As of September 2026, Latka tracks 26 application security software companies with $1M–$5M in annual revenue. They have combined revenues of $71.2M and employ 755 people. They have raised $50M and serve 3M customers combined.
Every company below sells application security software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Application Security Software encompasses a range of tools and practices designed to protect software applications from security threats throughout their development lifecycle. This category focuses on identifying and mitigating vulnerabilities to prevent unauthorized access, data breaches, and other cyber threats that can compromise application integrity and user trust. Typical features include automated scanning for vulnerabilities, code analysis, and compliance monitoring, all aimed at ensuring secure coding practices and safeguarding applications against potential exploits. The primary use cases for Application Security Software involve integration into various stages of the software development lifecycle, allowing developers to identify security issues early in the process. Common buyer personas include IT security teams, developers, and software architects, who use these tools to enhance application security policies and practices. The solutions provide actionable insights and remediation steps, helping organizations adopt a proactive stance toward application security in an increasingly threat-laden digital landscape.
Sorting: Highest -> Lowest
Showing 10 of 26 companies ranked by annual revenue.
San Francisco, California, United States
Operator of a platform intended to offer offensive and defensive application security services. The company's platform ensures applications are safe from dangerous hacking threats that can destroy intellectual property and expose sensitive user information, enabling developers to focus on building great products by providing comprehensive and easy-to-use security services.
San Francisco, California, United States
Escape is the only DAST that works with your modern stack and tests business logic instead of missing headers. It fits right into your modern stack, supporting modern web frameworks, APIs, CI/CD, and Wiz without hassle. With Escape, you can: 1. Document all your APIs & Web Apps in minutes and enrich your inventory with seamless integrations. 2. Discover vulnerabilities even at a business logic level with our proprietary AI-powered algorithm. 3. Remediate issues efficiently with code snippets tailored to each framework
United States
Socket is a cybersecurity platform that protects companies from software supply chain attacks. Companies use Socket to protect their software applications and critical services from malware and security threats originating in open source code.
Parnu, Estonia
Building security community behind #WordPress ecosystem & protecting websites from plugin vulnerabilities.
Bangalore, Karnataka, India
Mobile app security platform for identifying and resolving vulnerabilities. Offers automated scans, penetration testing, and detailed threat reports.
San Jose, California, United States
DeepFactor enables developers to ship secure code without sacrificing productivity by observing application telemetry events.
Palo Alto, California, United States
Developer of a cloud based mobile application scanner designed to scan and secure mobile applications. The company's cloud based mobile application scanner automatically detects security breaches, flaws and data privacy gaps and locks down the high-risk areas of mobile applications, enabling individuals to secure and protect their mobile applications.
San Francisco, California, United States
Software has entered a new era. APIs turned every enterprise into a platform. Now AI is turning every application into an intelligent agent. Together, they form the nervous system of modern growth, fast, dynamic, and deeply interconnected. But while software has evolved into this living mesh, security has not. Legacy tools remain static perimeters, too noisy to trust, too rigid to scale, too blind to govern what truly matters. The result is familiar: stalled AI pilots, unmonitored API sprawl, compliance reviews that drag on, and incidents that erode margins and trust. Levo exists to change this. We unify API and AI security at runtime, bringing passive detection and inline protection into one fabric. Because we have the broadest and deepest visibility into everything, we detect everything accurately. And because we detect everything with confidence, we can block with confidence, eliminating noise, stopping real risks, and enabling enterprises to govern AI and APIs at scale. For enterprises, that means growth without trade offs secure innovation, fewer breaches, smoother audits, faster adoption, and stronger trust. With Levo, leaders don’t just react to the future of software, they expand it, safely.
United States
Scribe is a holistic software supply chain platform for managing SDLC risk and securing your software factory and products from development to deployment. We implement zero trust, continuous assurance, attestation concepts, and SDLC-guardrails-as-code to enhance products’ security and trustworthiness while reducing friction with development teams and speeding up your time to market. • DISCOVER all software assets, lineage and risk posture and gain complete visibility to your AppSec risk by applying BI & AI to an evidence-based SSC-inclusive repository • MITIGATE preemptively SSC risks in your software factory and artifacts by auto-enforcement of SSC policy (SDLC guardrails) • PREVENT software tampering attacks by automating continuous code signing and Intoto attestations. • DEMONSTRATE compliance adherence with SSC frameworks (e.g. SLSA) and regulations (e.g. SSDF) by automatically generating and collecting signed evidence from CI/CD pipelines.
Porto, Portugal
Developer of a web application security suite intended to provide instructions on how to fix the vulnerabilities. The company's suite provides continuous scanning of the web applications and manages the lifecycle of the vulnerabilities found in a sleek and intuitive API, enabling developers to test the security of its applications in a cost-effective manner.
Latka tracks 26 application security software companies with $1M–$5M in annual revenue. Together they generate $71.2M in annual revenue and employ 755 people.
SEWORKS is the largest, with $4.8M in annual revenue, founded in 2013.
The average application security software company in this list makes $2.7M a year, across 26 companies with reported revenue. They serve 3M customers combined.
Ranked by annual revenue, the leaders are SEWORKS, Escape, socket.dev, Patchstack and Appknox.
The 26 application security software companies with $1M–$5M in annual revenue tracked here have raised $50M in disclosed funding between them.
- Provides tools for identifying and remediating security vulnerabilities in application code. - Supports integration into the software development lifecycle for continuous security monitoring. - Offers features such as automated vulnerability scanning and code analysis. - Facilitates secure coding practices through guidelines and compliance tracking. - Not just limited to testing; must also include features for ongoing monitoring and remediation.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time