As of September 2026, Latka tracks 18 application security software companies under $1M in annual revenue. They have combined revenues of $8.8M and employ 95 people. They have raised $1M and serve 150 customers combined.
Every company below sells application security software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Application Security Software encompasses a range of tools and practices designed to protect software applications from security threats throughout their development lifecycle. This category focuses on identifying and mitigating vulnerabilities to prevent unauthorized access, data breaches, and other cyber threats that can compromise application integrity and user trust. Typical features include automated scanning for vulnerabilities, code analysis, and compliance monitoring, all aimed at ensuring secure coding practices and safeguarding applications against potential exploits. The primary use cases for Application Security Software involve integration into various stages of the software development lifecycle, allowing developers to identify security issues early in the process. Common buyer personas include IT security teams, developers, and software architects, who use these tools to enhance application security policies and practices. The solutions provide actionable insights and remediation steps, helping organizations adopt a proactive stance toward application security in an increasingly threat-laden digital landscape.
Sorting: Highest -> Lowest
Showing 10 of 18 companies ranked by annual revenue.
United States
Automated Code Review for Web & Mobile. codebeat gathers the results of static code analysis into a single, real-time report that gives all project stakeholders the information required to identify code smells, security holes and improve code quality.
Lewes, Delaware, United States
At Secure Blink, we're committed to fortifying the digital landscape against ever-evolving cybersecurity threats. With a focus on innovation and excellence, we specialize in providing cutting-edge solutions in Application Security, API security and Digital Forensics. Our flagship product, Threatspy is a Developer-first AppSec Management platform (DAST) that enables developers and Security Engineers to proactively identify and mitigate known and unknown vulnerabilities in their applications & API through automating detection, prioritization, and remediation processes. Endorsed by industry leaders and holding a stellar 4.7 rating on Gartner Peer Insight, Capterra, G2, and Product Hunt Secure Blink’ Threatspy is your partner in fortifying digital defences. Start a free Trial here: https://threatspy.secureblink.com/signup
Dover, Delaware, United States
CodeThreat is a security SAST solution. It uses scientifically proven techniques with approximation to analyze a codebase at rest, collects security related information, calculates data flows, searches for various well-known security weaknesses and as a result produce claims. These claims are usually whether the targeted codebase is vulnerable to scoped weaknesses or not.
United States
The most sought-after platform in the industry, delivering hands-on, immersive training that equips your organization with the skills needed to secure modern tech stacks—from cloud and container security to DevSecOps, Threat Modeling, AI, and application security.
Berkeley, California, United States
ThirdLaw is the runtime AI safety platform for IT and Security teams. We capture prompts, responses, and tool calls, evaluate them against enterprise policies, and deliver clear findings so risks are identified, triaged, and enforced in real time. IT and Security teams use ThirdLaw to prevent oversharing, detect unwanted behavior, and bring AI under the same disciplined control as other critical systems. Venture-backed and founded by a team with experience building enterprise security, observability, and AI products at companies such as Splunk, VMware, MongoDB, Cloudera, Postman, Tintri, Vectara, and Nervana (acquired by Intel), ThirdLaw operates at the intersection of AI security and runtime enforcement, a space recognized by Gartner as an emerging priority for enterprises.
India
Provider of mobile security services. The company provides mobile security services to enterprises and developers via application security auditing, code review and on-demand security scans.
San Jose, California, United States
Amplify Security has created a dual AI Agent platform that fixes insecure code before its deployed into production. This eliminates the work developers had to do around security. Now developers can focus on building products without slowing down for security issues or worse, causing a breach.
Beijing, Haidian District, China
Provider of a professional mobile application security service. The company provides professional and reliable service for the global government, enterprises, developers and consumers, enabling them to create a safe, stable and reliable mobile application ecosystem environment so that users can freely create, share and use mobile information.
Tampa, Florida, United States
Provider of cyber security and software development services intended to make the world a safer place for cyber activities, reducing losses incurred by individuals and businesses. The company's cyber security and software development services keeps data private, ensures that the system has not been improperly altered and is able to use the system when and as anticipated enabling people and businesses throughout the world to use their mobile applications without fear of hacking.
Latka tracks 18 application security software companies under $1M in annual revenue. Together they generate $8.8M in annual revenue and employ 95 people.
CODEBEAT is the largest, with $880K in annual revenue, founded in 2014.
The average application security software company in this list makes $487.1K a year, across 18 companies with reported revenue. They serve 150 customers combined.
Ranked by annual revenue, the leaders are CODEBEAT, Secure Blink, CodeThreat, AppSecEngineer and ThirdLaw | Runtime AI Safety.
The 18 application security software companies under $1M in annual revenue tracked here have raised $1M in disclosed funding between them.
- Provides tools for identifying and remediating security vulnerabilities in application code. - Supports integration into the software development lifecycle for continuous security monitoring. - Offers features such as automated vulnerability scanning and code analysis. - Facilitates secure coding practices through guidelines and compliance tracking. - Not just limited to testing; must also include features for ongoing monitoring and remediation.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time
