Boston, Massachusetts, United States
a cloud-based platform that helps developers find and fix vulnerabilities in open source libraries and containers.
- Revenue
- $326M
- Customers
- 5K
- Year founded
- 2015
- Funding
- $1.9B
- Team size
- 1.6K
As of November 2026, Latka tracks 80 application security software companies. They have combined revenues of $1B and employ 6.3K people. They have raised $2.8B and serve 3M customers combined.
Every company below sells application security software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Application Security Software encompasses a range of tools and practices designed to protect software applications from security threats throughout their development lifecycle. This category focuses on identifying and mitigating vulnerabilities to prevent unauthorized access, data breaches, and other cyber threats that can compromise application integrity and user trust. Typical features include automated scanning for vulnerabilities, code analysis, and compliance monitoring, all aimed at ensuring secure coding practices and safeguarding applications against potential exploits. The primary use cases for Application Security Software involve integration into various stages of the software development lifecycle, allowing developers to identify security issues early in the process. Common buyer personas include IT security teams, developers, and software architects, who use these tools to enhance application security policies and practices. The solutions provide actionable insights and remediation steps, helping organizations adopt a proactive stance toward application security in an increasingly threat-laden digital landscape.
Sorting: Highest -> Lowest
Showing 10 of 80 companies ranked by annual revenue.
Boston, Massachusetts, United States
a cloud-based platform that helps developers find and fix vulnerabilities in open source libraries and containers.
Boston, Massachusetts, United States
Provider of a cyber-security and compliance platform designed to secure business-critical applications. The company's compliance platform includes preventative vulnerability and compliance controls, as well as real-time detection and incident response capabilities to reduce risks affecting critical business processes and data, enabling clients to seamlessly incorporate enterprise applications into existing risk and incident response management programs and automate the monitoring and protection of SAP and Oracle ERP, keeping them compliant and safe from insider and outsider threats.
Los Altos, California, United States
Contrast Security is the only Application and API Security platform purpose-built to detect and stop live application-layer attacks. It delivers real-time and always-on application security inside applications and APIs.
Austin, Texas, United States
HiddenLayer is a provider of security solutions for machine learning algorithms and models. The company offers threat modeling, ML risk assessment training, and red team assessment services, as well as AI and ML model scanning.
San Francisco, California, United States
Semgrep is an application security platform that scans code for bugs and security vulnerabilities, helping developers to write secure code.
Sydney, New South Wales, Australia
Secure Code Warrior is a secure coding platform that sets the standards that keep our digital world safe. We do this by providing the world’s leading agile learning platform that delivers the most effective secure coding solution for developers to learn, apply, and retain software security principles. More than 600 enterprises trust Secure Code Warrior to implement agile learning security programs and ensure the applications they release are free of vulnerabilities.
Sunnyvale, California, United States
OpsMx offers cutting-edge Application Security solutions, which can seamlessly integrate into software delivery pipelines. It is a leader in Application Security Posture Management (ASPM) helping enterprises accelerate DevSecOps and 'Shift-Left' to Secure the SDLC.
Grand Rapids, Michigan, United States
Software company focused on DevSecOps solutions, ranging from rapid application development and cloud computing to specialized help desks and prototyping
Latka tracks 80 application security software companies with reported revenue. Together they generate $1B in annual revenue and employ 6.3K people.
Snyk is the largest, with $326M in annual revenue, founded in 2015.
The average application security software company in this list makes $12.6M a year, across 80 companies with reported revenue. They serve 3M customers combined.
Ranked by annual revenue, the leaders are Snyk, Onapsis, Contrast Security, Cobalt and HiddenLayer.
The 80 application security software companies tracked here have raised $2.8B in disclosed funding between them.
- Provides tools for identifying and remediating security vulnerabilities in application code. - Supports integration into the software development lifecycle for continuous security monitoring. - Offers features such as automated vulnerability scanning and code analysis. - Facilitates secure coding practices through guidelines and compliance tracking. - Not just limited to testing; must also include features for ongoing monitoring and remediation.