Endor Labs is a Cloud & Application Security company founded in 2021 and based in Palo Alto, United States. It has raised $163M in total funding, most recently a Series B in 2025 at a $640M valuation.
| Date | Stage | Amount | Valuation | Lead investors |
|---|---|---|---|---|
| Apr 23, 2025 | Series B | $93M | $640M | DFJ Growth |
Endor Labs' SCA platform inventories open-source dependencies and uses program-analysis-based reachability to determine whether a vulnerable function in a dependency is actually called by the application. By distinguishing reachable from unreachable vulnerabilities, it dramatically reduces false positives so security and engineering teams remediate the small fraction of CVEs that present real risk. It also surfaces dependency health, license, and supply-chain integrity signals, and generates SBOMs, helping organizations manage the open-source code that makes up most of modern software.
Beyond dependencies, Endor Labs has expanded into a broader application security platform covering secrets detection, CI/CD pipeline security, SAST, container scanning, and the security of AI-generated and AI-assisted code. A unifying reachability and context model prioritizes findings across these sources so teams see a consolidated, risk-ranked view rather than siloed scanner output. The platform targets the surge in machine-written code by helping organizations vet and govern the dependencies and patterns that AI coding tools introduce.
18 patents on file, but none with both an extractable figure and an abstract on Google Patents yet.
We don't have a live feed for this company's ATS. Their careers page has every open role.
View all careers ↗