Estonian cybersecurity innovator Patchstack has successfully raised $5 million in its latest Series A funding round, setting the stage for a leap forward in open-source security. The round was led by Karma Ventures, with additional support from G+D Ventures and Emilia Capital, marking a strong endorsement from notable investors.
Patchstack's mission is to revolutionize the way open-source vulnerabilities are addressed. Traditionally, it can take over 200 days to patch a critical security flaw. Patchstack aims to cut this time drastically by enabling developers to quickly identify, prioritize, and auto-mitigate vulnerabilities in real time, all without requiring code changes or user intervention. This streamlined approach ensures that applications remain secure and functional.
One of Patchstack's standout offerings is a free tool co-funded by the EU, designed to help open-source software vendors comply with the forthcoming Cyber Resilience Act. This new regulation, set to become law later this year, aims to enhance cybersecurity across the EU by setting common standards for digital products, including automatic security updates and incident reporting.
With over five million websites currently benefiting from Patchstack's vulnerability intelligence, the company has established itself as a key player in the field. Notable clients include GoDaddy, Digital Ocean, and Plesk/cPanel. Initially focused on WordPress, Patchstack is gearing up to expand its solutions to other content management systems and the broader open-source software ecosystem.
Patchstack's success is bolstered by its extensive vulnerability data, facilitated through its gamified bug bounty program and Vulnerability Disclosure Program (VDP) for WordPress plugins. This has positioned Patchstack as a leading provider of open-source security intelligence, earning it the title of the largest CVE Naming Authority in 2023.
Looking ahead, Patchstack plans to use its new funding to accelerate product development and strengthen its sales and marketing efforts. The company’s co-founder and CEO, Oliver Sild, expressed enthusiasm about the future: “With this Series A round, we’re poised to supercharge our product development and build a top-tier team to drive our mission forward.”
Patchstack’s advancements in open-source security come at a crucial time, as the Cyber Resilience Act imposes new demands on companies and software vendors. By automating vulnerability management and providing comprehensive security solutions, Patchstack is well-positioned to help businesses navigate these evolving requirements and bolster their cybersecurity defenses.
