As of September 2026, Latka tracks 15 application security software companies with $10M–$100M in annual revenue. They have combined revenues of $397.1M and employ 2.7K people. They have raised $776.8M and serve 2.7K customers combined.
Every company below sells application security software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Application Security Software encompasses a range of tools and practices designed to protect software applications from security threats throughout their development lifecycle. This category focuses on identifying and mitigating vulnerabilities to prevent unauthorized access, data breaches, and other cyber threats that can compromise application integrity and user trust. Typical features include automated scanning for vulnerabilities, code analysis, and compliance monitoring, all aimed at ensuring secure coding practices and safeguarding applications against potential exploits. The primary use cases for Application Security Software involve integration into various stages of the software development lifecycle, allowing developers to identify security issues early in the process. Common buyer personas include IT security teams, developers, and software architects, who use these tools to enhance application security policies and practices. The solutions provide actionable insights and remediation steps, helping organizations adopt a proactive stance toward application security in an increasingly threat-laden digital landscape.
Sorting: Highest -> Lowest
Showing 10 of 15 companies ranked by annual revenue.
Los Altos, California, United States
Contrast Security is the only Application and API Security platform purpose-built to detect and stop live application-layer attacks. It delivers real-time and always-on application security inside applications and APIs.
San Francisco, California, United States
Semgrep is an application security platform that scans code for bugs and security vulnerabilities, helping developers to write secure code.
Noida, Uttar Pradesh, India
InnovationM is a trusted software and AI development company in India, headquartered in Noida, with extensive experience in delivering AI-powered mobile and web solutions. We provide end-to-end software development services to clients across the USA, UK, Canada, UAE, and other global markets. Our team of 300+ highly skilled professionals helps businesses enhance user experience, optimize operations, and accelerate digital transformation. With over 15 years of industry expertise, we specialize in building AI agentic systems, advanced conversational AI and chatbot solutions, intelligent automation platforms, and future-ready digital products that drive measurable business impact. Partner with InnovationM—India’s most trusted AI-powered software development company—to automate workflows, improve decision-making, and unlock new growth opportunities.
Sydney, New South Wales, Australia
Secure Code Warrior is a secure coding platform that sets the standards that keep our digital world safe. We do this by providing the world’s leading agile learning platform that delivers the most effective secure coding solution for developers to learn, apply, and retain software security principles. More than 600 enterprises trust Secure Code Warrior to implement agile learning security programs and ensure the applications they release are free of vulnerabilities.
Sunnyvale, California, United States
OpsMx offers cutting-edge Application Security solutions, which can seamlessly integrate into software delivery pipelines. It is a leader in Application Security Posture Management (ASPM) helping enterprises accelerate DevSecOps and 'Shift-Left' to Secure the SDLC.
Grand Rapids, Michigan, United States
Software company focused on DevSecOps solutions, ranging from rapid application development and cloud computing to specialized help desks and prototyping
San Rafael, California, United States
Bright Security is an AI -powered application security platform that integrates application security into SDLC.
Leuven, Belgium
Guardsquare offers the most complete approach to mobile application security on the market. Built on the open source ProGuard technology, Guardsquare’s software integrates seamlessly across the development cycle. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. More than 975 customers worldwide across all major industries rely on Guardsquare to help them identify security risks and protect their mobile applications against reverse engineering and tampering.
Latka tracks 15 application security software companies with $10M–$100M in annual revenue. Together they generate $397.1M in annual revenue and employ 2.7K people.
Contrast Security is the largest, with $91.7M in annual revenue, founded in 2014.
The average application security software company in this list makes $26.5M a year, across 15 companies with reported revenue. They serve 2.7K customers combined.
Ranked by annual revenue, the leaders are Contrast Security, Cobalt, Invicti, Semgrep and InnovationM.
The 15 application security software companies with $10M–$100M in annual revenue tracked here have raised $776.8M in disclosed funding between them.
- Provides tools for identifying and remediating security vulnerabilities in application code. - Supports integration into the software development lifecycle for continuous security monitoring. - Offers features such as automated vulnerability scanning and code analysis. - Facilitates secure coding practices through guidelines and compliance tracking. - Not just limited to testing; must also include features for ongoing monitoring and remediation.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time
