Open supply safety scanning platform Snyk raises $300M

Let the OSS Enterprise newsletter guide your open supply journey! Sign up right here.

Snyk, a safety scanning platform made use of by developers at providers which includes Google, Salesforce, Intuit, and Atlassian, today announced a $530 million series F investment round, valuing the corporation at $8.5 billion. The transaction integrated main and secondary investments, which means that Snyk only raised about $300 million in fresh capital, with the remainder involving investors purchasing current shares.

Snyk’s SaaS platform aids developers recognize vulnerabilities and license violations in their open supply codebases, containers, and Kubernetes applications. By connecting their code repository, be it GitHub, GitLab, or Bitbucket, Snyk consumers get access to a giant vulnerability database, which enables Snyk to serve a description of the challenge, point to exactly where the flaw in the code lies, and even suggests a repair.

That Snyk targets its safety smarts at developers rather than safety teams is notable, as it suggests that it is seeking to catch troubles not only just before they goes into the live codebase, but in true time as the developer codes.

“Simply shifting left [testing early in the software development process] is no longer enough, and security now needs to be fully-owned by developers so that they are equipped to address security issues in real time as they emerge,” Snyk cofounder and president Guy Podjarny stated. “Our approach makes security easy, so that modern developers are set up for true success, securing what they build without having to become a security expert or slow down.”

The challenge

Most modern day software program relies to some degree on open supply elements, saving companies considerable sources in terms of possessing to develop and and retain all the things in-residence. But reports recommend that 84% of the industrial codebases include at least one open supply vulnerability, opening the software program provide chain to myriad external threats. Thus, the company of securing open supply software program is receiving large. Earlier this year, Snyk rival WhiteSource raised $75 million to bolster its open supply safety management and compliance platform, which is made use of by providers like Microsoft and IBM.

For Snyk, it is been a busy twelve months as well. The Boston-headquartered corporation, which was founded initially out of London and Tel Aviv back in 2015, has now raised $775 million considering the fact that its inception — this involves a $150 million tranche last year which was followed by a $300 million money injection back in March which valued the firm at $4.7 billion. This suggests that Snyk’s perceived worth has pretty much doubled in the space of six months.

On major of that, Snyk has been on some thing of an acquisition spree, snapping up AI-powered semantic code evaluation platform Deepcode Manifold and, more lately, FossID, a software program composition evaluation tool for open supply code. And back in May, Snyk located a highly effective ally in the type of cybersecurity giant Trend Micro, which launched a new item in conjunction with Snyk to give safety teams “continuous insight” into open supply vulnerabilities and compliance dangers.

Snyk’s newest funding round was co-led by Tiger Global and Sands Capital, with participation from a slew of higher-profile investors, which includes BlackRock, Accel, Salesforce Ventures, Atlassian Ventures, and Coatue.

Originally appeared on: TheSpuzz