OX Security Raises $60M to Address Application Security Gaps
OX Security, a cybersecurity firm focused on application security for both AI-generated and human-written code, has raised $60 million in a Series B funding round led by DTCP, bringing its total funding to $94 million since its founding in 2021. The round included participation from IBM Ventures, M12, Microsoft’s Venture Fund, Swisscom Ventures, Evolution Equity Partners, and Team8.
Founded by former Check Point Software executives Neatsun Ziv and Lior Arzi, Ox offers a platform for real-time threat detection and automated risk modeling across the software development lifecycle. Based in New York and Tel Aviv, the company claims to scan over 100 million lines of code daily for more than 200 enterprise clients, including eToro, SoFi, and strategic investor-customers Microsoft and IBM.
Ox takes a focused approach by identifying and surfacing the top 5% of vulnerabilities most likely to be exploitable or business-impacting. According to CEO Ziv, this targeted prioritization reduces alert fatigue, helping developers and security teams concentrate on the issues that matter most. In addition to code-level scanning, the platform extends to the broader software supply chain, identifying risks tied to third-party dependencies and open-source components.
The new funding will support Ox’s product and engineering teams as they continue to refine the platform’s prioritization engine, expand multi-cloud integrations, and grow the company’s footprint across Europe and Asia-Pacific. Ox supports applications deployed across AWS, Azure, and Google Cloud, helping customers maintain visibility and security across distributed environments.
The company reported hitting $10 million in sales and expects to double that by the end of 2025. It employs 150 people, including 80 based in Tel Aviv, primarily in engineering and product roles. Ox also aims to become cash-flow positive within the next two to three years, backed by continued demand for scalable, developer-friendly security solutions.
Chainguard Raises $356M to Secure Open-Source Software Supply Chains
Chainguard, a cybersecurity startup focused on securing the open-source software supply chain, has raised $356 million in Series D funding co-led by Kleiner Perkins and IVP, bringing its total funding to $612 million and valuing the company at $3.5 billion. The round included new investors Salesforce Ventures and Datadog Ventures, alongside existing backers Sequoia Capital, Spark Capital, Redpoint, Amplify, Lightspeed, Mantis Venture Capital, and Windproof Partners (fka Kerrest & Co).
Founded in 2021 by former Google engineers Dan Lorenc, Kim Lewandowski, Matt Moore, and Ville Aikas, Chainguard is headquartered in Kirkland, Washington and operates remotely with a global team of over 350 employees. Its platform secures software from development through deployment, with offerings like Chainguard Containers, Chainguard VMs, and Chainguard Libraries—all built and maintained via the company’s internal software factory.
Chainguard’s approach differs from traditional solutions by rebuilding open-source packages from source rather than scanning for vulnerabilities post-deployment. The Chainguard Factory builds, patches, and hardens more than 13,000 software packages, resulting in 1,400 container images currently used by enterprise customers. This process ensures verifiable, zero-CVE software components that meet modern security and compliance standards.
The company has grown its ARR to $40 million in FY2025 and expects to surpass $100 million in FY2026. Its client base includes ANZ Bank, Canva, GitLab, Hewlett Packard Enterprise, Snap Inc., Wiz, and several government entities.
With the new funding, Chainguard plans to scale its engineering, product development, and go-to-market operations, especially in Europe and Asia-Pacific. Development priorities include advancing Chainguard VMs and Libraries, as well as expanding adoption of its secure-by-default container images. CEO Dan Lorenc reiterated the company’s mission to be “the safe source for open source,” reinforcing a long-term commitment to proactive supply chain security.
Chainguard competes with Snyk, JFrog, Sonatype, and Veracode, but differentiates through its focus on trusted, rebuilt components rather than reactive scanning.
Opsera Raises $20M to Expand AI-Powered DevOps Platform
Opsera, an AI-powered DevOps platform, has raised $20 million in a Series B round led by Prosperity7 Ventures with participation from Hitachi Ventures and existing investors Clear Ventures, Felicis Ventures, Taiwania Capital, and Alumni Ventures.
Founded in 2020 and based in Palo Alto, California, Opsera focuses on automating and optimizing the software development lifecycle through intelligent workflows, unified insights, and AI-driven orchestration. The new round brings its total funding to $35 million.
At the center of Opsera’s platform is its Agentic AI framework—autonomous agents that optimize DevOps pipelines, predict risks, and trigger self-healing workflows in real time. Key integrations with GitHub, Microsoft, Databricks, and Amazon Web Services (AWS) have expanded Opsera’s reach, embedding features like GitHub Copilot, GitHub Advanced Security, and VS Code into its ecosystem to enhance developer efficiency and collaboration.
The company has experienced 200% revenue growth since its Series A+ round, supported by new product launches like Agentic AI and Unified Insights, which provides detailed analytics on developer productivity, AI adoption, and security metrics. CEO Kumar C. describes the company’s mission as enabling “DevOps for all teams” through automation and intelligence.
The latest funding will support Opsera’s engineering and go-to-market efforts globally, with a focus on expanding in Europe and Asia-Pacific. It will also enhance Unified Insights, which tracks metrics such as DORA benchmarks, Copilot usage, and code-to-cloud pipeline performance—allowing enterprises to measure the impact of AI on software delivery.
To continue receiving updates, please click here to subscribe to InfraRead.
My day job is advising growing companies on corporate strategy, finance and M&A. I recently advised Agnostiq on its acquisition by DataRobot.
If you are looking for an experienced partner with a track record of maximizing outcomes, let’s find a time to talk.
This article is cross-posted here.