Monday, June 27 2022

NeuraLegion, an application security platform enabling developers, DevOps professionals and application security specialists to quickly and seamlessly secure web applications and APIs, today announced a $20 million Series A funding round led by Evolution Equity Partners with participation from previous investors including DNX Ventures, J-ventures, Fusion Fund, and Incubate Fund. The company also announced its rebrand to Bright Security to reflect its mission to illuminate the security testing process.

To keep pace with the rate of modern development, organizations are now deploying 100x the number of applications into production than a decade ago. The issue faced by many enterprises and startups is that while development has dramatically increased in pace, security tools haven’t evolved to meet their growing needs. While there has been significant buzz around the movement to “shift-left” for a few years, the reality is that today only 25% of developers are actually responsible for security. Catering largely to AppSec teams rather than developers, most Dynamic Application Security Testing (DAST) tools are implemented too late in the process to remediate vulnerabilities, without impacting deployment timelines, forcing 86% of organizations to deploy vulnerable applications into production.

Bright Security is focused on shifting the process of security left to ensure that Application Security begins in the Build stage and runs through production compliance. The company’s DAST solution is designed to bridge the gap as a tool for both the developers who build the product, Dev QA personnel, and the AppSec teams who must eventually secure it. Utilizing Bright’s solution, AppSec teams can outline governance and parameters for what needs to be tested and how, and development teams can utilize it throughout the software development lifecycle (SDLC) to identify vulnerabilities and ensure they never make it to production.

The solution also eliminates the massive issue of false positives. In the past, many DAST tools overloaded both application security and development teams with a high rate of false positives, eroding the trust that many have in these solutions, and causing many to forgo using DAST altogether. Bright Security’s solution is not only able to identify the existence of vulnerabilities, but also validate that they are actually exploitable to eliminate false positives.

Maintaining that Application Security tools can secure more than “classic” technical vulnerabilities, Bright Security can identify business logic issues. Exploiting business logic vulnerabilities requires an understanding of the application’s flow and business purpose, and the process has traditionally relied on costly and time consuming manual testing. Bright Security’s automated AI powered solution thoroughly analyzes the application’s flow, understands the context, and tests the system through a multitude of interaction combinations, eliminating the need for manual processes for both technical and Business Logic Vulnerabilities.

“In order for security to actually shift-left, developers need to be comfortable with such tools to ensure that they can integrate them in a meaningful way,” said Gadi Bashvitz, who was appointed CEO of Bright Security starting in January. “We created a tool that caters to developers as well as AppSec teams, offering a solution that provides remediation solutions in developer speak as well as AppSec language to enable effective usage both pre- and post-production.”

“Application Security is ready for an overhaul to meet the demands of the current market,” said Karthik Subramanian, Partner at Evolution Equity Partners, who is joining the Board of Bright Security. “Tools that were built exclusively for the AppSec team are already antiquated if they aren’t usable by developers and the DevOps team`, and our tools must evolve to ensure security isn’t the job of one team, but rather a joint mission with shared and distributed responsibilities.”

To date, developers at more than 4,000 organizations have signed up to Bright Security’s cloud service and it has more than 50 large enterprise customers, including leading technology companies, global financial institutions, and cybersecurity companies who secure their applications with Bright. The company is headquartered in San Francisco and has offices in Israel, and across Europe. It will utilize the funds to expand its product and build out its engineering, sales, and marketing teams.

Shoham Cohen, co-founder and chief executive officer of NeuraLegion

Previous

Balbix RAISES $70M IN Series C Funding ROUND

Next

CardinalOps Raises $17.5M Series A Funding Round

Check Also

Widget

Don’t Miss

Cyber Deals: HUB Security, Cyberint, MetaCompliance

SecureDisruptions

Cybersecurity Venture Funding and Mergers: Venture funding and merger activity involved cyber awareness, enterprise security, and threat intelligence companies. Cybersecurity companies are evolving to match demand from the healthcare and intelligent infrastructure industries. Funding Cyberint, a threat intelligence and attack surface management company, announced a $40 million financing round led by StageOne Ventures, Neva SGR, […]

Firmware Supply Chain Company Binarly Raises $3.6 Million

SecureDisruptions

Binarly Inc., a cybersecurity company building technology to address repeatable security failures in the firmware supply chain, today announced $3.6 million in seed funding from WestWave Capital and Acrobator Ventures. Prominent cybersecurity leaders Michael Sutton, Thomas ‘Halvar Flake’ Dullien, Jamie Butler, Ryan Permeh, Bryson Bort, Pedram Amini, Chris Ueland and David Mandel from Emerging Ventures […]

Allied Universal Acquires Three Companies

SecureDisruptions

Allied Universal®, the leading security and facility services company, is continuing its global expansion with the acquisition of three companies located in New York, the Netherlands and Denmark. The largest of the three companies, International Protective Service Agency, is headquartered in New York, NY, and provides comprehensive security and event services for clients located throughout New York and New Jersey. IPSA founder and owner Jerry […]

SEMPRE.ai ACQUIRES NEWSPACE NETWORKS

SecureDisruptions

SEMPRE.ai, the technology company created to secure America’s critical infrastructure, announced the acquisition of NewSpace Networks to further safeguard and expand the availability of terrestrial, maritime, airborne and space-based wireless communications. Integration of the two companies’ technologies has been underway for more than a year, with the first commercial products having been tested domestically with the U.S. Department of […]

Quickpass Cybersecurity Secures $7M in Series A Funding Round

SecureDisruptions

Quickpass Cybersecurity, a leading provider of Privileged Access Management and Helpdesk Security Automation for MSPs (Managed Service Providers), announced a new $3 million round of financing in partnership with Arthur Ventures. This completes their Series A round of financing, totaling $7 million. This round of funding will enable Quickpass to accelerate the company’s efforts to […]

GreyNoise Raises $15 Million in Series A Funding

SecureDisruptions

GreyNoise Intelligence, the cyber security company analyzing internet scanning traffic to separate threats from background noise, today announced that it has raised a $15 Million round of Series A funding led by Radian Capital. With participation from CRV, Inner Loop, Stone Mill Ventures and Paladin Capital, this brings the total of funding raised to date to […]