depthfirst Raises $40M to Transform Software Security

Article hero imageImage credit: depthfirst

depthfirst, an applied AI lab focused on advancing software security, announced a $40 million Series A funding round led by Accel with participation from Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC, SV Angel, and prominent angel investors such as Jeff Dean and Kirsten Green. The company’s AI-driven platform, General Security Intelligence, detects, prioritizes, and fixes vulnerabilities across software and infrastructure layers.

The rise of AI-generated code has accelerated security risks, introducing automated and persistent threats beyond traditional human-scale attacks. depthfirst builds agents that comprehensively understand company systems and respond with the speed and intelligence matching AI-powered attackers. This approach strengthens the software ecosystem, enabling resilient businesses and safer AI deployment.

“We’ve entered an era where software is written faster than it can be secured,” said Qasim Mithani, co-founder and CEO. “AI has already changed how attackers work. Defense has to evolve just as fundamentally.”

Since product launch, depthfirst’s agents have identified eight times more true vulnerabilities than traditional tools, while reducing false positives by 85%. The platform achieved a 90% performance gain on CyberGym, a leading cybersecurity benchmark. Customers include Lovable, Supabase, Moveworks, and AngelList.

depthfirst felt like adding an autonomous senior product-security engineer to our team at AngelList,” said Alberto Martinez, Head of Security at AngelList. “It quickly surfaced our top issues and got smarter over time by tracking context across scans, eliminating false positives, and opening ready-to-merge fixes our developers immediately understand. It’s doubled the efficiency of our security-engineering team.

Legacy security tools focus on past threats, whereas depthfirst’s AI-first platform deeply analyzes code, context, and threat models to catch vulnerabilities before exploitation.

Founded in 2024, depthfirst combines expertise from Google DeepMind, Databricks, and Faire to tackle software security challenges with AI-native architecture. The Series A funding will accelerate R&D, go-to-market, and hiring across research, engineering, product, and sales.

1892 views

Stay Ahead in Tech & Startups

Get monthly email with insights, trends, and tips curated by Founders

Join 3000+ startups

The Top Voices newsletter delivers monthly startup, tech, and VC news and insights.

Dismiss