Latka logo

Top 10 Application Security Software Companies With $10M–$100M Revenue (November 2026)

As of November 2026, Latka tracks 17 application security software companies with $10M–$100M in annual revenue. They have combined revenues of $509.1M and employ 3K people. They have raised $892.4M and serve 1.9K customers combined.

Every company below sells application security software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.

What Application Security Software Companies do

Application Security Software encompasses a range of tools and practices designed to protect software applications from security threats throughout their development lifecycle. This category focuses on identifying and mitigating vulnerabilities to prevent unauthorized access, data breaches, and other cyber threats that can compromise application integrity and user trust. Typical features include automated scanning for vulnerabilities, code analysis, and compliance monitoring, all aimed at ensuring secure coding practices and safeguarding applications against potential exploits. The primary use cases for Application Security Software involve integration into various stages of the software development lifecycle, allowing developers to identify security issues early in the process. Common buyer personas include IT security teams, developers, and software architects, who use these tools to enhance application security policies and practices. The solutions provide actionable insights and remediation steps, helping organizations adopt a proactive stance toward application security in an increasingly threat-laden digital landscape.

Companies
17
Revenue
$509.1M
Funding
$892.4M
Employees
3K

Filters

Sorting: Highest -> Lowest

Filters

Top Application Security Software Companies With $10M–$100M Revenue

Showing 10 of 17 companies ranked by annual revenue.

1Onapsis logo
Onapsis

Boston, Massachusetts, United States

Provider of a cyber-security and compliance platform designed to secure business-critical applications. The company's compliance platform includes preventative vulnerability and compliance controls, as well as real-time detection and incident response capabilities to reduce risks affecting critical business processes and data, enabling clients to seamlessly incorporate enterprise applications into existing risk and incident response management programs and automate the monitoring and protection of SAP and Oracle ERP, keeping them compliant and safe from insider and outsider threats.

Revenue
$93.5M
Customers
200
Year founded
2009
Funding
$115.6M
Team size
325
2Contrast Security logo
Contrast Security

Los Altos, California, United States

Contrast Security is the only Application and API Security platform purpose-built to detect and stop live application-layer attacks. It delivers real-time and always-on application security inside applications and APIs.

Revenue
$91.7M
Year founded
2014
Funding
$245M
Team size
240
3Cobalt logo
Cobalt

Boston, Massachusetts, United States

Pen Testing as a Service (PTaaS) platform

Revenue
$51M
Customers
600
Year founded
2013
Funding
$506.5M
Team size
497
4HiddenLayer logo
HiddenLayer

Austin, Texas, United States

HiddenLayer is a provider of security solutions for machine learning algorithms and models. The company offers threat modeling, ML risk assessment training, and red team assessment services, as well as AI and ML model scanning.

Revenue
$34.9M
Year founded
2022
Team size
164
5Invicti logo
Invicti

Austin, Texas, United States

Dynamic application security testing platform

Revenue
$34.3M
Year founded
2018
Team size
312
6Semgrep logo
Semgrep

San Francisco, California, United States

Semgrep is an application security platform that scans code for bugs and security vulnerabilities, helping developers to write secure code.

Revenue
$33.6M
Year founded
2017
Team size
210
7Secure Code Warrior logo
Secure Code Warrior

Sydney, New South Wales, Australia

Secure Code Warrior is a secure coding platform that sets the standards that keep our digital world safe. We do this by providing the world’s leading agile learning platform that delivers the most effective secure coding solution for developers to learn, apply, and retain software security principles. More than 600 enterprises trust Secure Code Warrior to implement agile learning security programs and ensure the applications they release are free of vulnerabilities.

Revenue
$25.2M
Year founded
2015
Team size
229
8OpsMx logo
OpsMx

Sunnyvale, California, United States

OpsMx offers cutting-edge Application Security solutions, which can seamlessly integrate into software delivery pipelines. It is a leader in Application Security Posture Management (ASPM) helping enterprises accelerate DevSecOps and 'Shift-Left' to Secure the SDLC.

Revenue
$22.3M
Year founded
2016
Team size
126
9BrainGu logo
BrainGu

Grand Rapids, Michigan, United States

Software company focused on DevSecOps solutions, ranging from rapid application development and cloud computing to specialized help desks and prototyping

Revenue
$19.4M
Year founded
2012
Team size
73
10Bright Security logo
Bright Security

San Rafael, California, United States

Bright Security is an AI -powered application security platform that integrates application security into SDLC.

Revenue
$17.9M
Year founded
2018
Funding
$25.3M
Team size
104

Frequently asked questions about Application Security Software Companies With $10M–$100M Revenue

How many application security software companies with $10M–$100M in annual revenue are there?

Latka tracks 17 application security software companies with $10M–$100M in annual revenue. Together they generate $509.1M in annual revenue and employ 3K people.

Which application security software company with $10M–$100M in annual revenue is the largest?

Onapsis is the largest, with $93.5M in annual revenue, founded in 2009.

How much revenue does a typical application security software company with $10M–$100M in annual revenue make?

The average application security software company in this list makes $29.9M a year, across 17 companies with reported revenue. They serve 1.9K customers combined.

Who are the leading Application Security software vendors with $10M–$100M in annual revenue?

Ranked by annual revenue, the leaders are Onapsis, Contrast Security, Cobalt, HiddenLayer and Invicti.

How much funding have application security software companies with $10M–$100M in annual revenue raised?

The 17 application security software companies with $10M–$100M in annual revenue tracked here have raised $892.4M in disclosed funding between them.

Related Security Software categories

Inclusion Criteria

- Provides tools for identifying and remediating security vulnerabilities in application code. - Supports integration into the software development lifecycle for continuous security monitoring. - Offers features such as automated vulnerability scanning and code analysis. - Facilitates secure coding practices through guidelines and compliance tracking. - Not just limited to testing; must also include features for ongoing monitoring and remediation.