Open source security platform Snyk raises $7 million in Series A funding round

Snyk says it will use leverage the new funding to "deploy additional product offerings that improve the secure usage of open source for developers."

Snyk, a London-based startup that provides security for open source libraries, has raised $7 million in its Series A funding round, the company announced on Tuesday.

The company bills itself as a “developer-first security solution that helps you use open source code and stay secure.” Snyk runs a vulnerability database that it uses to protect its customers who use open source code.

“Security controls must adapt to the new pace open source and cloud dictate. Failing to do so is what led to the recent breaches at Equifax, Uber, and the Tesla cloud breach. We’re relying on strangers’ code to run the most sensitive aspect of our business, and do so at neck-breaking speed,” said Guy Podjarny, Snyk’s CEO and co-founder. “Traditional security solutions simply cannot keep up.”

Snyk says it will use leverage the new funding to “deploy additional product offerings that improve the secure usage of open source for developers.” The company boasts 120,000 developers on its platform with 100,000 projects protected and 350,000 downloads per month. Customers include cloud provider Digital Ocean and travel fare aggregator Skyscanner.

The funding round was led by Boldstart Ventures and Canaan Partners, with additional funding from Heavybit, FundFire and Veeam co-CEO Peter McKay. McKay will join Snyk’s board of directors as part of the funding round.

Snyk says its total funding is now up to $10 million.

“Securing these open source packages during the development cycle becomes paramount, especially with the movement towards a more agile and continuous release cycle,” said Ed Sim, founder and managing partner of Boldstart Ventures. “Our investment in Snyk will help them meet their overwhelming incoming customer demand and accelerate their delivery of new capabilities.”

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure