Patchstack provides vulnerability intelligence and application vPatching that identifies, prioritizes and auto-mitigates open-source software vulnerabilities without user interaction or code changes. Its platform scans over five million websites and prevents millions of attacks; customers include GoDaddy, Digital Ocean and Plesk/cPanel. The company started with WordPress-focused solutions and plans to support other CMSs and expand across the broader open-source software ecosystem. Patchstack runs a gamified bug-bounty program and managed a Vulnerability Disclosure Program for WordPress plugins, becoming the largest CVE Naming Authority by volume in 2023 and publishing 76% of WordPress-related vulnerabilities last year. The business received a €2.7M R&D grant in 2022 and says recurring revenue has grown organically two-to-threefold annually. It also released a free EU co-funded tool to help vendors comply with the Cyber Resilience Act. WebARX offers a web security platform that provides firewall capabilities, software management, continuous security monitoring, and reporting. The company focuses on component security for modern web applications, aiming to detect vulnerabilities that can bypass generic web application firewalls. WebARX is used by over 3,000 web developers and digital agencies and currently protects more than 100,000 websites. The team is fully distributed and serves customers in 83 countries. WebARX has been active in vulnerability research—its researchers uncovered a critical flaw in the 'Simple Social Buttons' WordPress plugin that put over 40,000 sites at risk and was patched after disclosure. The company is building a new offering to improve research and security capabilities, and plans to invest in marketing and new product development with the latest funding.

Total raised

$5M

Funding rounds

2

Latest round

Series A

Latest activity

Sep 2024