Is Anchore profitable in 2026?

Anchore has not disclosed profitability. Third party revenue estimates range from about 1 million to 18.7 million dollars with no confirmed company figure. The last disclosed funding event was a 20 million dollar Series B on January 22, 2020, and no new priced round has been reported since.

Has Anchore had layoffs?

No mass layoffs or hiring surges have been reported for Anchore in 2025 or 2026. The company remains a lean organization, with engineering and IT cited as its largest departments, though exact headcount figures conflict across third party trackers.

Could AI replace Anchore?

AI assisted vulnerability triage, such as NVIDIA's AI Blueprint integrated with Anchore's Syft tool in December 2024, pressures Anchore's core scan and match layer, but its DoD Iron Bank accreditation and compliance policy packs are harder for generic AI tools to replicate.

Who is Anchore's biggest competitor?

Snyk is Anchore's closest rival, holding about 4.4 percent container security mindshare versus Anchore's 0.7 percent as of June 2026 per PeerSpot. Wiz and Palo Alto Networks' Prisma Cloud are also expanding into SBOM and compliance workflows.

Anchore is privately held and venture backed, founded in 2016 by Said Ziouani and Daniel Nurmi. Investors named across sources include Menlo Ventures, SignalFire, and Entrada Ventures. No acquisition has been reported as of mid-2026.

What does Anchore actually do?

Anchore builds an SBOM powered software supply chain security platform for container scanning, vulnerability management, and compliance enforcement, and maintains the open source tools Syft and Grype. Customers referenced include DoD Platform One, the US Air Force, Cisco, and NVIDIA.

Cybersecurity companies · United States

Anchore

anchore.com ↗

Makes SBOM and container image scanning tools for software supply chain security.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from Jan 2026 · Every call on the record Checkpoint: DoD Software Fast Track (SWFT) standing requirement takes effect

The call

Anchore holds a narrow federal compliance niche while revenue stays flat, capital stays absent, and bigger rivals fold SBOM scanning into wider platforms.

Anchore sells software that finds security holes in code and creates software ingredient lists (called SBOMs). It has won approval from the U.S. Department of Defense and builds tools the government requires, which is hard for competitors to copy quickly. However, free scanning tools like Trivy do similar jobs at no cost, well-funded rivals like Snyk are 6 times bigger, and the company has flat revenue for years with no new investor backing. The real test is whether new European and U.S. government rules starting in 2026 force companies to buy Anchore's compliance features, or whether Snyk and larger security companies simply add those features to their own products first.

Why

AI pressure: NVIDIA AI Blueprint for Vulnerability Analysis; open source Trivy. AI-assisted vulnerability triage and free scanners like Trivy commoditize Anchore's core pattern-matching layer. Could AI do the core job? Only partly.

Bigger players: Snyk, Wiz, Palo Alto Networks Prisma Cloud. Snyk holds 4.4% mindshare versus Anchore's 0.7%; Wiz and Prisma Cloud fold SBOM scanning into broader CNAPP platforms. Could a giant copy it? Yes, easily.

What protects it. DoD Iron Bank and Platform One accreditation plus compliance policy packs give Anchore a federal niche rivals have not matched yet.

What would change this call

Anchore announces or fails to announce a new priced funding round by Q4 2026. Shows whether investors still back the flat six-year-old business.
Snyk, Wiz, or Palo Alto launch a FedRAMP-equivalent SBOM/compliance product. Would erode Anchore's main defensible moat in federal accreditation.
Anchore Enterprise v5-to-v6 migration completes with customer counts stable or declining. Tests whether the greenfield-only v6 launch causes churn.

Key numbers

$20M Series B, last priced funding round (2020-01-22)
0.7% market share vs Snyk's 4.4% (2025)
~$7M ARR, roughly flat since 2021 (2024-10)

Named risks

No priced funding round since Series B in January 2020, raising capital runway concerns. Severity: high
Sub-1% container security mindshare (0.7%) vs Snyk's 4.4% as of June 2026. Severity: high
Enterprise v6 greenfield-only deployment leaves existing v5.x customers without upgrade path as of July 2026. Severity: medium
Core scan and match functionality commoditized by free OSS tools including Anchore's own Syft and Grype. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Snyk	gaining on	Holds 4.4% container security mindshare vs Anchore's 0.7% as of June 2026 (PeerSpot)
Wiz	gaining on	CNAPP consolidation folding SBOM and compliance into broader platform offerings through 2026
Palo Alto Networks (Prisma Cloud)	gaining on	Expanding cloud native security platform into SBOM adjacent compliance workflows, 2026
Trivy (open source)	contesting	Free OSS scanner commoditizes basic SBOM and vulnerability scanning, pressuring Anchore's paid tier
Aqua Security	contesting	Direct competitor in container and software supply chain security with own OSS tool Trivy

Questions people ask

Is Anchore profitable in 2026?: Anchore has not disclosed profitability. Third party revenue estimates range from about 1 million to 18.7 million dollars with no confirmed company figure. The last disclosed funding event was a 20 million dollar Series B on January 22, 2020, and no new priced round has been reported since.
Has Anchore had layoffs?: No mass layoffs or hiring surges have been reported for Anchore in 2025 or 2026. The company remains a lean organization, with engineering and IT cited as its largest departments, though exact headcount figures conflict across third party trackers.
Could AI replace Anchore?: AI assisted vulnerability triage, such as NVIDIA's AI Blueprint integrated with Anchore's Syft tool in December 2024, pressures Anchore's core scan and match layer, but its DoD Iron Bank accreditation and compliance policy packs are harder for generic AI tools to replicate.
Who is Anchore's biggest competitor?: Snyk is Anchore's closest rival, holding about 4.4 percent container security mindshare versus Anchore's 0.7 percent as of June 2026 per PeerSpot. Wiz and Palo Alto Networks' Prisma Cloud are also expanding into SBOM and compliance workflows.
Who owns Anchore?: Anchore is privately held and venture backed, founded in 2016 by Said Ziouani and Daniel Nurmi. Investors named across sources include Menlo Ventures, SignalFire, and Entrada Ventures. No acquisition has been reported as of mid-2026.
What does Anchore actually do?: Anchore builds an SBOM powered software supply chain security platform for container scanning, vulnerability management, and compliance enforcement, and maintains the open source tools Syft and Grype. Customers referenced include DoD Platform One, the US Air Force, Cisco, and NVIDIA.

Timeline

2026-07-13Enterprise v6.0.0 release notes confirm greenfield only deployment, v5.x upgrade path still pending
2026-05-18Anchore Enterprise v6 announced, framed around EU Cyber Resilience Act Sept 2026 deadline
2026-04-21Anchore Enterprise 5.26 released with new vulnerability feeds and HTML reporting
2026-03-18Anchore Enterprise 5.25 released, scanning engine rewritten to align with Syft and Grype
2026-01DoD Software Fast Track program moves from pilot to standing requirement
2025-09Strategic partnership with Chainguard announced
2025-05-20Launched Anchore SBOM with Bring Your Own SBOM import capability
2024-12-10NVIDIA AI Blueprint for Vulnerability Analysis integrated with Anchore's Syft
2020-01-22Series B funding of 20 million dollars announced, led by Menlo Ventures and SignalFire
2016-04Seed round of 2.25 million dollars raised

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS