ShiftLeft offers a unified application security platform (ShiftLeft CORE) that combines NextGen Static Analysis (NG SAST) and Intelligent Software Composition Analysis (SCA) to analyze whole applications and map real attack paths using a graph database. The platform produces fast, accurate scan results with detailed remediation guidance, enabling developers and AppSec teams to collaborate and prioritize fixes. Customers report increased scan frequency (about three times year-over-year) and rapid remediation — up to 92% of new vulnerabilities fixed in less than 20 days. ShiftLeft cites strong commercial traction with a Gross Retention Rate of 97% and a Net Retention Rate of 143%. The company plans to scale hiring across all functions and expand product capabilities for cloud-native architectures, including Kubernetes and container-based applications. ShiftLeft positions its product to reduce false positives and speed scans compared with legacy AppSec tools, helping teams shift security left and ship more secure code faster. ShiftLeft provides a continuous application security platform that combines next-generation static code analysis with application instrumentation to identify and protect against vulnerabilities. Its code-informed runtime protection and runtime-informed code analysis are designed to integrate into CI/CD pipelines, reduce false positives, and enable rapid developer remediation. The company announced a $20 million Series B and said total funding is now nearly $30 million. ShiftLeft plans to use the funds to expand its product portfolio, broaden application coverage, and accelerate global sales and marketing. As part of its growth, the company added Jim Sortino as vice president of worldwide sales and formed an advisory board of security and development leaders. The platform targets modern DevOps environments including containers, microservices, cloud, and open source ecosystems. ShiftLeft analyzes source code and its dependencies before runtime and creates a runtime agent that travels with the software to protect against discovered vulnerabilities. Its protection works across traditional virtual machines and containerized microservice environments, targeting modern DevOps workflows. The company positions its product to reduce reliance on developer remediation and to address alert fatigue from traditional security tools. ShiftLeft emerged from stealth with CEO and founder Manish Gupta at the helm and reports roughly 24 employees and about half a dozen early customers. The startup is based in Santa Clara and announced a $9.3 million Series A to support growth. Board additions and the Series A indicate steps toward commercialization and scaling.

Total raised

$58M

Funding rounds

3

Latest round

Equity

Latest activity

May 2022