Depthfirst Secures $40M to Advance AI-Driven Vulnerability Management

Related

Depthfirst Secures $40M to Advance AI-Driven Vulnerability Management

What happened Cybersecurity startup Depthfirst has raised $40 million in...

Critical Cal.com Authentication Bypass Lets Attackers Take Over User Accounts

What happened A critical Cal.com authentication bypass lets attackers take...

International Takedown Disrupts RedVDS Cybercrime Platform Driving Phishing and Fraud

What happened International takedown disrupts RedVDS cybercrime platform driving phishing...

Share

What happened

Cybersecurity startup Depthfirst has raised $40 million in a Series A funding round, led by Accel Partners, with participation from SV Angel, Mantis VC, Alt Capital, BoxGroup, Liquid 2 Ventures and several angel investors. The San Francisco-based company plans to use the new capital to accelerate research and development, expand go-to-market efforts, and grow its applied research, engineering, product and sales teams.

Who is affected

The funding underscores growing investment in AI-native cybersecurity solutions targeting software and infrastructure vulnerability management. Depthfirst’s General Security Intelligence platform is already in use by organizations such as AngelList, Lovable, Moveworks and Supabase, and will influence enterprise approaches to vulnerability discovery and remediation.

Why CISOs should care

As AI-driven attacks and rapid software delivery accelerate the rate and complexity of vulnerabilities, traditional tools struggle to keep pace. Depthfirst’s platform claims to detect up to eight times more actionable flaws than conventional scanners while reducing false positives, a capability that could reshape how security teams integrate vulnerability management with DevOps workflows. The investment signals broader market confidence in AI-oriented security tooling that shifts defenses toward real-time, context-aware analysis.

3 Practical Actions for CISOs

  1. Evaluate AI-enhanced vulnerability tools: Assess whether emerging platforms like Depthfirst’s can integrate with existing pipelines and add value beyond static analysis tools.
  2. Prioritize context-aware scanning: Look for solutions that build an understanding of code and infrastructure context to reduce noise and highlight high-risk issues.
  3. Strengthen cross-functional workflows: Collaborate with DevOps and engineering teams to embed advanced vulnerability detection earlier in the development lifecycle and automate remediation where feasible.