
Work Here?
DepthFirst (Patcherai) offers an AI-native security platform called General Security Intelligence (GSI) that analyzes a company’s code, infrastructure, and business logic to identify and remediate vulnerabilities. It uses AI-powered agents to build a deep contextual model of a system, enabling detection of complex issues such as business logic flaws and backdoors that traditional static tools might miss. The platform surfaces actionable fixes that can be merged directly into developers’ workflows, while reducing false positives and increasing true positives. Delivered as a SaaS to support DevSecOps, its goal is to secure software against automated and autonomous threats and improve security and developer efficiency; the company raised $40 million in Series A in January 2026 to scale R&D, go-to-market, and hiring.
Industries
Data & Analytics
Enterprise Software
Cybersecurity
AI & Machine Learning
Company Size
51-200
Company Stage
Series B
Total Funding
$140.8M
Headquarters
San Francisco, California
Founded
2024
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$140.8M
Above
Industry Average
Funded Over
3 Rounds
Industry standards
Health Insurance
Vision Insurance
Dental Insurance
Meal Benefits
Company Equity
San Francisco-based depthfirst has launched Dependency Firewall, a product that reviews and blocks malicious open-source packages before they're installed across a company. The system inspects every package download, regardless of who is installing it, and returns a verdict before installation, allowing approved packages through whilst quarantining suspicious ones and blocking malicious code. The firewall addresses growing security risks as attackers exploit open-source trust by publishing packages that mimic popular libraries. Verizon reported that 48% of data breaches in its 2026 DBIR involved ransomware, with malware attacks surging recently. Dependency Firewall uses depthfirst's agentic defence platform, which previously discovered NGINX Rift, an 18-year-old vulnerability. The company has raised $120 million from investors including Meritech Capital, Accel and Forerunner Ventures.
depthfirst, an applied AI security lab, has launched the Open Defense Initiative, committing up to $5 million in platform credits to help open source projects discover and fix vulnerabilities. The programme targets widely deployed infrastructure software where vulnerabilities would have significant downstream impact. The company disclosed it identified 12 previously unknown memory corruption vulnerabilities in FFmpeg using approximately $1,000 in compute, compared to Anthropic's reported $10,000 spend for similar scanning. Some vulnerabilities dated back to 2009, and patches were autonomously generated by depthfirst's platform. The initiative is currently partnering with maintainers of FFmpeg, Envoy and Kata Containers, whilst proactively analysing projects including Linux, OpenSSH and PostgreSQL. depthfirst has raised $120 million from investors including Meritech Capital, Accel and Forerunner Ventures. Maintainers can apply at opendefense.dev.
depthfirst, an applied AI lab on a mission to secure the world’s software, today announced its $80M Series B round, led by Meritech Capital, with participati...
Depthfirst, an AI cybersecurity startup, has raised $80 million at a $580 million valuation, just two months after a $40 million Series A round. The company is developing "General Security Intelligence" to autonomously detect vulnerabilities and defend against malicious AI attacks. Founded in 2024 by former Google Deepmind researcher Andrea Michi, former Databricks security head Qasim Mithani, and ex-Block cybersecurity chief Daniele Perito, Depthfirst builds AI models from scratch using reinforcement learning rather than adapting existing large language models. The company has over 20 customers and claims 300% revenue growth over the past two quarters. Depthfirst is launching its first in-house model this week, targeting security weaknesses in cryptocurrency smart contracts. Meritech Capital led the Series B round, with total funding now exceeding $120 million.
depthfirst, an applied AI lab focused on software security, has raised $40 million in a Series A round led by Accel. Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC and SV Angel participated, alongside angel investors including Jeff Dean and Kirsten Green. Founded in 2024, depthfirst has developed a General Security Intelligence platform that detects, triages and remediates vulnerabilities across software and infrastructure. The company's AI agents uncover eight times more true-positive vulnerabilities than traditional static analysis tools whilst reducing false positives by 85 per cent. The founding team includes technical leaders from Google DeepMind, Databricks and Faire. The funding will support research and development, go-to-market efforts and hiring across applied research, engineering, product and sales.
Find jobs on Simplify and start your career today
Industries
Data & Analytics
Enterprise Software
Cybersecurity
AI & Machine Learning
Company Size
51-200
Company Stage
Series B
Total Funding
$140.8M
Headquarters
San Francisco, California
Founded
2024
Find jobs on Simplify and start your career today