# Cyber Company Profiles: Oligo Security

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-12
Canonical: https://cybercompanyprofiles.com/companies/oligo-security
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of Oligo Security, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [oligo.security](https://www.oligo.security)
- Profile: https://cybercompanyprofiles.com/companies/oligo-security
- Type: Application Security, Cloud Security, Detection Response
- Also known as: Oligo Cyber Security Ltd.
- Market readiness: Established (25/40)
- Defensibility: Contested (13/21)
- Founded: 2022
- Funding: $80M total
- Last updated: 2026-08-25

## Executive Summary

Oligo Security runs an eBPF sensor inside the Linux kernel that tracks which code an application actually executes, flags the vulnerabilities that reach production, and watches AI agents for hijacked behavior. That sensor is reproducible by a funded rival or a cloud platform. The harder-to-copy asset is the triage and compliance work security teams build on its runtime evidence once they adopt it. Named customer references, press-reported Fortune 500 use, and founders from elite military cyber units give Oligo enterprise footing. The proof stays self-reported, with customer figures drawn from Oligo's own pages and no independent test of scale, and the newest AI line extends the same runtime approach rather than defending AI from the ground up.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | Oligo Security runs an eBPF runtime sensor that watches application library and function behavior in production to find exploitable vulnerabilities, detect attacks, and protect applications, cloud workloads, and AI systems. | [\[f1\]](#company-detail-sources) |
| Founded | 2022 | [\[f2\]](#company-detail-sources) |
| HQ | New York, United States, with R&D in Tel Aviv, Israel | [\[f3\]](#company-detail-sources) |
| Funding | $80M total | [\[f1\]](#company-detail-sources) |
| Latest funding | Series B, $50M (January 2025) | [\[f1\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| Cloud Application Detection and Response (CADR) | Runtime detection and response that identifies application and software supply chain exploitation as it happens, profiling library and function behavior to flag and block malicious activity. |
| Runtime Vulnerability Management | Prioritizes vulnerabilities by whether the affected library code actually runs in production, with full call stacks, root-cause analysis, and automated SBOM and VEX reporting. |
| Runtime AI Security | Monitors AI agents, tool calls, and model activity at runtime, adding AI security posture management, AI detection and response, and continuous AI vulnerability and misconfiguration detection. |

## Matrix Coverage

Mapped to the [Cyber Defense Matrix](https://cyberdefensematrix.com) [\[f4\]](#company-detail-sources):

| Asset | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|
| Applications | ✓ | ✓ | ✓ | ✓ |  |

Oligo's Cloud Application Detection and Response and Runtime Vulnerability Management use an eBPF sensor to inventory exploitable library vulnerabilities and detect and block application and supply chain attacks in production. This conventional application security maps to the Cyber Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (25/40)**

Analyzed 2026-07-05. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | The buyer (application security and security operations teams) is clear, but the pain is documented mainly by the conflicted lead investor (s9) and the supporting 99 percent reduction figure is a customer testimonial on Oligo's own page (s11), so independent quantification is absent. \[[s9](#profile-analysis-sources), [s11](#profile-analysis-sources)\] |
| Capability Depth | 3/5 | The eBPF kernel sensor architecture (library and function profiling at under 1 percent CPU) is detailed on vendor pages (s2), but the corroboration is the lead investor's writeup (s9) rather than an independent demo, open-source release, or third-party technical evaluation. \[[s2](#profile-analysis-sources), [s5](#profile-analysis-sources), [s9](#profile-analysis-sources)\] |
| Market Timing | 3/5 | eBPF maturing into a low-overhead production sensor around 2022 is the enabler that made runtime profiling viable, and application detection and response is an actively forming category, but the buyer-side demand is the lead investor's documented search plus named customer adoptions, short of independent analyst, regulatory, or budget-line signals. \[[s9](#profile-analysis-sources), [s11](#profile-analysis-sources), [s6](#profile-analysis-sources)\] |
| Team Credibility | 3/5 | The three founders carry elite IDF cyber-unit pedigree (8200, 81, Matzov) and the CEO led military cyber research (s10, s7), but no prior founder exit is documented and the attack-campaign research is a signal rather than a sustained recognized publication record. \[[s10](#profile-analysis-sources), [s7](#profile-analysis-sources), [s9](#profile-analysis-sources)\] |
| GTM Proof | 4/5 | Named customers testify publicly, including FICO, Sage, Cellebrite, OpenWeb, and Cresta, several with named security leaders quoted, and a company writeup credits Cato Networks with reducing its vulnerability backlog by up to 70 percent. Combined with Fortune 500 reach and reputable backing, this clears the named-reference bar, though no third party corroborates revenue scale for a 5. \[[s11](#profile-analysis-sources), [s12](#profile-analysis-sources), [s7](#profile-analysis-sources)\] |
| Funding Efficiency | 3/5 | $80 million raised in under two years, sized to a global go-to-market push, with visible output in three shipped product lines on the platform. Private margins leave capital efficiency itself unconfirmable. \[[s5](#profile-analysis-sources), [s1](#profile-analysis-sources), [s7](#profile-analysis-sources)\] |
| Category Clarity | 3/5 | Oligo anchors to Application Detection and Response, but the cited independent placement is essentially SecurityWeek (s6) while the headline term appears in Oligo's own wire release (s5), and the category is still forming and contested with peers like Sweet Security. \[[s5](#profile-analysis-sources), [s6](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | The function-and-library-level behavioral profiling and proprietary eBPF IP embed deeper into the application than a quarterly feature release, but large cloud security platforms field their own host-layer sensors and are extending toward runtime application coverage, so the moat is real but contested. \[[s9](#profile-analysis-sources), [s2](#profile-analysis-sources)\] |

### Business Risks

- Wiz or CrowdStrike could extend their existing eBPF host sensors down to application library and function visibility, collapsing Oligo's runtime-first differentiation into a platform feature.
- Named references establish customer use, but no independent revenue, retention, or deployment-scale evidence is public, so the Fortune 500 traction claim stays unverified at scale against larger incumbents.
- The pivot to securing AI agents and models places Oligo against purpose-built AI-security entrants, and a runtime sensor adapted from application monitoring may not match defenses designed for AI assets from the start.
- A runtime sensor that watches production at the kernel level raises deployment-trust and performance objections that can lengthen enterprise sales cycles.

### Problem & Market

Oligo Security targets the gap between the vulnerabilities a scanner flags before code ships and the handful that an attacker can actually reach in running software. The lead investor's writeup frames the pain in detail: a flood of new vulnerabilities, security teams losing time to false positives, and shift-left tools that cannot tell whether a flaw is reachable in production. The buyer is an application security or security operations team that owns production risk and cannot patch everything.

The opening widened as AI moved into production. Enterprises now run AI agents and models inside the same applications Oligo already watches, which adds behavior that earlier-stage scanning never sees. Oligo extends its runtime view to cover that surface alongside conventional workloads. \[[s5](#profile-analysis-sources), [s9](#profile-analysis-sources), [s4](#profile-analysis-sources)\]

### Product Capabilities

Oligo's platform rests on one eBPF sensor that reads library and function executions directly from the Linux kernel at under 0.5% CPU, deploying in hours rather than weeks. SecurityWeek and the company describe this as deep application inspection that profiles how each component should behave, then flags deviations.

That sensor feeds three product lines. Runtime Vulnerability Management prioritizes flaws by whether the affected code actually runs, with call stacks and automated software bill-of-materials and VEX reporting. Cloud Application Detection and Response watches for and blocks application and supply chain exploitation in real time. Runtime AI Security applies the same monitoring to AI agents and models, adding posture management and detection of hijacked or rogue agent behavior. \[[s2](#profile-analysis-sources), [s6](#profile-analysis-sources), [s12](#profile-analysis-sources), [s3](#profile-analysis-sources)\]

### Competitive Positioning

Oligo positions against developer-first scanning vendors by arguing that reachability must be proven in production, not inferred before code ships. That argument is its clearest separation from incumbents like Snyk and from code-analysis platforms like Apiiro that infer reachability statically.

The harder contest is with cloud security platforms that already run their own eBPF sensors. Sweet Security pursues nearly the same runtime-first pitch at similar stage, and larger platforms watch production at the host and container layer and could push down toward the application layer Oligo occupies. Oligo's separation rests on operating deeper, at the function and library level, where broad platforms have not yet matched its resolution. \[[s9](#profile-analysis-sources), [s3](#profile-analysis-sources), [s2](#profile-analysis-sources)\]

### Go-to-Market & Traction

Oligo points to Fortune 500 customers across financial services, healthcare, and technology, and unlike many early vendors it backs the claim with named references. FICO, Cellebrite, OpenWeb, and Cresta carry attributed testimonials from their security leaders, and a company writeup names Sage and Cato Networks reducing vulnerability backlogs by up to 90% and 70%.

The gap is hard revenue. No third party confirms deployment scale or retention, so the traction reads as real and credible customer use rather than independently measured growth. \[[s11](#profile-analysis-sources), [s12](#profile-analysis-sources), [s7](#profile-analysis-sources), [s10](#profile-analysis-sources)\]

### Team & Credibility

The three founders are childhood friends who served together in Israel's elite military cyber units, including 8200, 81, and Matzov. Nadav Czerninski led a military cyber research team for more than six years before becoming CEO, with Gal Elbaz as CTO and Avshalom Hilu as CPO.

Around them sits a commercial bench drawn from established security vendors: leaders who previously held senior roles at CyberArk, Snyk, and Armis. The CEO publishes attack-campaign research, which adds technical visibility, and the public record shows no prior founder exit, keeping the team strong rather than proven at the outcome level. \[[s8](#profile-analysis-sources), [s7](#profile-analysis-sources), [s9](#profile-analysis-sources)\]

### Trust Readiness

Oligo sells deep into regulated enterprises, and its own product is built to generate compliance evidence: it maps runtime execution data to FedRAMP, PCI DSS 4.0, and SOC 2 control requirements so customers can prove which vulnerabilities actually matter to auditors.

What the public record does not show is Oligo's own third-party security attestation. No company SOC 2 report, ISO certification, or trust portal surfaced as of this review, and the homepage carries no compliance badge. For a vendor whose sensor runs inside production at the kernel level, a published attestation would answer the deployment-trust question its enterprise buyers raise. \[[s12](#profile-analysis-sources), [s1](#profile-analysis-sources), [s13](#profile-analysis-sources), [s14](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Sweet Security | competes with | Israeli runtime-first cloud security vendor whose eBPF sensor and runtime detection overlap Oligo's application detection and response pitch. |
| Wiz | competes with | Cloud security platform whose own eBPF runtime sensor and broad CNAPP coverage can absorb runtime application defense at far larger scale. |
| Snyk | competes with | Developer-first application security leader Oligo positions against by arguing that reachability must be proven at runtime, not inferred before code ships. |
| Apiiro | competes with | Application security platform that ties code analysis to runtime reachability, overlapping Oligo's exploitable-vulnerability prioritization. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Contested (13/21)**

Band guidance: reinforce or reposition. Analyzed 2026-07-12. Scope: whole company.

Oligo Security is defensible the way a strong application-security vendor is, not the way an infrastructure company is. Building a kernel sensor that reads library behavior at near-zero overhead is demanding engineering, and selling it to Fortune 500 buyers puts procurement between Oligo and easy replacement. But the sensor is reproducible by a funded rival, no pooled cross-customer data asset appears in the cited record, and no attestation raises the cost of switching. The durable part is what customers do with the runtime evidence. Security teams build triage discipline and compliance reporting on it and would have to recreate that work to leave. Depth at the function level is the edge Oligo should press.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | Oligo sells software the customer deploys, tunes, and operates itself, built around a lightweight sensor with no managed service or accountability layer in the offer. Automated reachability scoring and detections are software output, which sets delivery at the software-product level. \[[s2](#deep-dive-sources), [s5](#deep-dive-sources)\] |
| Switching Cost | 2/3 | Oligo's sensor runs in the production path, and security teams build vulnerability triage and compliance reporting on its runtime evidence, so leaving means rebuilding that work. That friction exceeds a portable scanner but stops short of network effects or a data-residency lock. \[[s4](#deep-dive-sources), [s5](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | Oligo's product generates compliance evidence for customers, but the company holds no third-party attestation of its own, with no SOC 2, ISO certification, or trust portal found by probe on 2026-07-08. Producing audit documentation for buyers is a feature, not a barrier that blocks a replacement of Oligo. \[[s5](#deep-dive-sources), [s12](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | A kernel-level eBPF sensor that profiles library and function behavior in real time at under 0.5% CPU across major languages takes specialized systems engineering. This is real-time work a weekend project cannot reproduce. \[[s1](#deep-dive-sources), [s5](#deep-dive-sources), [s6](#deep-dive-sources)\] |
| Buyer Profile | 3/3 | Oligo publishes named enterprise references in financial services and technology and reports serving healthcare, press reports Fortune 500 use, and its own pages claim Fortune 100 customers, the buyer whose legal and procurement teams review every new vendor. Selling to that buyer puts those approval steps between Oligo and an easy swap. \[[s7](#deep-dive-sources), [s4](#deep-dive-sources)\] |
| Layer | 2/3 | Oligo is a security platform that observes applications rather than infrastructure those applications depend on to run. Removing the sensor ends its coverage without breaking production, which holds it below the infrastructure level. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 1/3 | Oligo's advantage is engineering IP in the sensor rather than an accumulated dataset a rival could not rebuild. No named non-public corpus or pooled cross-customer asset appears in the record, so a funded competitor could reach parity. \[[s8](#deep-dive-sources), [s1](#deep-dive-sources)\] |

### Strategic Market Segmentation

Oligo Security sells to application security and security operations teams at large enterprises. These buyers own production risk and cannot patch every flaw a scanner reports. Oligo publishes named financial-services and technology references and reports serving healthcare organizations, press reports Fortune 500 use, and Oligo's own pages say customers include Fortune 100 companies.

The company enters an account through vulnerability prioritization. Its argument is that most reported flaws never execute in production, so teams waste effort chasing theoretical risk. That message targets the buyer who already runs scanners and drowns in their output.

Oligo has widened toward the same buyer as enterprises put AI into production. Runtime AI Security extends the sensor to that surface, reaching the security teams now asked to cover AI agents and models they did not build. \[[s7](#deep-dive-sources), [s4](#deep-dive-sources), [s3](#deep-dive-sources), [s10](#deep-dive-sources), [s11](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

Oligo Security builds its platform on eBPF sensing that reads library and function executions from the Linux kernel. The sensor runs at under 0.5% CPU and installs in minutes, adding production visibility without instrumenting each application. Oligo calls this deep application inspection.

That sensor feeds three product lines. Runtime Vulnerability Management ranks flaws by whether the affected code actually runs, with call stacks and automated software bill-of-materials and VEX reporting. Cloud Application Detection and Response identifies and blocks application and software supply chain exploitation as it happens.

Runtime AI Security is the newest line and points the same monitoring at AI. It inventories the models and agents in use, watches agent actions and tool calls, and flags hijacked or rogue behavior. The advantage Oligo claims is runtime evidence, the record of what actually executed, rather than the static inference scanners and posture tools produce. \[[s1](#deep-dive-sources), [s6](#deep-dive-sources), [s5](#deep-dive-sources), [s3](#deep-dive-sources), [s4](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

Oligo Security backs its enterprise pitch with named customer references. FICO, Cellebrite, OpenWeb, and Cresta carry testimonials attributed to their security leaders. A company blog credits Sage and Cato Networks with cutting vulnerability backlogs by up to 90% and 70%, and Cresta reports a reduction of over 99% in the vulnerabilities it tracks.

The evidence gap is independence. Every one of those figures comes from Oligo's own pages, and the cited third-party articles do not confirm revenue, retention, or deployment scale. The traction reads as real customer use rather than measured growth.

Oligo pairs the product pitch with a low cost-of-ownership argument. It says one security professional can run Cloud Application Detection and Response in a few hours per week, which suits the enterprise teams it targets. \[[s4](#deep-dive-sources), [s5](#deep-dive-sources), [s7](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Pricing Model

The cited pages show no prices and route buyers to a demo request rather than to a public price list. That pattern signals negotiated enterprise deals rather than self-service purchase.

The cited record does not disclose the unit it charges by. Runtime sensors are often priced per node or workload, but Oligo states none of these publicly, so a buyer cannot predict or compare cost from the public record.

The low-overhead pitch doubles as a cost argument. Oligo stresses that its sensor runs at under 0.5% CPU and that one person can operate the product, framing total cost of ownership as part of the value. \[[s2](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Product Delivery & Operations

Oligo Security delivers software the customer deploys and runs, not a managed service. The product installs as an eBPF sensor in minutes and scales across a customer's applications.

Operations center on minimal overhead. The sensor consumes under 0.5% CPU and less than 500MB of RAM, and Oligo says one security professional can maintain Cloud Application Detection and Response in a few hours each week.

The delivery model leaves tuning and response with the customer. Oligo supplies the runtime evidence and detections, and the security team operates the platform and acts on what it surfaces. The cited pages document no managed service or accountability layer in the offering. \[[s2](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Earning Customers' Trust

Oligo Security aims its product at regulated enterprises and builds compliance evidence into what it sells. The platform maps runtime execution data to FedRAMP, PCI DSS 4.0, and SOC 2 control requirements, so customers can show auditors which vulnerabilities actually matter in production.

Oligo's own security attestation is absent from the public record. A probe on 2026-07-08 of the homepage footer, the trust, security, and compliance paths, and the trust and security subdomains found no SOC 2 report, ISO certification, or trust portal, and no compliance badge appears on the homepage.

The missing attestation matters for this product. A sensor that runs inside production at the kernel level invites deployment-trust questions, and a published attestation is the answer enterprise buyers usually expect. \[[s5](#deep-dive-sources), [s12](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

Oligo Security markets a platform built on eBPF runtime sensing. Three product lines are marketed on that shared approach, so vulnerability management, detection and response, and AI monitoring present as one foundation instead of standing alone, though no cited page details the sensor architecture behind the marketing.

The harder question is where Oligo sits against larger platforms. Large cloud security vendors already field their own runtime sensors and could extend into the application layer Oligo occupies. Oligo's separation is depth, operating at the function and library level rather than the host or container.

Oligo integrates into existing workflows rather than replacing them. It runs inside CI/CD and feeds software bill-of-materials and VEX output into compliance and development processes, positioning the sensor as a layer that adds runtime evidence to tools a customer already uses. Profiling how libraries behave across many customers could in time yield cross-customer baselines a single tenant cannot match, though nothing in the record shows Oligo pooling that data yet. \[[s1](#deep-dive-sources), [s4](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Team & Execution Capability

Oligo Security is led by its three founders, childhood friends who served in Israel's elite military cyber units. Nadav Czerninski is CEO with a military cyber research background, Gal Elbaz is CTO, and Avshalom Hilu is CPO.

The founders surround themselves with recognized security leaders. Oligo's advisers and backers include Adi Sharabani, former chief technology officer at Snyk, and Moti Gindi, former chief strategy officer for Microsoft Security. Shlomo Kramer, chief executive of Cato Networks, is listed among them, and Cato is also a customer.

The team is strong on pedigree and thin on outcomes. No prior founder exit appears in the record. The founders still hold the top product and engineering roles. \[[s10](#deep-dive-sources), [s7](#deep-dive-sources), [s8](#deep-dive-sources), [s11](#deep-dive-sources), [s9](#deep-dive-sources), [s5](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [Business Wire: Oligo Security Raises $50M Series B to Redefine Security for Modern Applications](https://www.businesswire.com/news/home/20250129117162/en/Oligo-Security-Raises-%2450M-Series-B-to-Redefine-Security-for-Modern-Applications) | press | 2026-06-24 |
| f2 | [SecurityWeek: Oligo Raises $50M to Tackle Application Detection and Response](https://www.securityweek.com/oligo-raises-50m-to-tackle-application-detection-and-response/) | press | 2026-06-24 |
| f3 | [Calcalist: Oligo Security raises $50M Series B to stop cloud application attacks in real time](https://www.calcalistech.com/ctechnews/article/rymc93wuyg) | press | 2026-06-24 |
| f4 | [Oligo Security: Cloud Application Detection and Response](https://www.oligo.security/runtime-platform/cloud-application-detection-and-response) | official | 2026-06-24 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Oligo Security: Runtime AI Security homepage](https://www.oligo.security) “Don't just scan passively. Protect actively with Oligo.” | official | 2026-06-24 |
| s2 | [Oligo Security: Runtime AI Solutions Overview](https://www.oligo.security/runtime-platform/overview) “The Oligo eBPF Sensor. By seeing directly into the Linux kernel, it can detect all your application's library and function executions.” | official | 2026-06-24 |
| s3 | [Oligo Security: Cloud Application Detection and Response](https://www.oligo.security/runtime-platform/cloud-application-detection-and-response) “CADR is runtime detection and response built to instantly identify application and software supply chain exploitation.” | official | 2026-06-24 |
| s4 | [Oligo Security: AI Runtime Defense](https://www.oligo.security/runtime-platform/runtime-ai) “Oligo monitors all actions and code generated by agents, protecting against agents that go rogue and attackers that hijack them.” | official | 2026-06-24 |
| s5 | [Business Wire: Oligo Security Raises $50M Series B to Redefine Security for Modern Applications](https://www.businesswire.com/news/home/20250129117162/en/Oligo-Security-Raises-%2450M-Series-B-to-Redefine-Security-for-Modern-Applications) “The round brings Oligo to $80 million in total funding in less than two years. The platform delivers rapid time-to-value through easy deployment, uses less than 1% of CPU resources, and can scale to thousands of nodes.” | press | 2026-07-02 |
| s6 | [SecurityWeek: Oligo Raises $50M to Tackle Application Detection and Response](https://www.securityweek.com/oligo-raises-50m-to-tackle-application-detection-and-response/) “Founded in 2022, the Tel Aviv-based Oligo provides deep application inspection at runtime. Leveraging the eBPF technology that runs sandboxed code in privileged contexts.” | press | 2026-06-24 |
| s7 | [GovInfoSecurity: Oligo Security Raises $50M to Tackle App Detection, Response](https://www.govinfosecurity.com/oligo-security-raises-50m-to-tackle-app-detection-response-a-27420) “Czerninski's technology has demonstrated success with Fortune 500 and Fortune 100 companies. He previously spent more than six years leading the Israeli Military's cyber research team. We've uncovered many attack campaigns that we published. Oligo, founded in 2022, employs 68 people.” | press | 2026-06-24 |
| s8 | [TechCrunch: Oligo raises $28M to secure open source libraries at runtime](https://techcrunch.com/2023/02/15/oligo-raises-28m-to-secure-open-source-libraries-at-runtime/) “Co-founded by Nadav Czerninski (CEO), Gal Elbaz (CTO) and Avshalom Hilu (CPO), Oligo works across clouds and supports all major modern programming languages.” | press | 2026-06-24 |
| s9 | [Greenfield Partners: Why We Invested in Oligo Security](https://www.greenfield-growth.com/knowledge/why-we-invested-in-oligo-security/) “Oligo's breakthrough lies in its runtime-first approach, leveraging eBPF, a lightweight, kernel-level sensor enhanced with their proprietary IP. Best friends since childhood and veterans of Unit 8200.” | press | 2026-06-24 |
| s10 | [Calcalist: Oligo Security raises $50M Series B to stop cloud application attacks in real time](https://www.calcalistech.com/ctechnews/article/rymc93wuyg) “The three are childhood friends and officers who graduated from the cyber units of IDF military intelligence (8200, 81) and Matzov.” | press | 2026-06-24 |
| s11 | [Oligo Security: Runtime Vulnerability Management customer testimonials](https://www.oligo.security/runtime-platform/runtime-vulnerability-management) “We were able to reduce our vulnerability numbers over 99% by limiting our focus to those with an executed vulnerable function with Oligo. Robert Kugler, Head of Security & Compliance, Cresta.” | official | 2026-06-24 |
| s12 | [Oligo Security: Proving Compliance at Runtime](https://www.oligo.security/blog/proving-compliance-at-runtime) “Customers like Sage and Cato Networks have used this runtime context to reduce vulnerability backlogs by up to 90% and 70%, respectively. Oligo addresses this with a non-intrusive sensor that maintains near-zero overhead (under 0.5% CPU).” | official | 2026-06-24 |
| s13 | [Oligo Security homepage: trust attestation probe](https://www.oligo.security) “The Runtime Security Platform for the AI Era” | official | 2026-07-02 |
| s14 | [Oligo Security /trust page: HTTP 404 trust-center probe](https://www.oligo.security/trust) “The page you are looking for doesn't exist or has been moved” | official | 2026-07-02 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Oligo Security: Runtime AI Solutions Overview](https://www.oligo.security/runtime-platform/overview) “By seeing directly into the Linux kernel, it can detect all your application's library and function executions.” | official | 2026-07-08 |
| s2 | [Oligo Security: Cloud Application Detection and Response](https://www.oligo.security/runtime-platform/cloud-application-detection-and-response) “CADR is runtime detection and response built to instantly identify application and software supply chain exploitation ... It deploys in hours and can be maintained by a single security professional in just a few hours per week.” | official | 2026-07-08 |
| s3 | [Oligo Security: AI Runtime Defense](https://www.oligo.security/runtime-platform/runtime-ai) “Oligo monitors all actions and code generated by agents, protecting against agents that go rogue and attackers that hijack them.” | official | 2026-07-08 |
| s4 | [Oligo Security: Runtime Vulnerability Management](https://www.oligo.security/runtime-platform/runtime-vulnerability-management) “We were able to reduce our vulnerability numbers over 99% ... with Oligo. Robert Kugler, Head of Security & Compliance, Cresta ... Naor Penso, FICO ... Alex Nayshtut, Cellebrite ... Yaron Blachman, CTO & CISO, OpenWeb.” | official | 2026-07-08 |
| s5 | [Oligo Security: Proving Compliance at Runtime](https://www.oligo.security/blog/proving-compliance-at-runtime) “Leading compliance frameworks, such as FedRAMP, PCI DSS 4.0, and SOC 2 ... Consumes under 0.5% CPU and less than 500MB of RAM ... Customers like Sage and Cato Networks have used this runtime context to reduce vulnerability backlogs by up to 90% and 70%, respectively.” | official | 2026-07-08 |
| s6 | [SecurityWeek: Oligo Raises $50M to Tackle Application Detection and Response](https://www.securityweek.com/oligo-raises-50m-to-tackle-application-detection-and-response/) “Founded in 2022, the Tel Aviv-based Oligo provides deep application inspection at runtime ... Leveraging the eBPF technology that runs sandboxed code in privileged contexts.” | press | 2026-07-08 |
| s7 | [GovInfoSecurity: Oligo Security Raises $50M to Tackle App Detection, Response](https://www.govinfosecurity.com/oligo-security-raises-50m-to-tackle-app-detection-response-a-27420) “Oligo Security, founded in 2022, employs 68 people ... Oligo's runtime security technology has already demonstrated real-world success with Fortune 500 and Fortune 100 companies ... Czerninski, who previously spent more than six years leading the Israeli Military's cyber research team.” | press | 2026-07-08 |
| s8 | [TechCrunch: Oligo raises $28M to secure open source libraries at runtime](https://techcrunch.com/2023/02/15/oligo-raises-28m-to-secure-open-source-libraries-at-runtime/) “Co-founded by Nadav Czerninski (CEO), Gal Elbaz (CTO) and Avshalom Hilu (CPO), Oligo works across clouds and supports all major modern programming languages, including Python, Go, Java and Node.” | press | 2026-07-08 |
| s9 | [Greenfield Partners: When Shift Left Isn't Always Right, Why We Invested in Oligo Security](https://www.greenfield-growth.com/knowledge/why-we-invested-in-oligo-security/) “Best friends since childhood and veterans of Unit 8200, Israel's elite cybersecurity unit ... Oligo Security Co-Founders (Left to Right): Gal Elbaz - CTO, Nadav Czerninski - CEO, Avshalom Hilu - CPO.” | press | 2026-07-08 |
| s10 | [Calcalist: Oligo Security raises $50M Series B to stop cloud application attacks in real time](https://www.calcalistech.com/ctechnews/article/rymc93wuyg) “has raised $50 million in a Series B round, bringing the company's total investments to $80 million in less than two years. The round was led by Greenfield Partners ... The three are childhood friends and officers who graduated from the cyber units of IDF military intelligence (8200, 81) and Matzov.” | press | 2026-07-08 |
| s11 | [Oligo Security: About, leadership and advisers](https://www.oligo.security/company/about) “Gal Elbaz Co-founder & CTO Nadav Czerninski Co-founder & CEO Avshalom Hilu Co-founder & CPO ... Shlomo Kramer CEO Cato Network Moti Gindi Former Chief Strategy Officer Microsoft Security Adi Sharabani Former CTO Snyk” | official | 2026-07-08 |
| s12 | [Oligo Security trust-attestation probe 2026-07-08: footer badges, /trust, /security, /compliance, and trust. and security. subdomains, none found](https://www.oligo.security/trust) “The /trust, /security, and /compliance paths return HTTP 404, the trust. and security. subdomains do not resolve, and the served homepage footer shows no compliance badge, as of 2026-07-08.” | official | 2026-07-08 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.