Apiiro

What Apiiro does

Apiiro is an Israeli-founded cybersecurity company, headquartered in Tel Aviv-Yafo with operations in the US and UK, that provides an agentic Application Security Posture Management (ASPM) platform for Fortune 500 enterprises. The platform is built on patented Deep Code Analysis (DCA) technology, which performs deep Abstract Syntax Tree (AST) semantic analysis of code, text, and developer knowledge to construct a Software Graph and Risk Graph that map every application component — APIs, OSS dependencies, pipelines, infrastructure, GenAI frameworks, MCP servers, and sensitive data — and correlate it to runtime environments through code-to-runtime matching. Apiiro organizes its offering into three product modules — Apiiro Design (pre-development risk detection and AI threat modeling), Apiiro Develop (code-phase security, secrets detection, API security testing, contextual SCA, AI inventory, and AI SAST), and Apiiro Deliver (software supply chain security, release risk assessments, and runtime API risk) — extended by AI products including the AutoFix Agent (an industry-first AI Agent that auto-fixes design and code risks in the IDE) and the Apiiro Guardian Agent (a control plane governing AI coding agents such as Claude, Gemini, and Cursor).

The company sells exclusively through a "Request a Demo" enterprise field-sales motion with quote-based multi-year contracts, complemented by a channel/reseller and consulting partner program (GuidePoint, Optiv, Trace3, Microsoft, NetSPI, and others) and listings on AWS Marketplace, Google Cloud Marketplace, and Google Gemini Marketplace. Pricing is not publicly disclosed, and revenue derives from enterprise subscriptions, channel-sourced revenue, and cloud marketplace transactions. The customer base spans Fortune 500 enterprises in financial services (BlackRock, Morgan Stanley, DTCC, USAA, TIAA, SoFi), energy (Shell), consumer goods (Colgate-Palmolive, AB InBev), resources (BHP), and technology (Cloudera, Sophos, Imperva), with the company reporting 104% ARR growth in 2025 following 275% growth in 2024 and closing the four largest enterprise ASPM deals in the industry that year.

Apiiro has raised $135M across a $35M Series A (October 2020, Greylock and Kleiner Perkins) and a $100M Series B (November 2022, led by General Catalyst). It has earned triple analyst recognition — Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security, #1 in ASPM in the 2025 Gartner Magic Quadrant for Application Security Testing, Leader in the IDC MarketScape for ASPM 2025, and #1 Most Innovative on Frost Radar 2025 — and won the 2021 RSA Conference Innovation Sandbox Contest. Senior leadership includes co-founders Idan Plotnik (CEO) and Yonatan Eldar (CTO), CPO Moti Gindi (former Microsoft CVP of Security Products), and strategic advisor Thomas Dohmke (former GitHub CEO).

Name

Apiiro

Legal name

Apiiro

Website

https://apiiro.com

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

101–250 employees

Short description

Apiiro provides an agentic application security posture management (ASPM) platform built on patented Deep Code Analysis and AI agents (AutoFix Agent, Guardian Agent) that help Fortune 500 enterprises inventory, prioritize, and remediate software risk across the SDLC from design through runtime.

Ownership category

akta.pro rank

Product category

Application Security Posture Management (ASPM)

NAICS

Computer Systems Design Services (541512), Custom Computer Programming Services (541511), Industrial Design Services (54142)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro primary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

akta.pro secondary industries

IT Asset Management (ITAM) Platforms (HDAEALAD), Model Serving, Inference & Deployment Platforms (APIs, Edge/On-Prem) (HDAEANAC)

Keywords

• Application security posture management
• Software supply chain security
• Deep code analysis
• Agentic application security
• Risk-based vulnerability prioritization

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Enterprise Subscription (ASPM platform): Recurring subscription revenue from enterprise customers licensing the Agentic AppSec / ASPM platform. The "Request a Demo" sales model and absence of public pricing indicate annual or multi-year enterprise contracts priced on scope (repositories, developers, modules). Apiiro reported 104% ARR growth in 2025, with the industry's four largest enterprise ASPM deals closed in 2025.
2. Channel / Reseller Sourced Revenue: Revenue sourced through a formal channel and consulting partner program (GuidePoint Security, Optiv, Trace3, Microsoft, etc.) who resell, deploy, and run professional services around the Apiiro platform.
3. Cloud Marketplace Revenue: Revenue transacted through AWS Marketplace, Google Cloud Marketplace, and Google Gemini Marketplace, enabling enterprise procurement alignment and cloud co-sell motions.

Pricing tiers

Go-to-market motion4 records

Distribution channels4 records

Marketing channels10 records

Core offering

Apiiro offers a unified Agentic Application Security Posture Management (ASPM) platform that provides complete application and software supply chain visibility from code to runtime. The platform is built on patented Deep Code Analysis (DCA), the Risk Graph engine, and XBOM (eXtended Software Bill of Materials), and is organized into three modules — Apiiro Design (pre-development risk detection), Apiiro Develop (code-phase security), and Apiiro Deliver (software supply chain security). It also offers AI products including the AutoFix Agent and Guardian Agent that fix and govern risks in AI-generated code directly in developer workflows.

Product overview

Apiiro offers a single unified agentic application security posture management (ASPM) platform organized into three product modules — Apiiro Design (pre-development risk detection and AI threat modeling), Apiiro Develop (code-phase security, secrets detection, API security testing, contextual SCA, AI inventory in code, and AI SAST), and Apiiro Deliver (software supply chain security, release risk assessments, and runtime API risk) — all built on three core technologies: patented Deep Code Analysis (DCA), the proprietary Risk Graph engine, and the eXtended Software Bill of Materials (XBOM). The platform is extended by AI products including the AutoFix Agent (industry-first AI agent for AppSec that auto-fixes design and code risks in the IDE via a remote Model Context Protocol connection) and the Apiiro Guardian Agent (a control plane for governing AI coding agents such as Claude, Gemini, and Cursor) and by native solutions for software supply chain security, secrets detection, open source security, API security, and GenAI discovery. It also offers a 100% open platform ethos via the SHINE Integrations Program, integrating with SCMs (GitHub, GitLab, Azure DevOps, Bitbucket, Perforce), ticketing systems (Jira, ServiceNow), communication tools (Slack, Teams, Google Chat), and dozens of security, SCA, SAST, runtime API security, container, and bug bounty tools.

Differentiator

Problem solved

Functional benefit

Brands

• Apiiro Design: Product line for secure-by-design risk detection and threat modeling at the design phase, before code is written.
• Apiiro Develop
• Apiiro Deliver
• Apiiro Guardian Agent
• AutoFix Agent

Quantifiable outcome

• 104% ARR growth in 2025
• +6 more outcomes

Named customers28 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration32 records

AI capability12 records

Feature10 records

Partnerships

43 partnerships are on record, tiered flagship enterprise integration, core partnership, flagship technical alliance, core integration partner, flagship cloud partner, standard integration partner, flagship cloud/reseller partner, flagship channel partner, flagship services partner, standard channel partner, flagship community partner and standard community partner.

• ServiceNowflagship enterprise integrationStrategic or Co-development Partner · 7 May 2025Apiiro joined forces with ServiceNow in May 2025 to power ServiceNow's CMDB with AI-native code-to-runtime software inventory. Apiiro integrates with ServiceNow Application Vulnerability Response (AVR), CMDB, and Container Vulnerability Response (CVR) for bidirectional syncing of applications, code resources, container images, and risks. ServiceNow App Store hosts the AutoFix Agent integration.
• Secure Code Warriorcore partnershipStrategic or Co-development Partner · 20 March 2024Apiiro and Secure Code Warrior partnered in March 2024 to deliver hyper-relevant developer security training, combining ASPM-driven risk context with developer security learning to build a culture of security-driven development.
• Akamaiflagship technical allianceStrategic or Co-development Partner · 16 January 2024Akamai and Apiiro launched a technical alliance in January 2024 to deliver Code-to-Runtime API Security, integrating Akamai API Security with Apiiro's ASPM. The partnership was expanded in October 2025 to deliver a comprehensive Application Security Posture Management platform, and is featured in Apiiro's 2025 ASPM Business Outcome Report and the Autofix Agent product page.
• Wizcore integration partnerTechnology or Integration · 19 December 2023Apiiro and Wiz partnered in December 2023 to unite application and cloud security: Apiiro ingests Wiz cloud security findings and production environment context for correlation, prioritization, and remediation within Apiiro's ASPM platform.
• GitHubcore integration partnerTechnology or IntegrationApiiro integrates with GitHub.com and GitHub Enterprise Cloud to analyze and monitor repositories and provide feedback via pull requests. GitHub Dependabot and CodeQL findings can be ingested for deduplication, enrichment, and prioritization. John Leon (VP Business Development) joined Apiiro from GitHub in 2021.
• GitLabcore integration partnerTechnology or IntegrationApiiro integrates with GitLab SaaS and Self-Managed instances to analyze and monitor repositories and provide feedback via merge requests. GitLab Ultimate and Dependency Scanning findings can be ingested for enrichment.
• Amazon Web Services (AWS)flagship cloud partnerTechnology or IntegrationApiiro is part of the AWS Partner Network (APN) and is available on AWS Marketplace (listed December 2022). Apiiro connects to AWS API Gateways and Managed Kubernetes (EKS) to bring in additional runtime context such as internet-exposure and deployment status.
• Google Cloudflagship cloud partnerTechnology or IntegrationApiiro is a Premier Google Cloud Partner, available on the Google Cloud Marketplace (listed January 2022), and expanded availability through Google Gemini Marketplace in 2025. Apiiro connects to Google Cloud runtime sources for additional context.
• Checkmarxstandard integration partnerTechnology or IntegrationApiiro ingests Checkmarx SAST findings into its open ASPM platform for deduplication, enrichment, and prioritization.
• Veracodestandard integration partnerTechnology or IntegrationApiiro ingests Veracode SAST findings into its open ASPM platform for deduplication, enrichment, and prioritization.
• Snykstandard integration partnerTechnology or IntegrationApiiro ingests Snyk open source security findings into its open ASPM platform for deduplication, enrichment, and prioritization.
• Black Duck (Synopsys)standard integration partnerTechnology or IntegrationApiiro is part of the Black Duck Technology Alliance Partner program and ingests Black Duck SCA findings for correlation, deduplication, risk-based prioritization, and testing-coverage mapping.
• Mend (formerly WhiteSource)standard integration partnerTechnology or IntegrationApiiro ingests Mend open source vulnerability findings into its open ASPM platform for deduplication, enrichment, and prioritization.
• Semgrepstandard integration partnerTechnology or IntegrationApiiro ingests Semgrep code security findings and has a built-in Managed Semgrep solution to scan monitored code concurrently with Apiiro's native analysis per configured Semgrep rules.
• SonarCloud / SonarQube (Sonar)standard integration partnerTechnology or IntegrationApiiro ingests SonarCloud and SonarQube findings into its open ASPM platform for deduplication, enrichment, and prioritization.
• Invicti (formerly Netsparker)standard integration partnerTechnology or IntegrationApiiro ingests Invicti bug and vulnerability issues into its open ASPM platform for deduplication, enrichment, and prioritization.
• Opentextstandard integration partnerTechnology or IntegrationApiiro ingests Opentext SAST findings into its open ASPM platform for deduplication, enrichment, and prioritization.
• PortSwigger (Burp Suite)standard integration partnerTechnology or IntegrationApiiro integrates Burp Suite findings to unify dynamic testing with code context for faster, smarter remediation.
• HashiCorpstandard integration partnerTechnology or IntegrationApiiro is part of the HashiCorp Partner Network, bringing the power of ASPM to the cloud-native technology ecosystem.
• Qualysstandard integration partnerTechnology or IntegrationApiiro is part of the Qualys Partner Network, integrating Qualys vulnerability and cloud security signals into its open ASPM platform.
• Sysdigstandard integration partnerTechnology or IntegrationApiiro is part of the Sysdig Technology Alliance Partner program, bringing container and cloud security context into its ASPM.
• IriusRiskstandard integration partnerTechnology or IntegrationApiiro integrates with IriusRisk's automated and intelligent threat-modeling solution to make secure design the standard, scalable practice for digital teams.
• Microsoftflagship cloud/reseller partnerChannel Partner/ Reseller/ DistributorMicrosoft is listed in Apiiro's Services and Channel Partners roster, providing go-to-market reach via the Microsoft Partner ecosystem.
• GuidePoint Securityflagship channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners; a leading cybersecurity reseller and solutions provider that delivers Apiiro ASPM to enterprise customers.
• Optivflagship channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners; large cybersecurity solutions integrator that resells and deploys Apiiro.
• Trace3flagship channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners; technology consultancy and reseller that delivers Apiiro to enterprise customers.
• NetSPIflagship services partnerImplementation/ SI/ Consulting PartnerListed in Apiiro's Services and Channel Partners section. NetSPI and Apiiro have an active partnership to provide contextual, risk-based penetration testing (announced September 2021 per newsroom).
• Bugcrowdstandard integration partnerTechnology or IntegrationListed among Apiiro's Services and Channel Partners; Apiiro integrates Bugcrowd bug-bounty findings to unify crowdsourced security with code context.
• Alacrinetstandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners; reseller that delivers Apiiro ASPM to enterprise customers.
• Defy Securitystandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• DoiT Internationalstandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Evotekstandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Myriad360standard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Nuawarestandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• NXGNstandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Parabellyxstandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Tevorastandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Aerowavestandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• Eversecstandard channel partnerChannel Partner/ Reseller/ DistributorListed among Apiiro's Services and Channel Partners.
• OWASPflagship community partnerOthersListed in Apiiro's community section. Apiiro is also a new sponsor of the OWASP GenAI Security Project (2026), which has over 25,000 members.
• CNCF (Cloud Native Computing Foundation)standard community partnerOthersListed in Apiiro's community section; aligns Apiiro with cloud-native open-source ecosystem initiatives.
• OpenSSF (Open Source Security Foundation)standard community partnerOthersListed in Apiiro's community section.
• SPDX (Linux Foundation)standard community partnerOthersListed in Apiiro's community section; supports open standards for software bill of materials.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Cycode: Cycode is an ASPM platform focused on software supply chain security, CI/CD pipeline security, and risk-based prioritization. It is one of the closest direct competitors to Apiiro's ASPM and SSCS offerings for enterprise DevSecOps buyers.
• ArmorCode: ArmorCode is an ASPM platform aggregating findings from many security scanners to provide risk-based prioritization and remediation. It competes with Apiiro for enterprise buyers seeking a unified, tool-agnostic application security posture view.
• OX Security: OX Security offers an ASPM platform with pipeline-based analysis and risk prioritization. It targets the same enterprise AppSec buyer as Apiiro, with overlapping value propositions around consolidating scanners and reducing alert noise.
• Snyk: Snyk is a developer security platform covering SAST, SCA, IaC, and container security, with an adjacent ASPM story. It competes directly with Apiiro on developer-centric AppSec, SCA prioritization, and IDE-integrated workflows for enterprise engineering teams.
• Checkmarx: Checkmarx is an enterprise application security testing platform (SAST, SCA, IaC) with a growing ASPM portfolio. It competes with Apiiro on AppSec tooling consolidation and risk-based prioritization across the SDLC, particularly for large enterprise buyers.
• GitGuardian: GitGuardian focuses on secrets detection and code security, overlapping directly with Apiiro's native secrets detection and code-to-runtime exposure capabilities. It competes for the same developer and AppSec buyer persona in Fortune 500 enterprises.
• Veracode: Veracode offers SAST, DAST, and software composition analysis with an ASPM overlay. It competes with Apiiro on enterprise AppSec consolidation, particularly in regulated industries, and is one of the third-party SAST tools Apiiro ingests.

Broad incumbents

• Palo Alto Networks (Prisma Cloud): Palo Alto Networks' Prisma Cloud and broader AppSec portfolio (including the failed Apiiro acquisition) represents a major broad incumbent. It competes on bundled cloud and application security for enterprise buyers and can apply intense pricing and distribution pressure on standalone ASPM vendors.
• Wiz: Wiz is a leading cloud security platform (CSPM, CNAPP) that is expanding into ASPM and code-to-cloud contexts. It is both a partner (findings ingestion) and a broad incumbent threat to Apiiro's cloud-aware application risk narrative.

Emerging players

• Jit: Jit is an ASPM-adjacent platform that orchestrates multiple open-source security scanners as a unified pipeline for engineering teams. It competes with Apiiro's open-platform ethos at a more developer-led, mid-market tier.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/apiiroSecurity
• Facebookfacebook.com/Apiiro
• LinkedInlinkedin.com/company/apiiro

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Funding overview

Funding rounds3 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Apiiro