 2026-07-03 |
| s18 | KuppingerCole: Rising Star ARMO (Alexei Balaganski) “ARMO, based in Palo Alto, excels in cloud-native application security with Kubescape, an open-source platform for Kubernetes. Kubescape emphasizes behavioral analytics, runtime threat detection, and compliance visibility, addressing challenges like alert fatigue.” | research | 2026-07-03 |
| s19 | ARMO trust-surface probe: trust./security. subdomains (no DNS), /trust and /compliance 404, /security empty render, homepage SOC 2 badge, 2026-07-03 “https://www.armosec.io/wp-content/uploads/2024/05/SOC_2-1.svg” | official | 2026-07-03 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Do not republish its content or share access without the operator's permission.