# Phylum: Information technology & services, Evergreen, United States

> Phylum: Phylum is a software supply chain security company that helps organizations manage risks in open-source software. Based in Evergreen, United States.

Source: https://millionrounds.com/startup/phylum (Millionrounds; every figure on the page links to its filing or article)

United States · [Information technology & services startup](https://millionrounds.com/companies)

# Phylum

Phylum is a software supply chain security company that helps organizations manage risks in open-source software.

Funding reported Last round: Series A

Information technology & services Evergreen, United States

Company summary

- **Founded:** 2020 6 years old
- **Team:** 6 1 to 10 people
- **Funding reported:** $20M in dollars
- **Last round:** Series A May 2022

How sure we are

- ✓ **Listed** We know it exists and what it does
- 2 **Funding reported** A company dataset reports a raise
- 3 **Observed** A filing or a dated announcement confirms a round

No round for Phylum has been confirmed by a filing or an announcement yet, so nothing here counts toward an investor's record. [How we decide](https://millionrounds.com/methodology)

## About Phylum

Phylum is a software supply chain security company that helps organizations manage risks in open-source software.

It focuses on analyzing third-party code as soon as it is published, identifying malicious or risky packages, and supporting compliance and governance efforts. The Phylum platform automates software supply chain security by continuously monitoring open-source package publications across major ecosystems like npm, PyPI, and RubyGems. It offers automated risk analysis, policy enforcement to block unsafe packages, and real-time threat intelligence. Phylum also provides tools such as the Phylum CLI for pre-checking package findings and a GitHub App integration for monitoring repositories. Founded by veterans of the U.S. Intelligence Community, Phylum is designed for security professionals, engineering managers, and developers, particularly those working with mission-critical systems. The company positions itself as a leader in identifying and protecting against software supply chain attacks, addressing gaps left by traditional security tools.

## What company datasets say Phylum raised

Funding, as reported

Reported in all **$20M** in dollars

Rounds **2**

Last round **Series A**

Last round size **$15M**

Last round date **May 2022**

Investors listed **11**

SEC Form D **$15M sold, 1 filing, last May 2022**

## Founders and team

From Phylum's own website and the SEC filings it signed: 1 founder, 9 on the team.

**Chris Wysopal** Founder and Chief Security Evangelist

- **Brian Roche** Chief Executive Officer
- **Ajay Nigam** Chief Product Officer
- **Anthony Barkley** Chief Strategy Officer
- **Karen Buffo** Chief Marketing Officer
- **Paul Barbosa** Chief Revenue Officer
- **Simon Adell** Chief Financial Officer
- **Stacie Justice** Chief People Officer
- **Diana Bushard** General Counsel
- **Aaron M. Bray** Executive Officer, Director i

On the board, as filed i *Dan M. Burns* *Patrick M. Heim* *Peter M. Morgan* *Renny M. McPherson*

## On 2 portfolio pages

Investors who name them

- [Olima Ventures](https://millionrounds.com/fund/olima-ventures)
- [BlueWing Ventures](https://millionrounds.com/fund/bluewing-ventures)

Each firm lists Phylum on its own website. That is the firm's claim, a weaker thing than a round we watched, but a named source.

## The company, in detail

What they build

Known for

health care risk manager (aspm) ai-generated code defense sca devops open-source vulnerability management security in ai development security issue correlation information technology & services financial services security compliance automation devsecops finance penetration testing services hospital & health care application security

Built with from their website

Adobe Amazon SES Pendo. Google Tag Manager Drift Amazon CloudFront Envoy WordPress.org Atlassian PWA

+8 more

AWS Application Load Balancer Google Workspace CloudFlare Max Mega Menu Viewport Meta Cisco Webex Control Hub Amazon Simple Email Service Hubspot

- **Sector:** Information technology & services
- **Industry code:** NAICS 541519, 513210, SIC 7375
- **Region:** Colorado
- **Part of:** Thoma Bravo
- **Full record:** [Every detail in the company directory](https://millionrounds.com/directory/phylum)

## Information technology & services in United States

Startups like it

- [**Databricks** San Francisco · founded 2013 *Raised*](https://millionrounds.com/company/databricks)
- [**Waymo** Mountain View · founded 2009 *Raised*](https://millionrounds.com/company/waymo)
- [**Crusoe** Denver · founded 2018 *Raised*](https://millionrounds.com/company/crusoe)
- [**Cursor** San Francisco · founded 2017 *Raised*](https://millionrounds.com/company/cursor)
- [**Thinking Machines Lab** San Francisco *Raised*](https://millionrounds.com/company/thinking-machines-lab)
- [**Cognition** San Francisco *Raised*](https://millionrounds.com/company/cognition)
- [**Polymarket** New York · founded 2020 *Raised*](https://millionrounds.com/company/polymarket)
- [**Harvey** San Francisco · founded 2022 *Raised*](https://millionrounds.com/company/harvey)

## Is this your company?

Add your raise, your deck and your story, and put Phylum in front of investors. Or tell us what we have wrong.

[List your startup](https://millionrounds.com/list-your-startup)[Send a correction](https://millionrounds.com/corrections)