# Cybersecurity Market Map San Francisco 2026: 67 Startups in 7 Segments

> 67 cybersecurity startups in San Francisco, mapped in 7 segments: identity and access, security operations and network security and more.

Source: https://millionrounds.com/market-maps/cybersecurity-san-francisco-market-map (Millionrounds; every figure on the page links to its filing or article)

## Identity and access

18

- [ForgeRock](https://millionrounds.com/company/forgerock)
- [WorkOS](https://millionrounds.com/company/workos)
- [SentiLink](https://millionrounds.com/company/sentilink)
- [Infisical](https://millionrounds.com/company/infisical)
- [Opal Security](https://millionrounds.com/company/opal-security)
- [Applied Identity](https://millionrounds.com/company/applied-identity)
- [Glide Identity](https://millionrounds.com/company/glide-identity)
- [Smallstep](https://millionrounds.com/company/smallstep)
- [P0 Security](https://millionrounds.com/company/p0-security)
- [Remediant](https://millionrounds.com/company/remediant)
- [Incode](https://millionrounds.com/company/incode)
- [ZITADEL](https://millionrounds.com/company/zitadel)
- [Authy](https://millionrounds.com/company/authy)
- [SuperTokens](https://millionrounds.com/company/supertokens)
- [Tesseral](https://millionrounds.com/company/tesseral)
- [ScaleFT](https://millionrounds.com/company/scaleft)
- [*E* Entry](https://millionrounds.com/company/entry)
- [Alacrity](https://millionrounds.com/company/alacrity)

## Security operations

18

- [Corelight](https://millionrounds.com/company/corelight)
- [Distil Networks](https://millionrounds.com/company/distil-networks)
- [CYGNVS](https://millionrounds.com/company/cygnvs)
- [Bastille](https://millionrounds.com/company/bastille)
- [VictorOps](https://millionrounds.com/company/victorops)
- [Picus Security](https://millionrounds.com/company/picus-security)
- [ProjectDiscovery](https://millionrounds.com/company/projectdiscovery)
- [Scope Security](https://millionrounds.com/company/scope-security)
- [Spectrum Security](https://millionrounds.com/company/spectrum-security)
- [BreachRx](https://millionrounds.com/company/breachrx)
- [Cognna](https://millionrounds.com/company/cognna)
- [Darwinium](https://millionrounds.com/company/darwinium)
- [AppOmni](https://millionrounds.com/company/appomni)
- [StopTheHacker](https://millionrounds.com/company/stopthehacker)
- [Trench](https://millionrounds.com/company/trench)
- [Spacture AI](https://millionrounds.com/company/spacture-ai)
- [TestPulseC Systems](https://millionrounds.com/company/testpulsec-systems)
- [Prowl](https://millionrounds.com/company/prowl)

## Network security

18

- [Depthfirst](https://millionrounds.com/company/depthfirst)
- [HackerOne](https://millionrounds.com/company/hackerone)
- [Horizon3.ai](https://millionrounds.com/company/horizon3-ai)
- [Ent](https://millionrounds.com/company/ent)
- [Bugcrowd](https://millionrounds.com/company/bugcrowd)
- [Reach Security](https://millionrounds.com/company/reach-security)
- [RunSybil](https://millionrounds.com/company/runsybil)
- [Cobalt](https://millionrounds.com/company/cobalt)
- [Skybox Security](https://millionrounds.com/company/skybox-security)
- [Mondoo](https://millionrounds.com/company/mondoo)
- [Archipelo](https://millionrounds.com/company/archipelo)
- [tCell](https://millionrounds.com/company/tcell)
- [MirrorTab](https://millionrounds.com/company/mirrortab)
- [Upfort](https://millionrounds.com/company/upfort)
- [Codenomicon](https://millionrounds.com/company/codenomicon)
- [Harmony Intelligence](https://millionrounds.com/company/harmony-intelligence)
- [Batuta](https://millionrounds.com/company/batuta)
- [Cotool](https://millionrounds.com/company/cotool)

## Application security

4

- [Semgrep](https://millionrounds.com/company/semgrep)
- [Atomist](https://millionrounds.com/company/atomist)
- [Impart Security](https://millionrounds.com/company/impart-security)
- [Apisec](https://millionrounds.com/company/apisec)

## AI security

3

- [Truffle Security](https://millionrounds.com/company/truffle-security)
- [General Analysis](https://millionrounds.com/company/general-analysis)
- [Repello AI](https://millionrounds.com/company/repello-ai)

## Email and phishing

3

- [Material Security](https://millionrounds.com/company/material-security)
- [Area 1 Security](https://millionrounds.com/company/area-1-security)
- [Paubox](https://millionrounds.com/company/paubox)

## Data security and privacy

3

- [Harmonic Security](https://millionrounds.com/company/harmonic-security)
- [Altitude Networks](https://millionrounds.com/company/altitude-networks)
- [CommandK](https://millionrounds.com/company/commandk)

## Segment by segment

### Identity and access

18 startups · $568M raised

- [**ForgeRock**](https://millionrounds.com/company/forgerock) ForgeRock is a multinational software company that develops commercial open-source identity and access management products. United States $140M
- [**WorkOS**](https://millionrounds.com/company/workos) WorkOS is a developer platform based in San Francisco that provides modern APIs and SDKs for B2B SaaS companies. United States $100M
- [**SentiLink**](https://millionrounds.com/company/sentilink) SentiLink is a technology company based in San Francisco, founded in 2017 by Naftali Harris and Max Blumenfeld. United States $84M
- [**Infisical**](https://millionrounds.com/company/infisical) Infisical is a San Francisco-based cybersecurity startup founded in 2022 by Maidul Islam, Vlad Matsiiako, and Tony Dang. United States $56M
- [**Opal Security**](https://millionrounds.com/company/opal-security) Opal Security is an AI-native access governance and identity security platform founded in 2020 and based in San Francisco, California. United States $45M
- [**Applied Identity**](https://millionrounds.com/company/applied-identity) Applied Identity's access policy enforcement solutions deliver exceptional time-to-value to organizations seeking to address regul United States $33M
- [**Glide Identity**](https://millionrounds.com/company/glide-identity) Glide Identity is a private digital identity and authentication company founded in 2024 and based in San Francisco, California, wi United States $25M
- [**Smallstep**](https://millionrounds.com/company/smallstep) Smallstep Labs, Inc. United States $19M

### Security operations

18 startups · $530M raised

- [**Corelight**](https://millionrounds.com/company/corelight) Corelight is a cybersecurity company based in San Francisco, founded in 2013. United States $209M
- [**Distil Networks**](https://millionrounds.com/company/distil-networks) Distil Networks specializes in bot detection and mitigation focused on stopping automated attacks to make the web more secure. United States $59M
- [**CYGNVS**](https://millionrounds.com/company/cygnvs) CYGNVS is a Silicon Valley-based SaaS cybersecurity company founded in 2020 by Arvind Parthasarathi. United States $55M
- [**Bastille**](https://millionrounds.com/company/bastille) Bastille is the leader in wireless threat intelligence through software-defined radio. United States $44M
- [**VictorOps**](https://millionrounds.com/company/victorops) VictorOps offers an incident management and IT alerting platform for DevOps teams. United States $34M
- [**Picus Security**](https://millionrounds.com/company/picus-security) Picus Security is a cybersecurity company founded in 2013, specializing in Adversarial Exposure Validation (AEV), Breach and Attac United States $29M
- [**ProjectDiscovery**](https://millionrounds.com/company/projectdiscovery) ProjectDiscovery is a cybersecurity company based in San Francisco, founded in 2020. United States $25M
- [**Scope Security**](https://millionrounds.com/company/scope-security) Scope provides managed detection and response to protect hospitals, clinics and large provider systems from cyber attacks. United States $20M

### Network security

18 startups · $737M raised

- [**Depthfirst**](https://millionrounds.com/company/depthfirst) depthfirst is an applied AI lab and AI-native security platform founded in October 2024, based in San Francisco, California. United States $120M
- [**HackerOne**](https://millionrounds.com/company/hackerone) HackerOne is a leading cybersecurity platform that focuses on ethical hacking, vulnerability coordination, and attack resistance management. United States $110M
- [**Horizon3.ai**](https://millionrounds.com/company/horizon3-ai) Horizon3.ai is a cybersecurity startup based in San Francisco, California, founded in 2019 by a team of cybersecurity veterans, in United States $100M
- [**Ent**](https://millionrounds.com/company/ent) Ent is an intent-aware workspace security platform dedicated to protecting work in real-time, particularly in environments where h United States $100M
- [**Bugcrowd**](https://millionrounds.com/company/bugcrowd) Bugcrowd is a crowdsourced security platform that connects organizations with a global community of over 275,000 security researchers. United States $85M
- [**Reach Security**](https://millionrounds.com/company/reach-security) Reach Security is an AI-native cybersecurity company founded in 2021, focused on helping organizations identify and address hidden United States $60M
- [**RunSybil**](https://millionrounds.com/company/runsybil) RunSybil is an AI-native offensive security company founded in 2023 and based in San Francisco, California. United States $40M
- [**Cobalt**](https://millionrounds.com/company/cobalt) Cobalt is a fast-growing offensive security platform that specializes in Penetration Testing as a Service (PTaaS). United States $29M

### Application security

4 startups · $136M raised

- [**Semgrep**](https://millionrounds.com/company/semgrep) Semgrep is a cybersecurity company based in San Francisco, founded in 2017. United States $100M
- [**Atomist**](https://millionrounds.com/company/atomist) Atomist is a San Francisco-based development automation and DevSecOps company founded in 2015. United States $22M
- [**Impart Security**](https://millionrounds.com/company/impart-security) Impart Security is a complete API security platform designed to enable security and development teams to protect their APIs. United States $12M
- [**Apisec**](https://millionrounds.com/company/apisec) APIsec is a cybersecurity company based in San Francisco, founded in 2018. United States $2.0M

### AI security

3 startups · $36M raised

- [**Truffle Security**](https://millionrounds.com/company/truffle-security) Truffle Security is an open source cybersecurity company that offers solutions for finding and remediating leaked software credentials. United States $25M
- [**General Analysis**](https://millionrounds.com/company/general-analysis) General Analysis is a San Francisco-based AI security company founded in 2024, focusing on protecting enterprises from the risks a United States $10M
- [**Repello AI**](https://millionrounds.com/company/repello-ai) Repello AI is an AI security startup founded in 2024, dedicated to helping organizations secure generative AI applications from va United States $1.2M

### Email and phishing

3 startups · $161M raised

- [**Material Security**](https://millionrounds.com/company/material-security) Material Security is an enterprise cybersecurity company that specializes in email security and protection for cloud-based workspaces. United States $100M
- [**Area 1 Security**](https://millionrounds.com/company/area-1-security) Area 1 Security is a performance-based cybersecurity company, changing how businesses protect against phishing attacks. United States $51M
- [**Paubox**](https://millionrounds.com/company/paubox) Paubox is a San Francisco-based technology company that specializes in HIPAA-compliant email security and communication solutions United States $10M

### Data security and privacy

3 startups · $80M raised

- [**Harmonic Security**](https://millionrounds.com/company/harmonic-security) Harmonic Security is a deep-tech cybersecurity company founded in 2023 and based in San Francisco, California. United States $68M
- [**Altitude Networks**](https://millionrounds.com/company/altitude-networks) Altitude Networks is a cybersecurity startup based in San Francisco, founded in 2018. United States $9.0M
- [**CommandK**](https://millionrounds.com/company/commandk) CommandK is a data security company founded in June 2022 by Jayesh Sidhwani and Rohan. United States $3.0M

**How this map is made.** Every startup here has raised money in rounds we track, and is based in San Francisco. It joins the map when its sectors, read from its rounds, or the opening of its own description say it works in cybersecurity, and goes to the first segment whose words it carries. Each segment shows its best-funded first. Rebuilt nightly; updated 15 November 2026.

## More market maps

[All maps](https://millionrounds.com/market-maps)

[Market map **Cybersecurity market map** 817 startups · 9 segments · $33B](https://millionrounds.com/market-maps/cybersecurity-market-map)[Market map · United States **Cybersecurity market map: United States** 525 startups · 9 segments · $27B](https://millionrounds.com/market-maps/cybersecurity-united-states-market-map)[Investors map **Who invests in cybersecurity** 411 investors · 8 segments](https://millionrounds.com/market-maps/cybersecurity-investors-map)[New wave **New cybersecurity startups, founded 2020 on** 210 startups · 9 segments · $6.1B](https://millionrounds.com/market-maps/new-cybersecurity-startups-market-map)[Market map · Europe **Cybersecurity market map: Europe** 199 startups · 9 segments · $4.3B](https://millionrounds.com/market-maps/cybersecurity-europe-market-map)[Raised in 2026 **Cybersecurity startups that raised in 2026** 114 startups · 8 segments · $5.8B](https://millionrounds.com/market-maps/cybersecurity-raised-2026-market-map)

## Who backs cybersecurity?

Open any company for its rounds and investors, or search the investors behind these startups in the app, with filters, lists and exports.

[Find their investors](https://millionrounds.com/login?join=1&next=/app/investors)[Top lists](https://millionrounds.com/top-lists)
