All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Kanopy Security’s reviewed record names no customer, from its 2023 founding as Nokod Security to its 2026 rename around shadow AI governance. The homepage says Fortune 500 companies trust it. The testimonials pair quotes with job titles, never with company names. The awards it cites come from its own press releases and an awards-site profile. The independently verifiable asset is the founding team: Amichai Shulman co-founded Imperva, and Yair Finzi co-founded SecuredTouch, which Ping Identity acquired. The product gives security teams discovery, risk detection, and remediation for the apps, automations, and AI agents that business users build on platforms such as Power Automate, Copilot Studio, and Salesforce. On traction, a buyer must take the vendor at its word.
| Description | Kanopy Security provides shadow AI security and governance for business-built software, discovering and protecting the applications, automations, and AI agents that business users create on enterprise low-code and agent-building platforms. | [f1] |
|---|---|---|
| Founded | 2023 | [f2] |
| HQ | Ramat Gan, Israel | [f3] |
| Funding | $8M total | [f4] |
| Latest funding | Seed, $8M (June 2023) | [f4] |
| Product | What it does |
|---|---|
| Kanopy | Discovers, profiles, and protects the applications, automations, and AI agents that business users build on platforms such as Copilot Studio, Power Automate, Salesforce, UiPath, and Retool. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Kanopy inventories the AI agents and automations that business users build on platforms such as Copilot Studio and Power Automate, profiles each agent to learn its normal behavior, and blocks risky agent instructions. These capabilities are mapped to the AI Defense Matrix. [f5]
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Kanopy also inventories the low-code applications and automations built on platforms such as Power Automate, detects vulnerabilities and compliance issues, and turns findings into one-click remediation. The low-code application security line is mapped to the Cyber Defense Matrix. [f6]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Kanopy names a specific buyer (application security teams) and a specific gap (apps, automations, and agents that business users build outside the AppSec pipeline), but the pain evidence is the vendor's own survey and announcement materials rather than independent quantification. [s1, s8, s12] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Per-platform solution pages and the Adaptive Agent Security line describe concrete mechanisms (inventory, behavioral profiling, one-click remediation), all on the vendor's own pages, with no public docs portal or third-party technical evaluation in the record. [s5, s6, s7] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | Generative AI put app and agent building in business users' hands, the enabler the 2023 seed coverage flagged and the May 2026 Salesforce integration announcement rides, but buyer-side demand evidence stays indirect: anonymous testimonials and the vendor's own announcements. [s8, s12, s1] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | Both founders carry verifiable in-domain track records reported by independent press at the seed round: Amichai Shulman co-founded Imperva and served as its CTO, and Yair Finzi co-founded SecuredTouch, which Ping Identity acquired. [s9, s2, s10] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 2/5 | The homepage claims Fortune 500 trust and shows testimonials with job titles but no company names, and no named customer or independently corroborated partnership appears in the reviewed sources. [s1, s14] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | The $8 million 2023 seed round is proportional to a seed-stage enterprise motion, and the company kept shipping through 2026 (a US office, Salesforce coverage, an agent runtime line) with no disclosed revenue to confirm efficiency. [s8, s12, s15] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 | The company repositioned from low-code application security to shadow AI governance around its 2026 rename, a recognizable but nascent placement that still needs vendor explanation before buyers can assign it a budget line. [s13, s14, s10] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Coverage spans several agent-building platforms, friction a single platform owner's native controls would not replicate across rivals' environments, but no data asset or procurement position appears that bundling could not eventually match. [s6, s12, s13] |
Business users now build applications, automations, and AI agents inside platforms such as Power Automate, Copilot Studio, Salesforce, ServiceNow, UiPath, and Retool, and that software never passes through the application security pipeline. Kanopy frames this as the shadow AI problem: the builders are not professional developers, the assets never touch a code repository, and the security team often cannot see them at all.
The pain evidence is mostly vendor-side. Kanopy publishes its own survey report on the state of security in business-built applications, and its 2023 seed announcement framed generative AI as an accelerant that would widen this ungoverned attack surface. The testimonials on the homepage describe security leaders discovering the gap in their own environments, but no independent research quantifying the problem appears in the reviewed sources. [s1, s8, s14]
The Kanopy platform covers three moves: discover, detect, and fix. It auto-maps the copilots, flows, models, and applications that business users build across the supported platforms, detects vulnerabilities, data leakage paths, and compliance issues in them, and routes guidance or one-click remediation to the person who built the asset rather than only to the security team.
Adaptive Agent Security extends this from build-time scanning to runtime. The product profiles each agent's behavior, applies adaptive guardrails, and blocks risky actions in real time, with coverage for Microsoft Copilot Studio environments. A May 2026 integration added the same coverage for agents and automations created inside Salesforce.
All capability evidence comes from the vendor's own pages and announcements. The reviewed record contains no public documentation portal, no published pricing, and no third-party technical evaluation of the product's detection quality. [s5, s6, s7, s12]
Kanopy sells neutrality across platforms whose owners are its most obvious rivals. Microsoft, Salesforce, ServiceNow, and UiPath each control the environments Kanopy monitors, and each could add equivalent governance controls natively for its own platform. Kanopy's counter is breadth: an enterprise whose employees build across several platforms would otherwise stitch together per-platform admin consoles.
The company renamed from Nokod Security to Kanopy Security in 2026 and repositioned from low-code application security toward shadow AI and agent governance, a direction where adjacent AI-security startups also compete for agent-governance budgets. The vendor's own copy positions it as the category front-runner, a label the reviewed record offers no analyst placement to weigh. [s13, s14, s12]
Kanopy's go-to-market is demo-led and enterprise-focused, and its public traction evidence is anonymous. The homepage states the platform is trusted by Fortune 500 companies and quotes security leaders at insurance, financial services, and healthcare organizations, but every quote carries a job title without a company name. No named customer or case study appears in the reviewed sources.
The growth signals that do appear are company-initiated: a U.S. center of operations opened in Boulder, Colorado in August 2025, the Salesforce coverage announcement in May 2026, and two 2026 awards (a Global InfoSec Award announced at RSAC and a Cybersecurity Stars award from The Hacker News), one announced in the company's own press release, the other shown on the award site's winner page. [s1, s15, s12, s14, s17]
The founding team is the company's strongest independently verified asset. SecurityWeek reported at the seed round that Nokod is the brainchild of former Imperva co-founder and CTO Amichai Shulman and Yair Finzi, former co-founder of SecuredTouch, which Ping Identity acquired. The company's own pages add that Shulman served as Imperva's CTO and Chief Scientist.
The founders also published their full 21-slide seed deck through TechCrunch's pitch deck teardown series in July 2023. The public record documents the investor set (Acrew Capital, Meron Capital, Flint Capital) alongside the founders' application security pedigree. [s9, s2, s11, s8]
Kanopy announced SOC 2 Type II certification in a 2024 press release, and the homepage footer carries image-only ISO and SOC 2 badge files (Iso.svg, SOC2.svg) with no linked report or attestation detail.
No trust portal was found by probe of the trust. and security. subdomains and the /trust and /compliance paths as of 2026-07-03. The subdomains do not resolve and the paths return 404, so a buyer would need to request audit evidence directly. [s16, s18, s1]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Zenity | competes with | Secures the same agents, apps, and automations that business users build across Power Platform, Copilot Studio, and Salesforce, sold to the same enterprise application security buyers. | |
| Noma Security | adjacent | AI security platform covering agents and the AI supply chain enterprise-wide rather than citizen-developer platforms specifically. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Microsoft | adjacent | Owns Power Automate and Copilot Studio and controls the admin and governance surface for the same agents Kanopy secures. | N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. |
| Salesforce | adjacent | Owns the Salesforce platform where Kanopy's May 2026 integration operates and could ship equivalent native agent controls. | N/AWe scored these companies at different scopes, so the totals measure different things. |
Add analyzed competitors to compare them side by side with Kanopy Security.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
Kanopy operates on access that platform owners grant: it sees an environment only through its connections into Power Automate, Copilot Studio, Salesforce, ServiceNow, UiPath, and Retool, and each of those owners could add the same governance controls natively for its own platform. The durable piece is what an enterprise accumulates inside Kanopy, the policies, agent behavior baselines, and remediation workflows a switching customer would have to rebuild. A funded rival faces few other obstacles: the software is a connected service, the referenced buyers are anonymous, the compliance evidence is footer badges and a report on request, and the reviewed record shows no proprietary data asset. Cross-platform breadth is the head start, not yet a durable lead.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Kanopy delivers software the customer connects to its platforms and operates itself, with remediation guidance routed to each asset's builder, the software-as-product level. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | The policies, agent behavior baselines, and remediation workflows an enterprise tunes across its platforms accumulate in the product, meaningful friction that stops short of network effects or regulatory data residency. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Kanopy announced SOC 2 Type II certification in 2024 and shows image-only ISO and SOC 2 footer badges, but no inspectable report or attestation portal was found by probe of the trust surfaces as of 2026-07-15, procurement table stakes rather than a blocking requirement. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Real-time behavioral profiling of agents, adaptive guardrails, and risk analysis of visual workflow logic across multiple platforms is real-time systems work that draws on specialized application security expertise. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 | The referenced buyers are enterprise security leaders in insurance, financial services, and healthcare, but every reference is anonymous, so the regulated-enterprise procurement position is asserted rather than demonstrated. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | The product is a control layer spanning several agent-building platforms, more than a single-use application but not infrastructure that other applications depend on. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The public record shows no named proprietary dataset, and the inventories and behavioral baselines it describes are per-customer artifacts a funded rival could rebuild. |
Kanopy sells to enterprise security and application security teams whose business users build software the security pipeline never sees. The homepage testimonials come from security leaders at insurance, financial services, and healthcare organizations, regulated verticals where ungoverned automations carry compliance consequences, though every reference is anonymous.
The motion targets enterprises. The site claims Fortune 500 trust, the path to the product is a demo request, and the company opened a U.S. center of operations in Boulder, Colorado in August 2025 to serve North American demand alongside its Ramat Gan address. The reviewed record shows no self-service tier or mid-market packaging.
The product's distinguishing claim is that it works inside the visual builders where business users create software. It auto-maps the copilots, flows, models, and applications built across the supported platforms, detects vulnerabilities and data leakage paths, and routes guidance or one-click remediation to the person who built the asset.
Adaptive Agent Security extends the platform from build-time scanning to runtime: it profiles each agent's behavior, applies adaptive guardrails, and blocks risky actions in real time, with coverage for Microsoft Copilot Studio environments. The May 2026 Salesforce integration extends the wider platform to agents and automations created inside Salesforce.
AI is the protected asset here more than the method. The vendor describes behavioral profiling and adaptive guardrails, but no benchmark, third-party evaluation, or technical documentation in the public record tests how well the detection works.
Kanopy's go-to-market runs on direct, demo-led enterprise sales. Every product page ends in a demo request, the reviewed sources show no published pricing, and the visible demand generation is content and awards: a vendor survey report, press releases, and two 2026 awards, one announced in its own press release and one shown on the award site's winner page.
Distribution through channels an incumbent cannot buy quickly, the strong signal for this stage, does not appear in the reviewed sources. The reviewed pages show no reseller, MSSP, or marketplace motion, so the selling model the record supports is direct, demo-led enterprise sales from the Israel and Boulder offices.
Kanopy publishes no pricing. The reviewed sources show no price page, no charging unit, and no tier structure, and a quote requires going through the demo funnel.
Hidden pricing at this stage usually signals negotiated enterprise deals, which matches the Fortune 500 positioning, but it leaves buyers unable to compare the cost of governing business-built software against the platform owners' native admin tooling from the site alone.
Kanopy delivers its platform as a connected service into the customer's agent-building environments, with no customer-hosted deployment documented in the reviewed pages. Findings return as guidance to AppSec teams, platform owners, and business builders, with one-click remediation where possible.
Routing remediation to the asset's builder is the operationally distinctive choice: it spreads the fix workload beyond the security team, which is the bottleneck the product exists to relieve. The Boulder announcement adds dedicated local customer success teams that guide complex deployments and faster support resolution in U.S. time zones. The record does not detail a formal professional-services or onboarding package.
Kanopy announced SOC 2 Type II certification in a 2024 press release, which offers the report to existing and prospective clients on request. The homepage footer shows image-only ISO and SOC 2 badges (Iso.svg, SOC2.svg) with no linked report, and a 2026-07-15 probe found no attestation portal: the trust and security subdomains do not resolve, the /trust and /compliance paths return 404, and the /security path serves an event page.
For a vendor selling security governance to regulated enterprises, that gap matters: the buyers its testimonials describe would ordinarily expect a self-serve trust center during procurement rather than a report on request. The corporate basics are in order, with current Terms of Use naming Kanopy Security Ltd. as the operating entity.
Kanopy exists entirely on other vendors' platforms. Its coverage spans Power Automate, Copilot Studio, Salesforce, ServiceNow, UiPath, and Retool, and its visibility depends on the connector and API access those platform owners grant. The same owners are the product's most credible future competitors, since each could ship equivalent governance for its own environment.
The cross-platform position is also the pitch: each platform owner's native controls govern its own environment, so an enterprise whose employees build across several platforms would look for a neutral layer. The May 2026 Salesforce integration shows the company widening that footprint, and the AI Defense Matrix Catalog records the product's agent-security coverage across discovery, runtime protection, and orchestration visibility.
The founders carry the company's credibility. Amichai Shulman co-founded Imperva and served as its CTO and Chief Scientist, and Yair Finzi co-founded SecuredTouch, which Ping Identity acquired, a pairing SecurityWeek reported when the company raised its $8 million seed round from Acrew Capital, Meron Capital, and Flint Capital in June 2023.
The founders also shared a lightly edited 21-slide seed deck, with some material redacted, through TechCrunch's teardown series, and the public record documents both the named investors and the founders' application security pedigree. Beyond the founders, the About page names vice presidents for sales, research and development, marketing, and HR and operations.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Kanopy Security homepage: Shadow AI Security and Governance for Business-Builds | official | 2026-07-03 |
| f2 | SiliconANGLE: Nokod Security raises $8M to enhance low-code/no-code app security (June 29, 2023) | press | 2026-07-03 |
| f3 | Kanopy Security contact page (structured address data) | official | 2026-07-03 |
| f4 | PR Newswire (Nokod Security announcement): Nokod Raises $8M Seed Round From Seasoned Cybersecurity Investors | press | 2026-07-03 |
| f5 | AI Defense Matrix Catalog mapping for Kanopy Security | other | 2026-07-03 |
| f6 | Kanopy Security: Power Platform Security solution page | official | 2026-07-03 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Kanopy Security homepage: Shadow AI Security and Governance for Business-Builds “Trusted by Fortune 500 Companies” | official | 2026-07-03 |
| s2 | Kanopy Security: About Us (Protecting the Good Jungle) “Before Kanopy, Amichai co-founded Imperva, where he served as CTO and Chief Scientist, creating one of the industry’s most influential data and application security companies.” | official | 2026-07-03 |
| s3 | Kanopy Security: Terms of Use (last revised December 25, 2025) “Kanopy Security Ltd. (“Kanopy”, “we”, “our”) welcomes you” | official | 2026-07-03 |
| s4 | Kanopy Security: contact page structured address data (Ramat Gan) “"streetAddress": "14 Abba Hillel St", "addressLocality": "Ramat Gan"” | official | 2026-07-03 |
| s5 | Kanopy Security: AI Governance and AI Agents Security page “Auto-map every copilot, flow, and model in your environment.” | official | 2026-07-03 |
| s6 | Kanopy Security: Adaptive Agent Security page “Kanopy’s Adaptive Agent Security delivers real-time monitoring, behavioral profiling, and adaptive guardrails that keep every agent’s actions in check, without slowing innovation.” | official | 2026-07-03 |
| s7 | Kanopy Security: Power Platform Security solution page “We turn findings into action. AppSec teams, platform owners, and business builders get simple guidance and, where possible, one-click remediation.” | official | 2026-07-03 |
| s8 | PR Newswire (Nokod Security announcement, June 29, 2023): Nokod Raises $8M Seed Round From Seasoned Cybersecurity Investors “announced its $8 million seed round, which will be used to establish a presence in the United States market, as well as to expand the R&D teams and support novel research of security vulnerabilities in the low-code/no-code domain. Funds were raised from Acrew Capital, Meron Capital and Flint Capital” | press | 2026-07-03 |
| s9 | SecurityWeek: Nokod Snags $8M to Secure Low Code/No-Code Custom Apps (June 2023) “Nokod is the brainchild of former Imperva co-founder and CTO Amichai Shulman and Yair Finzi, former co-founder of SecuredTouch (acquired by Ping Identity).” | press | 2026-07-03 |
| s10 | SiliconANGLE: Nokod Security raises $8M to enhance low-code/no-code app security (June 29, 2023, Duncan Riley) “Founded earlier this year, Nokod offers a platform that enables organizations to secure their low-code/no-code custom applications and RPA by scanning them for security and compliance issues and applying customized auto-remediation policies.” | press | 2026-07-03 |
| s11 | TechCrunch: Pitch Deck Teardown, Nokod Security’s $8M seed deck (July 7, 2023, Haje Jan Kamps) “The company has left the 21-slide deck intact except for a few parts.” | press | 2026-07-03 |
| s12 | PR Newswire (Kanopy Security announcement, May 12, 2026): Salesforce Integration to Secure Agents and Automations Built by Business Users “BOULDER, Colo., May 12, 2026 /PRNewswire/ -- Kanopy Security, the cybersecurity platform securing AI and apps built by business users, today announced a new integration for Salesforce environments designed to secure agents and automations created within the platform.” | press | 2026-07-03 |
| s13 | AI Defense Matrix Catalog: Kanopy Security product entry (agents and automations on Copilot Studio, Power Automate, Salesforce, UiPath, Retool) “Formerly Nokod Security, renamed 2026-05-12.” | other | 2026-07-03 |
| s14 | The Hacker News Cybersecurity Stars Awards 2026 winner page (vendor-submitted profile): Kanopy Security, Best Enterprise AI Governance Platform “While rapid citizen development on platforms like Microsoft Power Automate, Copilot Studio, Salesforce, and ServiceNow accelerates innovation, it also introduces critical vulnerabilities that bypass traditional security oversight.” | other | 2026-07-03 |
| s15 | Kanopy Security press release (August 13, 2025): Opens U.S. Headquarters in Boulder, Colorado “Kanopy Security is expanding its global footprint with a new U.S. center of operations in Boulder, Colorado, positioning our team to better serve the surging North American demand for no-code application security.” | official | 2026-07-03 |
| s16 | Trust surface probe 2026-07-03 (curl): trust./security. subdomains unresolvable, /trust /compliance 404, footer badges Iso.svg SOC2.svg | official | 2026-07-03 |
| s17 | Kanopy Security press release: Named Winner of the Coveted Global InfoSec Awards during RSAC Conference 2026 “Kanopy Security Named Winner of the Coveted Global InfoSec Awards during RSAC Conference 2026” | official | 2026-07-03 |
| s18 | Kanopy Security press release (March 14, 2024): Achieves SOC 2 Type II Certification “After a thorough evaluation and meticulous auditing process, we are thrilled to announce that we have achieved SOC 2 Type II certification.” | official | 2026-07-03 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Kanopy Security homepage: Shadow AI Security and Governance for Business-Builds “Trusted by Fortune 500 Companies” | official | 2026-07-03 |
| s2 | Kanopy Security: About Us (Protecting the Good Jungle) “Before Kanopy, Amichai co-founded Imperva, where he served as CTO and Chief Scientist, creating one of the industry’s most influential data and application security companies.” | official | 2026-07-03 |
| s3 | Kanopy Security: Terms of Use (last revised December 25, 2025) “Kanopy Security Ltd. (“Kanopy”, “we”, “our”) welcomes you” | official | 2026-07-03 |
| s4 | Kanopy Security: contact page structured address data (Ramat Gan) “"streetAddress": "14 Abba Hillel St", "addressLocality": "Ramat Gan"” | official | 2026-07-03 |
| s5 | Kanopy Security: AI Governance and AI Agents Security page “Auto-map every copilot, flow, and model in your environment.” | official | 2026-07-03 |
| s6 | Kanopy Security: Adaptive Agent Security page “Kanopy’s Adaptive Agent Security delivers real-time monitoring, behavioral profiling, and adaptive guardrails that keep every agent’s actions in check, without slowing innovation.” | official | 2026-07-03 |
| s7 | Kanopy Security: Power Platform Security solution page “We turn findings into action. AppSec teams, platform owners, and business builders get simple guidance and, where possible, one-click remediation.” | official | 2026-07-03 |
| s8 | PR Newswire (Nokod Security announcement, June 29, 2023): Nokod Raises $8M Seed Round From Seasoned Cybersecurity Investors “announced its $8 million seed round, which will be used to establish a presence in the United States market, as well as to expand the R&D teams and support novel research of security vulnerabilities in the low-code/no-code domain. Funds were raised from Acrew Capital, Meron Capital and Flint Capital” | press | 2026-07-03 |
| s9 | SecurityWeek: Nokod Snags $8M to Secure Low Code/No-Code Custom Apps (June 2023) “Nokod is the brainchild of former Imperva co-founder and CTO Amichai Shulman and Yair Finzi, former co-founder of SecuredTouch (acquired by Ping Identity).” | press | 2026-07-03 |
| s10 | SiliconANGLE: Nokod Security raises $8M to enhance low-code/no-code app security (June 29, 2023, Duncan Riley) “Founded earlier this year, Nokod offers a platform that enables organizations to secure their low-code/no-code custom applications and RPA by scanning them for security and compliance issues and applying customized auto-remediation policies.” | press | 2026-07-03 |
| s11 | TechCrunch: Pitch Deck Teardown, Nokod Security’s $8M seed deck (July 7, 2023, Haje Jan Kamps) “The company has left the 21-slide deck intact except for a few parts.” | press | 2026-07-03 |
| s12 | PR Newswire (Kanopy Security announcement, May 12, 2026): Salesforce Integration to Secure Agents and Automations Built by Business Users “BOULDER, Colo., May 12, 2026 /PRNewswire/ -- Kanopy Security, the cybersecurity platform securing AI and apps built by business users, today announced a new integration for Salesforce environments designed to secure agents and automations created within the platform.” | press | 2026-07-03 |
| s13 | AI Defense Matrix Catalog: Kanopy Security product entry (agents and automations on Copilot Studio, Power Automate, Salesforce, UiPath, Retool) “Formerly Nokod Security, renamed 2026-05-12.” | other | 2026-07-03 |
| s14 | The Hacker News Cybersecurity Stars Awards 2026 winner page (vendor-submitted profile): Kanopy Security, Best Enterprise AI Governance Platform “While rapid citizen development on platforms like Microsoft Power Automate, Copilot Studio, Salesforce, and ServiceNow accelerates innovation, it also introduces critical vulnerabilities that bypass traditional security oversight.” | other | 2026-07-03 |
| s15 | Kanopy Security press release (August 13, 2025): Opens U.S. Headquarters in Boulder, Colorado “Kanopy Security is expanding its global footprint with a new U.S. center of operations in Boulder, Colorado, positioning our team to better serve the surging North American demand for no-code application security.” | official | 2026-07-03 |
| s16 | Kanopy /security path check 2026-07-15: the path serves an event page, not an attestation portal | official | 2026-07-15 |
| s19 | Trust-subdomain probe 2026-07-15: trust.kanopysecurity.com does not resolve (NXDOMAIN) | official | 2026-07-15 |
| s20 | Trust-path probe 2026-07-15: /trust returns 404, no attestation portal served | official | 2026-07-15 |
| s21 | Security-subdomain probe 2026-07-15: security.kanopysecurity.com does not resolve (NXDOMAIN) | official | 2026-07-15 |
| s22 | Compliance-path probe 2026-07-15: /compliance returns 404, no attestation portal served | official | 2026-07-15 |
| s17 | Kanopy Security press release: Named Winner of the Coveted Global InfoSec Awards during RSAC Conference 2026 “Kanopy Security Named Winner of the Coveted Global InfoSec Awards during RSAC Conference 2026” | official | 2026-07-03 |
| s18 | Kanopy Security press release (March 14, 2024): Achieves SOC 2 Type II Certification “After a thorough evaluation and meticulous auditing process, we are thrilled to announce that we have achieved SOC 2 Type II certification.” | official | 2026-07-03 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.