Endor Labs pivoted from securing open-source package dependencies to focusing on vulnerabilities introduced by AI-generated code, offering a platform that reviews code, flags risks, recommends precise fixes and can apply them automatically. The company provides IDE and assistant plugins for tools like Cursor and GitHub Copilot and recently launched a tool to map where AI models and services integrate with codebases to evaluate those integrations for security flaws. Endor says it protects more than 5 million applications and runs over a million scans each week for customers including OpenAI, Rubrik, Peloton, Snowflake, Egnyte and Dropbox. Management reports 30x annual recurring revenue growth since its $70 million Series A in 2023 and says the new funding will be used to expand the platform. Endor came out of stealth in October 2022 and now has 133 employees concentrated in offices in Palo Alto and Bangalore. The company emphasizes continued product expansion to provide oversight as AI programming tools proliferate. Endor Labs builds a software supply chain security platform that surfaces meaningful, reachable risks across dependencies used in development, helping teams focus on what to fix. Its platform includes OSS selection with 150+ checks, function-level reachability analysis that cuts over 90% of vulnerability noise, repository and CI/CD security posture monitoring, artifact signing via a GitHub action, and SBOM/VEX and compliance capabilities. The company was founded in 2022 by Varun Badhwar and Dimitri Stiliadis and is based in Palo Alto, California. Endor Labs says it has quickly gained traction with Fortune 500 enterprises and emerging cloud-native companies and has been recognized as a finalist at RSA and Black Hat and as a SINET16 Innovator Award winner. Less than a year after an oversubscribed $70M Series A led by Lightspeed, Coatue, Dell Technologies Capital, Section 32 and more than 30 industry executives, Endor Labs received a strategic investment from Citi Ventures. The Citi partnership is positioned to give the company deeper insights into securing large-scale developer organizations and to help tailor its product for financial institutions. Endor Labs offers a platform developers use to manage and secure open source dependencies and to surface "reachable" and "exploitable" risks in open source code. It has expanded into code and software development pipeline governance, enabling companies to monitor the security posture of their dev pipelines, manage developer access to code, and detect hardcoded secrets. The company recently launched DroidGPT, an AI tool that combines OpenAI’s ChatGPT with Endor’s risk data to assist in open source selection with risk scores. Endor positions itself as addressing gaps in existing SCA approaches and names Snyk as one of its biggest rivals. Since emerging from stealth in fall 2022 it has attracted early customers including Five9, RocketLawyer, MileIQ, Cowbell and Navan. Financially, Endor plans to use new funding to expand its 55-person workforce, deepen technical capabilities and scale go-to-market efforts, and management expects profitability in two years. Endor Labs offers a Dependency Lifecycle Management platform that helps development and security teams safely evaluate, maintain, and update open-source dependencies. The platform performs deep analytics on each OSS dependency to uncover security and operational risks beyond known vulnerabilities, helps customers select better dependencies, secure, monitor and maintain them at scale, and generate accurate SBOMs. Endor launched out of stealth in Palo Alto and is currently in private beta, having incorporated feedback from more than 75 organizations with pilot companies ranging from 200 to 35,000 employees. The company positions its lifecycle approach as a way to increase developer productivity, maximize software reuse, and significantly reduce supply chain risk. The engineering team includes static analysis experts and seven PhDs, and the founding team includes industry veterans Varun Badhwar and Dimitri Stiliadis. Endor announced a $25 million seed financing at launch to support product development and market expansion.

Total raised

$188M

Funding rounds

4

Latest round

Series B

Latest activity

Apr 2025