Endor Labs
Endor Labs scans code and containers to find real, exploitable vulnerabilities, not just theoretical ones.
On the record
Checkpoint: Series C round or funding disclosure that tests the claimed 30x ARR growth and $640M valuation
The call
Endor Labs has real customers and a fast-growing product line, but it sits between a channel owner in Microsoft and a wave of copycats chasing the same reachability pitch.
Endor Labs sells software that filters out false security alarms when scanning code for bugs and weak spots. The company claims it works better than rivals like Snyk and Semgrep because it has learned from millions of scans, but those same rivals are already doing similar work, and Microsoft (which owns GitHub, where most code lives) can add the same feature to its own free security tool anytime. The biggest risk is that Microsoft ships a "good enough" version of Endor's noise-filtering technology built into GitHub itself, which would make customers question why they need to pay Endor separately.
Why
01
AI pressure: Frontier LLMs doing raw vulnerability scanning. Endor's own benchmark found a top frontier model alone caught only about 38% of the flaws its harnessed AI system found, but that gap can close fast. Could AI do the core job? Only partly.
02
Bigger players: Microsoft GitHub Advanced Security. GitHub already ships Dependabot and code scanning inside the repo; folding in reachability analysis would hit Endor's core pitch directly. Could a giant copy it? Yes, easily.
03
What protects it. Deep CI/CD and IDE integrations plus a proprietary reachability model trained on over 5 million scanned applications.
What would change this call
GitHub Advanced Security adds reachability-based noise reduction to its platform. Shows the channel owner can replicate Endor's core pitch for free, compressing its niche.
Endor discloses verified ARR or files data in a new funding round. Would confirm or contradict the claimed 30x growth and 166% NRR figures.
A major peer (Snyk, Cycode, Semgrep) announces enterprise displacement wins over Endor. Would show competitors converting Endor's target accounts rather than just matching features.
Endor discloses verified ARR or files data in a new funding round. Would confirm or contradict the claimed 30x growth and 166% NRR figures.
A major peer (Snyk, Cycode, Semgrep) announces enterprise displacement wins over Endor. Would show competitors converting Endor's target accounts rather than just matching features.
Key numbers
- $93M Series B, April 2025
- Est. ARR ~$15M vs $640M valuation
- Claims 5M+ apps scanned, 1M+ scans/week
Named risks
- Revenue figures across sources conflict wildly, from $2.3M to $28M, undermining traction claims.
- GitHub Advanced Security could bundle reachability-based noise reduction natively, compressing core pitch.
- Crowded field of well-funded peers claiming identical AI-native reachability differentiation in 2026.
- Series B priced at roughly 40x+ estimated ARR requires near-flawless execution to justify valuation.
- Autonomous Plane acquisition integration (Feb 2026) is recent and unproven at customer scale.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| GitHub Advanced Security (Microsoft) | contesting | Owns code repo distribution, already ships CodeQL and Dependabot, no P&L conflict as of 2026 |
| Snyk | contesting | Markets comparable AI-native reachability positioning per 2026 industry comparisons |
| Semgrep | contesting | Direct peer in reachability-based SCA/AppSec noise reduction as of 2026 |
| Cycode | contesting | Published competing AI cybersecurity tools ranking, March 30, 2026 |
| Aikido Security | contesting | Listed as comparable reachability/AI-native vendor in 2026 competitor comparisons |
Questions people ask
- Is Endor Labs profitable in 2026?
- No profitability figures have been disclosed. Third-party estimator Sacra puts ARR at roughly $15M as of end of 2025, up 131% YoY, while the company is still burning venture capital after raising $93M in a Series B on April 23, 2025.
- How much money has Endor Labs raised?
- Endor Labs raised $163M in total funding as of April 23, 2025, per TechCrunch, including a $70M Series A in August 2023 and a $93M Series B led by DFJ Growth with Salesforce Ventures joining.
- What is Endor Labs valued at?
- Forge Global estimated Endor Labs' post-money Series B valuation at approximately $640.84M as of April 30, 2025, after CEO Varun Badhwar said the April 2025 round priced the company 'orders of magnitude higher' than its 2023 Series A.
- Could GitHub or Microsoft replace Endor Labs?
- GitHub Advanced Security already ships CodeQL and Dependabot and owns the code repository itself, giving Microsoft a structural path to bundle reachability-based noise reduction directly into the platform, which is Endor Labs' core differentiator as of 2026.
- Who is Endor Labs' biggest competitor?
- Endor Labs competes most directly with Snyk, Semgrep, Checkmarx, Cycode, and Aikido Security, all of which were marketing similar 'AI-native reachability' positioning in 2026 content, per company blog comparisons dated March and July 2026.
- Who owns Endor Labs?
- Endor Labs is privately held and venture-backed, with investors including DFJ Growth, Lightspeed Venture Partners, Coatue, Dell Technologies Capital, Section 32, Citi Ventures, and Salesforce Ventures; it was founded by CEO Varun Badhwar and has not filed for an IPO as of April 30, 2025.
Timeline
- 2026-07-10Named Representative Vendor in 2026 Gartner Innovation Insight for Agentic Application Security Testing
- 2026-05-12Launched Agent Governance and Package Firewall for AI coding agents and workstations
- 2026-03-03Launched AURI free security-intelligence layer for AI coding agents, partnered with OpenHands
- 2026-02-11Acquired Autonomous Plane, adding code-to-container reachability, terms undisclosed
- 2025-11-19Launched multi-agent AI SAST claiming up to 95% false-positive reduction
- 2025-04-23Closed $93M Series B led by DFJ Growth, Salesforce Ventures joined, total funding hit $163M
- 2024-07Received strategic investment from Citi Ventures
- 2023-08Announced $70M Series A led by Lightspeed, Coatue, Dell Technologies Capital, Section 32
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Endor Labs, which builds tools to scan AI-generated code for vulnerabilities, lands $93M (2025-04-23)
- Endor Labs IPO: Investment Opportunities & Pre-IPO Valuations (2025-04-30)
- Why We Raised a $93M Series B (In This Market) (2025-04-23)
- Endor Labs revenue, funding & news
- Best Software Supply Chain Security Tools (2026-03-24)
- Introducing AI SAST That Thinks Like a Security Engineer (2025-11-19)
- Introducing AURI, Security Intelligence for AI Coding Agents and Developers (2026-03-03)
- Endor Labs Acquires Autonomous Plane Expanding AI-Native Application Security with Full Stack Reachability fro (2026-02-11)
- Introducing Security for AI Coding Agents and Workstations (2026-05-12)
- Endor Labs Named a Representative Vendor in the 2026 Gartner Innovation Insight for Agentic Application Securi (2026-07-10)
- Endor Labs Raises $70M in Series A Funding to Reform Application Security (2025-08-24)
- Employee Data and Trends for Endor Labs