Yagaan
- Company typePrivate
- Founded2017
- HeadquartersCesson-sévigné, France
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Yagaan does
Yagaan is an application security product suite offered by Pradeo, a privately held French cybersecurity company headquartered in Cesson-sévigné, France. The platform unifies four modular security capabilities—Static Application Security Testing (AST/SAST), Mobile Application Security Testing (MAST), Application Shielding, and Runtime Application Self-Protection (RASP)—into a single SaaS suite designed to cover the entire application lifecycle from source code auditing through real-time runtime protection. Yagaan applies advanced AI-driven algorithms for anomaly detection, including malware identification, data leakage detection, and real-time vulnerability analysis, and offers an API for programmatic application submission. The platform integrates natively with major DevSecOps tooling, including GitHub, GitLab, IntelliJ, and VS Code, and is positioned for developer, project manager, and CISO personas.
Yagaan operates a direct enterprise sales motion built around consultative demos ("Schedule a Demo"), with quote-based pricing and no publicly disclosed tiers. It is marketed to enterprise and government organizations across Banking & Insurance, Defense & Security, Energy & Utilities, Tech & Software Development, and Public Sector verticals, and is supported by recognition from major analyst firms including Forrester, Gartner, IDC, and Frost & Sullivan. Revenue, funding, headcount detail, and ownership structure for Yagaan specifically are not disclosed in the available data; the product is presented as part of the broader Pradeo portfolio rather than as a formally independent subsidiary.
Yagaan firmographics
Firmographics- Name
- Yagaan
- Legal name
- Pradeo
- Website
- https://yagaan.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Ownership category
- akta.pro rank
Yagaan industry classification
Industry- Product category
- Application Security Software
- NAICS
- Software Publishers (5132), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)
- akta.pro secondary industry
- Runtime Application Self-Protection & In-App Detection (HDADACAI)
Keywords
Where Yagaan is headquartered
LocationHeadquarters
- HQ city
- Cesson-sévigné
- HQ country
- France
- HQ region
- Europe
Markets served
Yagaan business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- Application Security Platform Subscription: Yagaan operates as a cloud-based SaaS platform accessible online with no deployment required. The platform offers modular application security tools (AST, MAST, Shielding, RASP) that can be adopted based on organizational needs. Given the enterprise sales motion and demo-based approach, revenue is generated through subscription licensing for the security platform.
Go-to-market motion1 record
Distribution channels1 record
Marketing channels4 records
Yagaan product offering
Product offeringCore offering
Yagaan is a cloud-based, modular application security suite that unifies Static Application Security Testing (SAST/AST), Mobile Application Security Testing (MAST), Application Shielding, and Runtime Application Self Protection (RASP) into a single platform. It covers the entire application lifecycle from design through code auditing, mobile compliance auditing, intellectual property protection, and real-time runtime defense, and is accessible online with no deployment required. The platform is sold to enterprise organizations and government agencies to identify and remediate vulnerabilities in web and mobile applications.
Product overview
Yagaan is a unified application security platform by Pradeo that brings together complementary, modular tools designed to help organizations adopt a comprehensive security strategy. The platform consists of four core modules: Application Security Testing (AST) for source code vulnerability identification and secure coding coaching; Mobile Application Security Testing (MAST) for analyzing mobile app and library security; Application Shielding for protecting against reverse engineering and piracy; and Runtime Application Self Protection (RASP) for real-time runtime attack detection and autonomous protection. Together, these modules cover the entire application lifecycle from development and testing through deployment and runtime use.
Differentiator
Problem solved
Functional benefit
Products and services
- Yagaan Application Security Platform A cloud-based, modular SaaS platform that unifies four application security capabilities — Static Application Security Testing (SAST/AST), Mobile Application Security Testing (MAST), Application Shielding, and Runtime Application Self Protection (RASP) — to cover the entire application lifecycle from code auditing to real-time runtime protection. Designed for enterprise organizations and government agencies developing or operating mobile and web applications, accessible online with no deployment required and tailored for users from developers to CISOs.
- Application Security Testing (AST / SAST) A module within the Yagaan platform that identifies and corrects vulnerabilities in source code for web and mobile applications. Includes automated secure coding coaching to increase developer security skills, aimed at development teams needing embedded source code analysis.
- Mobile Application Security Testing (MAST) A module within the Yagaan platform that analyzes the security of mobile applications and their integrated libraries, quickly pinpointing non-conformities for easy correction. Used by mobile development and security teams to audit mobile apps against security and compliance standards.
- Application Shielding A module within the Yagaan platform that secures mobile application code against reverse engineering and piracy, protecting intellectual property without impacting user experience or application performance. Used by organizations that need to protect proprietary mobile applications.
- Runtime Application Self Protection (RASP) A module within the Yagaan platform that protects applications at runtime, detecting and neutralizing attacks in real time while dynamically adapting security responses to high-risk contexts. Delivers autonomous runtime protection once deployed, used by organizations needing active in-app defense against runtime attacks and injections.
Quantifiable outcome
- Automated actions reduce manual intervention while maximizing efficiency
Companies that use Yagaan
Customer profileNamed customers9 records
Segments4 records
Ideal customer profiles3 records
Yagaan technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability2 records
Feature6 records
Yagaan partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- GitHubcoreYagaan integrates with GitHub for seamless adoption into existing development workflows. The integration allows automated security analysis, vulnerability detection, and protection within the GitHub development environment.
- GitLabcoreYagaan integrates with GitLab enabling security testing and protection capabilities within the CI/CD pipeline. Supports automated security analysis as part of the development workflow.
Scale indicators2 records
Recent moves5 records
Expansion highlights5 records
Yagaan competitors and assessment
Company assessmentDirect peers
- Guardsquare: Guardsquare specializes in mobile application shielding and runtime protection (DexGuard, iXGuard) — overlapping with Yagaan's Application Shielding and RASP modules for mobile apps.
- Contrast Security: Contrast Security provides application security with both SAST and runtime instrumentation/RASP capabilities — a directly comparable architecture to Yagaan's combined static + runtime protection model.
- Data Theorem: Data Theorem provides mobile AppSec including SAST, RASP, and shielding for iOS/Android apps—directly comparable to Yagaan's unified SAST + MAST + Shielding + RASP offering.
- NowSecure: NowSecure is a direct competitor in Mobile Application Security Testing (MAST), offering automated mobile app security analysis and devsecops integration—overlapping closely with Yagaan's MAST and Shielding modules.
Broad incumbents
- Snyk: Snyk is a broad incumbent in developer-first application security (SAST, SCA, container, IaC). It is a primary competitor for Yagaan's SAST module and competes for the same DevSecOps budget and GitHub/GitLab integrations.
- Checkmarx: Checkmarx offers an enterprise AppSec platform spanning SAST, SCA, IaC, and API security. It is a broad incumbent competitor for Yagaan's SAST and integrated DevSecOps positioning.
- Veracode: Veracode is an established AppSec platform offering SAST, DAST, and software composition analysis to enterprise buyers—directly comparable to Yagaan's SAST and broader AppSec scope.
- Synopsys (Black Duck): Synopsys Software Integrity (including Black Duck) is a major incumbent in SAST, SCA, and fuzz testing. It competes for the same enterprise AppSec budget and overlaps with Yagaan's SAST/AST module.
- GitHub Advanced Security: GitHub Advanced Security bundles Code Scanning (SAST), Dependabot (SCA), and secret scanning natively inside GitHub—one of Yagaan's key integration partners. It represents a free/embedded incumbent risk for Yagaan's SAST module.
Emerging players
- Zimperium: Zimperium focuses on mobile threat defense and runtime mobile protection, addressing overlapping mobile security use cases with Yagaan's mobile AppSec modules, though with a heavier emphasis on MTD/MDM.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Yagaan social profiles
Digital presenceYagaan financial estimates
Financial estimateRevenue estimate
Valuation estimate
Yagaan leadership team
Management profileNumber of profiles
Yagaan funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Yagaan M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Yagaan
What does Yagaan do?
Yagaan is a cloud-based, modular application security suite that unifies Static Application Security Testing (SAST/AST), Mobile Application Security Testing (MAST), Application Shielding, and Runtime Application Self Protection (RASP) into a single platform. It covers the entire application lifecycle from design through code auditing, mobile compliance auditing, intellectual property protection, and real-time runtime defense, and is accessible online with no deployment required. The platform is sold to enterprise organizations and government agencies to identify and remediate vulnerabilities in web and mobile applications.
Is Yagaan a public or private company?
Yagaan is a private company. It is classified as unknown and is currently operating.
When was Yagaan founded?
Yagaan was founded in 2017. It employs 1 to 10 people.
Where is Yagaan based?
Yagaan is headquartered in Cesson-sévigné, France, in the Europe region.
How does Yagaan make money?
One revenue line is on record: application Security Platform Subscription.
Who are Yagaan's main competitors?
Direct peers on record are Guardsquare, Contrast Security, Data Theorem and NowSecure. Broad incumbents are Snyk, Checkmarx, Veracode, Synopsys (Black Duck) and GitHub Advanced Security. Zimperium is listed as an emerging player.
Does Yagaan have an API?
Yes. Yagaan provides an API for submitting applications for security analysis. Users can submit apps via API along with credentials for integration. The integration is described as straightforward and simple.
What industry is Yagaan in?
Yagaan's product category is Application Security Software. Its primary akta.pro industry code is HDADACAC, Application Security Testing (SAST/DAST/IAST/SCA), with a secondary code of HDADACAI, Runtime Application Self-Protection & In-App Detection. Its NAICS code is 5132 and its SIC code is 7372.