All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Pi Security sells an application security platform that reads a customer's code, tickets, and past incidents, then triages incoming vulnerability reports and drafts the fix for developers. It came out of stealth in June 2026 with about 35 million dollars raised, a reported 100 million dollar valuation, and roughly 23 employees. Behind that sit three customers named publicly, one on the record, and no disclosed revenue, so the capital is well ahead of the public commercial record. Yoni Ramon, its chief product officer, led Tesla's in-house hacking team for six years. Navan's security chief Mark Carter told Forbes that Pi investigates and proposes fixes for 90 percent of the bugs reported to his team. Best fit for a security team holding more valid bug reports than it can work through.
| Description | Pi Security sells an application security platform whose AI agents read a customer's code, past incidents, pentest reports, and tickets, then triage new vulnerability findings, trace each one to its root cause, and draft fixes for developers. | [f1] |
|---|---|---|
| Founded | 2025 | [f2] |
| HQ | San Francisco, California and Tel Aviv, Israel | [f2] |
| Funding | $35M total | [f2] |
| Latest funding | Series A, $25M (June 2026) | [f2] |
| Product | What it does |
|---|---|
| Pi | Triages vulnerability findings against a customer's own code and security history, traces each one to its root cause, sweeps other services for the same flaw, and drafts fixes for developers. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Pi builds an inventory of a customer's applications and their security history, traces vulnerability findings to a root cause across services, and applies prevention rules in editors and pull requests. These capabilities are mapped to the Cyber Defense Matrix. [f1]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score |
|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. | 3/5 |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 2/5 |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 2/5 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
| Dimension | Score |
|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 2/3 |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Pi homepage: institutional security memory, ingest and index, root-cause detection, contextual remediation, prevention guardrails | official | 2026-07-24 |
| f2 | Calcalist: Former Microsoft and Tesla security leaders emerge with $35 million for Pi | press | 2026-07-24 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Pi Security homepage: ingest and index, root-cause detection, contextual remediation, prevention guardrails, and the Sloane assistant “Pi traces every vulnerability to its architectural source, then hunts every variant across your organization” | official | 2026-07-24 |
| s2 | Pi about page: Guy Arazi and Yoni Ramon listed as the two co-founders “Security should only get better with time.” | official | 2026-07-24 |
| s3 | Pi blog, 9 June 2026: the triage gap, AI-generated report volume, and what the company means by institutional product security memory “Pi's answer is what we call institutional product security memory.” | official | 2026-07-24 |
| s4 | Pi blog: how a stored security decision is applied to a later finding “A memory is a security decision your organization already paid to learn” | official | 2026-07-24 |
| s5 | Pi blog, 2 July 2026: Bugcrowd partnership routing bounty submissions into Pi, onboarding time “Every report from your Bugcrowd program now flows straight into Pi, which takes it from raw text to a fix your developers will actually merge, usually in under 30 minutes.” | official | 2026-07-24 |
| s6 | Pi Security at Black Hat USA 2026, booth 3561 “Meet us at Black Hat USA 2026.” | official | 2026-07-24 |
| s7 | Pi Security terms of use, last updated 9 June 2026, naming the legal entity “The following Terms of Use are entered into by and between you and Pi, Inc.” | official | 2026-07-24 |
| s8 | Forbes, Thomas Brewster, 10 June 2026: Pi launches at a $100 million valuation with $35 million raised, backed by George Kurtz and the Armis co-founders “Valued at $100 million as it comes out stealth Wednesday, Pi sells an AI system that acts as a superpowered security staffer, quickly assessing which vulnerabilities to prioritize and patch at scale.” | press | 2026-07-24 |
| s9 | Forbes: Yoni Ramon led the Tesla in-house hacking team for six years and was brought in to secure X data during the acquisition “He led the in-house hacking team at Tesla for six years, breaking into vehicles, robots and solar products to find their weaknesses and fix them.” | press | 2026-07-24 |
| s10 | Forbes: Navan chief information security officer Mark Carter, an early Pi customer who worked with Yoni Ramon at Tesla in the late 2010s, on merged fixes “He says Pi investigates and proposes fixes for 90% of bugs reported to his security team.” | press | 2026-07-24 |
| s11 | Calcalist, Meir Orbach, 10 June 2026: Guy Arazi's Microsoft and Palo Alto Networks background and Pi's $25 million Series A “Before founding Pi, Arazi worked as a security researcher at Microsoft, where he developed security defenses and vulnerability detection capabilities for Microsoft Defender, Azure, and the Microsoft Security Response Center (MSRC).” | press | 2026-07-24 |
| s21 | Calcalist on Guy Arazi's earlier work at Palo Alto Networks “Earlier in his career, he was part of the team that helped establish XCloud at Palo Alto Networks.” | press | 2026-07-24 |
| s16 | Calcalist on Yoni Ramon's Tesla tenure, described as more than a decade across three regions “Ramon led offensive security activities at Tesla for more than a decade, overseeing security projects for the company's vehicles and robotics programs across the United States, Europe, and China.” | press | 2026-07-24 |
| s17 | Forbes names Depthfirst as another startup building AI models that find and patch vulnerabilities “Among them is Depthfirst, which also builds AI models designed to find and patch vulnerabilities. It has scored a $580 million valuation with $120 million funding.” | press | 2026-07-24 |
| s18 | Pi Security homepage stat band: 70% less manual triage, 85% fewer repeat bounty payouts, 95% of vulnerabilities blocked before production “95% of vulnerabilities blocked before production” | official | 2026-07-24 |
| s19 | Pi blog names three organizations that closed valid vulnerability reports in triage “Lovable, ClickUp, and Microsoft each received valid vulnerability reports that were closed in triage before anyone understood what they contained.” | official | 2026-07-24 |
| s20 | Pi blog on the internal sources its system reads, including engineering chat threads “Who has followed the Slack and Teams threads where engineers make their real decisions” | official | 2026-07-24 |
| s23 | Pi blog reports its own outcome figures and a durability benchmark, with no evaluator, methodology, or report named “benchmarked independently against context-free patches, Pi’s were 2.5 times more durable against re-exploitation” | official | 2026-07-24 |
| s22 | Forbes reports xAI as an early Pi customer, attributed to unnamed sources rather than to either company “According to sources familiar with the startups’ early customers, Pi is getting to work securing Musk’s xAI” | press | 2026-07-24 |
| s12 | Ynet, 10 June 2026: Pi raises $35 million, describes unnamed customers by segment and a company-reported triage reduction “The company said some of its customers include a leading AI laboratory, cybersecurity firms, a major social network and companies in the travel and insurance sectors, though it did not identify them.” | press | 2026-07-24 |
| s13 | Pi Security homepage SOC 2 badge and trust probe, 24 July 2026: badge rendered, footer links read, trust and security subdomains and paths probed, no portal “The fastest path is now fully secure.” | official | 2026-07-24 |
| s15 | Calcalist: Pi operates from San Francisco and Tel Aviv and employed about 23 people in June 2026 “The company operates from offices in San Francisco and Tel Aviv and currently employs approximately 23 people.” | press | 2026-07-24 |
| s14 | Pi Security homepage customer logo wall, heading above three customer marks “Chosen by teams that refuse to slow down” | official | 2026-07-24 |
| s24 | Pi Security homepage logo wall, first mark: served HTML image alt value “lemonade logo” | official | 2026-07-24 |
| s25 | Pi Security homepage logo wall, second mark: served HTML image alt value “teramind logo” | official | 2026-07-24 |
| s26 | Pi Security homepage logo wall, third mark: served HTML image alt value “navan logo” | official | 2026-07-24 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Pi Security homepage: ingest and index, root-cause detection, contextual remediation, prevention guardrails, and the Sloane assistant “Pi traces every vulnerability to its architectural source, then hunts every variant across your organization” | official | 2026-07-24 |
| s2 | Pi Security homepage integrations section: the product connects to the tools a customer already runs “Pi connects to what you already use and begins learning your organization immediately” | official | 2026-07-24 |
| s3 | Pi blog, 9 June 2026: the triage gap, AI-generated report volume, and what the company means by institutional product security memory “Pi's answer is what we call institutional product security memory.” | official | 2026-07-24 |
| s4 | Pi blog: what the company stores as a memory, including decisions not to fix and confirmed false positives “A memory is a security decision your organization already paid to learn” | official | 2026-07-24 |
| s5 | Pi blog, 2 July 2026: Bugcrowd partnership routing bounty submissions into Pi, onboarding time “Every report from your Bugcrowd program now flows straight into Pi, which takes it from raw text to a fix your developers will actually merge, usually in under 30 minutes.” | official | 2026-07-24 |
| s6 | Pi Security at Black Hat USA 2026, booth 3561 “Meet us at Black Hat USA 2026.” | official | 2026-07-24 |
| s7 | Pi Security terms of use, last updated 9 June 2026, naming the legal entity “The following Terms of Use are entered into by and between you and Pi, Inc.” | official | 2026-07-24 |
| s8 | Forbes, Thomas Brewster, 10 June 2026: Pi launches at a $100 million valuation with $35 million raised, backed by George Kurtz and the Armis co-founders “Also investing are George Kurtz, CEO of $160 billion market cap cyber company CrowdStrike, and Yevgeny Dibrov and Nadir Izrael, cofounders of Armis” | press | 2026-07-24 |
| s9 | Forbes: Yoni Ramon led the Tesla in-house hacking team for six years and was brought in to secure X data during the acquisition “He led the in-house hacking team at Tesla for six years, breaking into vehicles, robots and solar products to find their weaknesses and fix them.” | press | 2026-07-24 |
| s10 | Forbes: Navan chief information security officer Mark Carter, an early Pi customer who worked with Yoni Ramon at Tesla in the late 2010s, on merged fixes “He says Pi investigates and proposes fixes for 90% of bugs reported to his security team.” | press | 2026-07-24 |
| s17 | Forbes quotes Navan's chief information security officer on the headcount Pi displaces “It saves me today at least one or two full-time head counts.” | press | 2026-07-24 |
| s18 | Calcalist on Yoni Ramon's Tesla tenure, described as more than a decade across three regions “Ramon led offensive security activities at Tesla for more than a decade, overseeing security projects for the company's vehicles and robotics programs across the United States, Europe, and China.” | press | 2026-07-24 |
| s19 | Calcalist on Guy Arazi's earlier work at Palo Alto Networks “Earlier in his career, he was part of the team that helped establish XCloud at Palo Alto Networks.” | press | 2026-07-24 |
| s20 | Pi blog on the internal sources its system reads, including engineering chat threads “Who has followed the Slack and Teams threads where engineers make their real decisions” | official | 2026-07-24 |
| s23 | Pi blog reports its own outcome figures and a durability benchmark, with no evaluator, methodology, or report named “benchmarked independently against context-free patches, Pi’s were 2.5 times more durable against re-exploitation” | official | 2026-07-24 |
| s22 | Forbes reports xAI as an early Pi customer, attributed to unnamed sources rather than to either company “According to sources familiar with the startups’ early customers, Pi is getting to work securing Musk’s xAI” | press | 2026-07-24 |
| s11 | Calcalist, Meir Orbach, 10 June 2026: Guy Arazi's Microsoft and Palo Alto Networks background and Pi's $25 million Series A “Before founding Pi, Arazi worked as a security researcher at Microsoft, where he developed security defenses and vulnerability detection capabilities for Microsoft Defender, Azure, and the Microsoft Security Response Center (MSRC).” | press | 2026-07-24 |
| s12 | Ynet, 10 June 2026: Pi raises $35 million and describes unnamed customers by segment “The company said some of its customers include a leading AI laboratory, cybersecurity firms, a major social network and companies in the travel and insurance sectors, though it did not identify them.” | press | 2026-07-24 |
| s13 | Pi Security homepage SOC 2 badge and trust probe, 24 July 2026: badge rendered, footer links read, trust and security subdomains and paths probed, no portal “The fastest path is now fully secure.” | official | 2026-07-24 |
| s14 | Pi Security homepage customer logo wall, heading above three customer marks “Chosen by teams that refuse to slow down” | official | 2026-07-24 |
| s24 | Pi Security homepage logo wall, first mark: served HTML image alt value “lemonade logo” | official | 2026-07-24 |
| s25 | Pi Security homepage logo wall, second mark: served HTML image alt value “teramind logo” | official | 2026-07-24 |
| s26 | Pi Security homepage logo wall, third mark: served HTML image alt value “navan logo” | official | 2026-07-24 |
| s15 | Calcalist: Pi operates from San Francisco and Tel Aviv and employed about 23 people in June 2026 “The company operates from offices in San Francisco and Tel Aviv and currently employs approximately 23 people.” | press | 2026-07-24 |
| s16 | Pi Security demo request form, the route to a quote, with no published pricing “Ready to see how fast you can really go?” | official | 2026-07-24 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Do not republish its content or share access without the operator's permission.