Foundeo
Foundeo is a bootstrapped ColdFusion/CFML security firm that builds WAF, server-scanner, and code-scanner products (FuseGuard, HackMyCF, Fixinator) and provides security reviews and training, serving the global Adobe ColdFusion installed base.
- Company typePrivate
- Founded2006
- HeadquartersUtica, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Foundeo does
Foundeo is a privately held, bootstrapped ColdFusion/CFML security firm founded in 2006 and based in Upstate New York. The company builds and sells software products and consulting services aimed exclusively at organizations running Adobe ColdFusion, a long-tenured but shrinking web application runtime in the enterprise. Its core products are FuseGuard, a signature- and rule-based web application firewall that ships hot-patch rules for ColdFusion-specific vulnerabilities; HackMyCF, a server configuration scanner for ColdFusion and Lucee servers; and Fixinator, a static code security scanner for CFML source code, launched in 2025. These products are sold individually on monthly and annual subscriptions and are also packaged together as the Foundeo Security Bundle, with enterprise tier pricing reaching approximately $696 per month.
Foundeo complements its product line with a security services practice: code and configuration security reviews typically priced between $3,000 and $12,000+, and security training (including live online classes from December 2025, self-paced courses, and a CF911 emergency option) priced around $800 per student. The firm also authors the official Adobe ColdFusion Server Lockdown Guides (2018, 2021, 2025 editions), a positioning that establishes it as a standards-defining voice within the Adobe ColdFusion ecosystem. The principal, Pete Freitag, is publicly profiled as a 25+ year ColdFusion practitioner with 15 years of dedicated security focus, and the firm is the de facto specialist in this niche.
The business model is a mix of low-friction recurring software subscriptions and higher-touch professional services, with a small headcount (1–10 employees) and no outside capital raised. Distribution is direct via the company website to a global ColdFusion installed base. Revenue is not disclosed.
Foundeo firmographics
Firmographics- Name
- Foundeo
- Legal name
- Foundeo Inc.
- Website
- https://foundeo.com
- Company type
- Private
- Founded year
- 2006
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Foundeo is a bootstrapped ColdFusion/CFML security firm that builds WAF, server-scanner, and code-scanner products (FuseGuard, HackMyCF, Fixinator) and provides security reviews and training, serving the global Adobe ColdFusion installed base.
- Ownership category
- akta.pro rank
Foundeo industry classification
Industry- Product category
- Application Security Software
- NAICS
- Other Scientific and Technical Consulting Services (54169)
- SIC
- Services-Engineering Services (8711)
- akta.pro primary industry
- Application Security & Secure Software (DevSecOps) (EDAOAIAK)
- akta.pro secondary industry
- Secure Software & DevOps Awareness (Secure Coding Basics) (EDABAGAN)
Keywords
Where Foundeo is headquartered
LocationHeadquarters
- HQ city
- Utica
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Foundeo business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription Products: Monthly or annual subscription licensing for security products including HackMyCF, FuseGuard, and Fixinator. Billed annually with discounts for annual payment.
- Training Services: Live online ColdFusion security training classes at $800/student. Video recordings available for purchase. Group discounts available.
- Security Consulting: Code security reviews and audits at 10-hour ($3,000), 20-hour ($6,000), 40-hour ($12,000), and full review tiers. Custom development and consulting services.
- Software Licenses: One-time purchase Windows application for disabling weak SSL protocols and ciphers on IIS servers. Tiered pricing from $39 (1 server) to $1,699 (50 servers).
- Digital Products: ColdFusion Security Checklist PDF sold for $9.99. Lockdown guide video training available for purchase.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | HackMyCF Basic - 2 servers |
| Subscription | Monthly | HackMyCF Plus - 6 servers |
| Subscription | Monthly | HackMyCF Premium - 12 servers |
| Subscription | Annual | FuseGuard Server License |
| Subscription | Annual | FuseGuard Enterprise License |
| Unit Pricing | Pay-as-you-go | ColdFusion Security Training |
| Unit Pricing | Pay-as-you-go | 10 Hour Security Review |
| Unit Pricing | Pay-as-you-go | 20 Hour Security Review |
| Unit Pricing | Pay-as-you-go | 40 Hour Security Review |
| Subscription | Monthly | Starter Bundle |
| Subscription | Monthly | Fixer Bundle |
| Subscription | Monthly | Enterprise Bundle |
| One time/ perpetual license | Pay-as-you-go | IIS SSL Tool Licenses |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels6 records
Foundeo product offering
Product offeringCore offering
Foundeo develops and sells proprietary ColdFusion/CFML security software products (FuseGuard web application firewall, HackMyCF server scanner, Fixinator code scanner) and provides expert security services including code reviews, server lockdown, and training specifically for organizations and developers running ColdFusion applications. The company is the only vendor exclusively focused on the ColdFusion/CFML security niche, combining purpose-built tooling with deep specialized expertise from founder Pete Freitag.
Product overview
Foundeo Inc. is a ColdFusion/CFML security-focused company offering a suite of security products and consulting services. The core product portfolio consists of three integrated tools: FuseGuard (web application firewall), HackMyCF (server security scanner), and Fixinator (code security scanner). These three products are available individually or as the Foundeo Security Bundle at discounted pricing. Additionally, Foundeo provides expert consulting services including code security reviews, server lockdown consultations, and developer training classes, as well as security documentation products including the ColdFusion Security Checklist PDF and ColdFusion Security Guide. The company specializes exclusively in ColdFusion/CFML ecosystem security.
Differentiator
Problem solved
Functional benefit
Brands
- FuseGuard: Web Application Firewall for ColdFusion & CFML - a high performance firewall that blocks malicious requests
- HackMyCF
- Fixinator
- Foundeo Continuous Security Bundle
Products and services
- FuseGuard A ColdFusion/CFML-specific web application firewall that filters malicious traffic targeting CFML applications at runtime, designed for organizations running ColdFusion servers that need protection from web-based attacks.
- HackMyCF
- Fixinator
- CFML Code Security Review
- ColdFusion Server Lockdown
- CFML Security Training
- ColdFusion Security Checklist
- ColdFusion Security Guide
- IIS SSL Cipher Tool
Quantifiable outcome
- Security code reviews can help achieve PCI, SOC 2, HIPAA, ISO 27001, or GLBA compliance
- +1 more outcomes
Companies that use Foundeo
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles2 records
Foundeo technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration10 records
Feature5 records
Foundeo partnerships and signals
Strategic signalScale indicators2 records
Recent moves5 records
Expansion highlights5 records
Foundeo competitors and assessment
Company assessmentDirect peers
- Invicti (formerly Netsparker): Invicti sells Acunetix and Invicti Scanner, automated DAST web application vulnerability scanners comparable to HackMyCF. Both address the same buyer (security/DevOps teams scanning running web apps) and similar use cases (SQL injection, XSS, CSRF detection), but with broader language/stack coverage rather than CFML specialization.
Broad incumbents
- Imperva: Imperva provides enterprise WAF, DDoS protection, API security, and database security. It overlaps with FuseGuard on the application firewall layer and with Foundeo consulting on secure deployment reviews, but Imperva is a broad incumbent rather than a ColdFusion specialist.
- Snyk: Snyk is a developer-first application security platform offering SAST (Snyk Code), SCA, container, and IaC scanning. It is comparable to Foundeo because both sell code-scanning products to developers on subscription terms, even though Snyk is language-agnostic while Foundeo's Fixinator is specialized to CFML.
- Veracode: Veracode provides application security testing (SAST, DAST, SCA) and remediation guidance, sold to enterprise development teams. It competes with Foundeo at the static analysis and application security layer, but operates as a broad incumbent across many languages rather than specializing in CFML.
- Cloudflare: Cloudflare offers a managed Web Application Firewall (WAF) plus DDoS, bot, and API protection at the edge. It is comparable to Foundeo's FuseGuard because both deliver WAF protection against SQL injection, XSS, and similar attacks on web applications, but Cloudflare operates at the network edge while FuseGuard runs inside the CFML request lifecycle.
- Akamai (App & API Protector): Akamai's App & API Protector provides managed WAF, bot mitigation, and DDoS protection at the CDN/edge layer. It competes with Foundeo's FuseGuard for WAF spend protecting production web apps including ColdFusion, while also offering broader API and CDN security that Fuseguard does not.
- SANS Institute: SANS Institute delivers hands-on cybersecurity training, GIAC certifications, and security awareness curriculum to developers and security professionals. It is comparable to Foundeo's $800/student ColdFusion Security Training because both sell developer-focused secure-coding training priced per student, though SANS is a broad incumbent across all security domains.
- Checkmarx: Checkmarx sells enterprise SAST (CxSAST), SCA, and IaC security tools aimed at developer and security teams. It is comparable because it competes with Fixinator on source-code scanning, with broader language support but less CFML-specific depth.
- Rapid7 (InsightAppSec): Rapid7's InsightAppSec delivers dynamic application security testing integrated with its broader vulnerability management platform. It competes with Foundeo's web scanning and consulting services for enterprise security budgets, though Rapid7 is a broad incumbent serving many stacks rather than CFML specifically.
Emerging players
- PortSwigger (Burp Suite): PortSwigger produces Burp Suite, the de facto standard web application security testing toolkit for penetration testers and developers. It is comparable to Foundeo because it addresses the same developer/security professional audience testing web applications, including CFML apps, though Burp focuses on DAST/interception while Foundeo's tools focus on server- and code-level scanning.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Foundeo social profiles
Digital presenceFoundeo financial estimates
Financial estimateRevenue estimate
Valuation estimate
Foundeo leadership team
Management profileNumber of profiles
Profiles1 record
Foundeo funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Foundeo M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Foundeo
What does Foundeo do?
Foundeo develops and sells proprietary ColdFusion/CFML security software products (FuseGuard web application firewall, HackMyCF server scanner, Fixinator code scanner) and provides expert security services including code reviews, server lockdown, and training specifically for organizations and developers running ColdFusion applications. The company is the only vendor exclusively focused on the ColdFusion/CFML security niche, combining purpose-built tooling with deep specialized expertise from founder Pete Freitag.
Is Foundeo a public or private company?
Foundeo is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Foundeo founded?
Foundeo was founded in 2006. It employs 1 to 10 people.
Where is Foundeo based?
Foundeo is headquartered in Utica, United States, in the North America region.
How does Foundeo make money?
Five revenue lines are on record. Subscription Products are the primary driver. The others are training Services, security Consulting, software Licenses and digital Products.
Who are Foundeo's main competitors?
Invicti (formerly Netsparker) is listed as a direct peer. Broad incumbents are Imperva, Snyk, Veracode, Cloudflare, Akamai (App & API Protector), SANS Institute, Checkmarx and Rapid7 (InsightAppSec). PortSwigger (Burp Suite) is listed as an emerging player.
Does Foundeo have an API?
No public API is recorded for Foundeo.
What industry is Foundeo in?
Foundeo's product category is Application Security Software. Its primary akta.pro industry code is EDAOAIAK, Application Security & Secure Software (DevSecOps), with a secondary code of EDABAGAN, Secure Software & DevOps Awareness (Secure Coding Basics). Its NAICS code is 54169 and its SIC code is 8711.