EDAMAME Technologies

What EDAMAME Technologies does

EDAMAME Technologies is a French developer-first endpoint security company founded in 2023 and headquartered in Châtenay-Malabry, France. The company positions itself as the AI agent trust layer for developer workstations, CI/CD runners, and self-hosted agent hosts, observing AI coding agents (Cursor, Claude Desktop, Claude Code, Codex, OpenClaw, Hermes) from outside the agent at the endpoint boundary to prove security posture and runtime behavior without requiring MDM enrollment or plugins inside the agent. Its platform comprises three core products — EDAMAME Security (multi-platform desktop and mobile app), EDAMAME Posture (CLI for headless CI/CD runners and agent servers), and EDAMAME Hub (fleet-wide visibility dashboard with posture-gated conditional access) — plus Agentic Security and Agentic Posture Visibility modules and the EDAMAME Portal for identity and subscription management.

Underlying technology is built with Flutter and Rust on a lightweight, open-core agent architecture that captures system, network, tool, file, and communication activity per AI agent into a structural Flight Recorder and produces divergence scores comparing declared intent with observed behavior. The platform integrates with GitHub Enterprise and GitLab for source-control conditional access, with Microsoft Entra ID and Google Cloud Identity for identity-provider posture gating, with Tailscale, NetBird, and Fortinet FortiGate for network-access control, and with Vanta for SOC 2 / ISO 27001 evidence automation. The architecture is explicitly designed for the BYOD, contractor, and AI-agent use cases that traditional MDM/UEM and EDR stacks handle poorly.

The business is a freemium SaaS with a free tier (up to 4 users), a Business tier at €150/month (€120/month annual, 20% discount), and an Enterprise tier starting at €200/month with custom pricing above. Go-to-market combines product-led growth (direct downloads, app stores, GitHub open-source distribution) with an enterprise sales motion for Business and Enterprise tiers and a partner-led channel through Vanta Marketplace. Target customers include software developers, contractors and consultants, security professionals, BYOD workers, and compliance-focused enterprises pursuing SOC 2 or ISO 27001 without traditional MDM. The company has raised approximately €551,831 (~$551,831) from Bpifrance (January 2024) and is independently held with no disclosed institutional venture investors.

Name

EDAMAME Technologies

Legal name

EDAMAME Technologies

Website

https://edamame.tech

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

1–10 employees

Short description

EDAMAME Technologies is a French developer-first endpoint security company providing an AI agent trust layer that observes AI coding agents from outside at the endpoint boundary. It serves developers, contractors, and compliance-focused enterprises with posture-gated conditional access across GitHub, IdPs, and CI/CD.

Ownership category

akta.pro rank

Product category

Endpoint Security Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

akta.pro secondary industries

Identity, Access & Secrets Management for AI Systems (IAM for agents/models) (HDAAAKAJ), Regulatory Readiness & Audit Automation (e.g., EU AI Act, NIST AI RMF, ISO/IEC 42001) (HDAAAMAE), Edge AI Deployment, Orchestration & OTA Model Updates (HDAAAJAI)

Keywords

• Endpoint security software
• SDLC security
• AI agent runtime security
• Developer workstation protection
• Zero trust device posture

Headquarters

HQ city

Châtenay-malabry

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription - Free Tier: Free tier offering full analytics, conditional access, 7-day history, up to 4 users, up to 1 device per user, community support, and AI Agents support. Designed for individual developers and small teams to adopt the platform.
2. SaaS Subscription - Business Tier: €150/month (€120/month with annual billing) for full code-and-pipeline protection including 365-day history, 10 users (expandable), up to 5 devices per user, premium support, and CI/CD & AI Agents support.
3. SaaS Subscription - Enterprise Tier: €200/month with enterprise integrations and custom enterprise features. Dedicated support and tailored deployment for scale-ups and industry leaders.

Pricing tiers

Go-to-market motion3 records

Distribution channels8 records

Marketing channels7 records

Core offering

EDAMAME Technologies sells an AI Agent Trust Layer that observes AI coding agents and developer workstations from outside the agent at the endpoint boundary. The platform delivers runtime verification, divergence scoring, attack-pattern detection, and posture-gated conditional access across laptops, CI/CD runners, and self-hosted agent hosts via three core products: EDAMAME Security (desktop/mobile app), EDAMAME Posture (CLI), and EDAMAME Hub (fleet dashboard).

Product overview

EDAMAME Technologies offers a platform-plus-modules architecture centered on its AI agent trust layer. The core product family consists of three integrated products: EDAMAME Security (desktop/mobile app for developer workstations with AI assistant, network capture, and runtime verification), EDAMAME Posture (CLI for headless CI/CD runners and agent hosts), and EDAMAME Hub (fleet-wide visibility dashboard with posture-gated conditional access). These are complemented by two modules: Agentic Security (runtime divergence scoring and attack-pattern detection for AI agents) and Agentic Posture Visibility (deterministic inventory and monitoring of AI agent surfaces). EDAMAME Portal manages identity and subscription context across the portfolio. The platform proves security posture and runtime behavior from outside the agent, binding access to code, secrets, and production resources to that proof.

Differentiator

Problem solved

Functional benefit

Products and services

• EDAMAME Security AI-powered desktop and mobile application that hardens developer workstations, explains security risk in plain language, and creates a trusted local surface for AI coding agents including Cursor, Claude Desktop, Claude Code, Codex, and OpenClaw. Adds network flow capture, agent runtime verification, and AI assistant on desktop; mobile delivers full posture visibility.
• EDAMAME Posture

Quantifiable outcome

• Stolen tokens and credentials become useless - access is bound to trusted machine and monitored agent, not just the credential
• +3 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability8 records

Feature9 records

Partnerships

Five partnerships are on record, tiered core.

• VantacoreTechnology or Integration · 30 April 2025Official integration in Vanta Marketplace. EDAMAME streams certified device-posture evidence through Vanta's public Device Monitoring API for SOC 2 and ISO 27001 compliance automation. No MDM enrollment required; lightweight agent provides continuous posture attestation that Vanta maps to native device controls.
• GitHub EnterprisecoreTechnology or IntegrationDirect integration with GitHub Enterprise Conditional Access allowing security posture criteria enforcement for every device - managed or unmanaged. Covers development machines, test machines, CI/CD runners across all authentication methods (credentials, tokens, SSH keys) and all interaction types (API, CLI, web, mobile).
• Microsoft Entra IDcoreTechnology or IntegrationIntegration with Entra ID Conditional Access uniquely enables adding security posture criteria to grant or deny access for any device - managed or unmanaged. EDAMAME provides the device-trust signal that Entra uses for access decisions.
• Google Cloud IdentitycoreTechnology or IntegrationIntegration with Google Context-Aware Access enabling security posture criteria to control access for any device - managed or unmanaged. EDAMAME posture attestation feeds into Google's conditional access engine.
• GitLabcoreTechnology or IntegrationIntegration with GitLab's Conditional Access allowing security posture criteria enforcement for every device - managed or unmanaged. Covers development machines, test machines, CI/CD runners across all authentication methods (credentials, tokens, SSH keys) and all interaction types.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• GitGuardian: Developer-first secrets detection and code security platform. Overlaps with EDAMAME on developer workstation protection, GitHub/GitLab ecosystem integration, and PLG adoption motion.
• Socket: Developer-first supply chain security platform that detects malicious packages and risky dependencies. Shares EDAMAME's PLG motion, GitHub-centric integration approach, and focus on protecting developers from supply chain attacks at the workstation level.
• Endor Labs: SDLC security platform with focus on dependency management, reachability analysis, and software supply chain risk. Highly comparable buyer (AppSec and platform engineering teams) and similar enterprise SaaS motion.
• Chainguard: Supply chain security company focused on hardened container images and provenance. Targets the same developer and security buyer as EDAMAME and overlaps significantly on supply chain attack themes.

Broad incumbents

• Snyk: Established developer security platform spanning SAST, SCA, container, and IaC security. Comparable in addressing SDLC and developer-workstation risk, but with a much broader portfolio and enterprise footprint.
• Veracode: Established application security platform covering SAST, DAST, and SCA. Comparable buyer (AppSec teams preparing for SOC 2 / ISO 27001) but operates at a much broader portfolio scale.
• Sonatype: Software supply chain security platform (Nexus) covering open source governance and malicious package detection. Directly comparable on supply chain attack detection themes that EDAMAME also addresses.
• CrowdStrike: Dominant endpoint security platform (Falcon) with EDR, XDR, and increasingly AI-workload security. The incumbent EDAMAME most directly competes against on endpoint posture and runtime detection.
• SentinelOne: Endpoint security platform with strong AI/ML heritage (Singularity platform). Comparable endpoint posture and runtime telemetry capabilities, with much larger enterprise footprint.
• Microsoft Defender for Endpoint: Default endpoint security on Windows and increasingly cross-platform. Bundled into Microsoft 365 E5, posing a structural threat to any paid endpoint security vendor via free/cheap distribution.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/edamametechnologies
• YouTubeyoutube.com/watch?v=llker8BgqdU
• LinkedInlinkedin.com/company/edamame-technologies

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EDAMAME Technologies