RapidFort, a software supply chain security company, announced $42 million in Series A funding led by Blue Cloud Ventures and Forgepoint Capital. Felicis Ventures, which led a previous round, participated alongside Alumni Ventures, Boulder Ventures, Brave Capital, Evolution Ventures, Florida Funders, Gaingels, and Mana Ventures.
The investment comes as organizations struggle to keep pace with vulnerability exploitation. AI has accelerated both software development and attacker capabilities, creating a dangerous compression in the time between when vulnerabilities are disclosed and when they're exploited. Traditional quarterly patch cycles and manual security reviews can't match this velocity.
The urgency is backed by data. Verizon's latest Data Breach Investigations Report shows that vulnerability exploitation now accounts for 20% of breaches, nearly matching credential abuse at 22%. Organizations that rely on scanning tools to identify problems but lack the means to fix them quickly face mounting risk. RapidFort's growing revenue reflects a market that's shifting from passive detection toward active, continuous elimination of vulnerabilities.
"Software teams are shipping faster than ever—and attackers are moving even faster. RapidFort is building what the market urgently needs: continuous vulnerability remediation that keeps pace with modern development. Their end-to-end platform doesn't just surface risk—it eliminates it. We're excited to partner with RapidFort as they define the next era of software supply chain security," said Rami Rahal, Managing Partner at Blue Cloud Ventures.
RapidFort positions itself in a new category: continuous remediation built into the software delivery pipeline. Rather than alerting teams to problems they already know exist, the platform secures software throughout its lifecycle by analyzing, remediating, hardening, and protecting artifacts so vulnerabilities don't survive long enough to become incidents.
"The problem isn't that organizations don't know they have vulnerabilities, it's that they can't fix them fast enough," said Mehran Farimani, Founder and CEO of RapidFort. "AI has accelerated software delivery and attacker capability at the same time. The window between disclosure and exploitation has collapsed. RapidFort exists to eliminate vulnerabilities continuously—at machine speed—before they reach production."
The platform combines automated remediation with a catalog of hardened, near-zero-CVE container images spanning major Linux distributions. This enables teams to dramatically reduce risk within days instead of the months required by manual processes.
RapidFort's approach involves several integrated capabilities that work together across the software lifecycle. Automated remediation continuously removes vulnerabilities within CI/CD workflows, allowing teams to address issues as software ships rather than weeks after deployment. Near-zero-CVE containers provide drop-in, hardened images that reduce vulnerabilities without requiring code changes, eliminating security debt from the start.
Runtime intelligence adds behavioral analytics and image optimization that strip out unused components. This reduces the attack surface by as much as 90 percent by removing code that isn't actually being used but could still be exploited. End-to-end hardening automates validation from build through production, ensuring consistent security across different environments.
The platform also supports compliance requirements in regulated sectors. It's designed for programs such as FedRAMP, CMMC, ATO, CRA, and NIS2, providing continuous risk reduction and auditable security controls that satisfy stringent regulatory frameworks.
The Series A capital will support several growth initiatives. Go-to-market expansion will scale sales, marketing, and partnerships to meet rising demand for automated remediation. Platform innovation will advance automated remediation capabilities, near-zero-CVE software delivery, and continuous attack surface reduction.
Enterprise adoption efforts will focus on deployments in regulated industries, with deeper integrations, smoother onboarding processes, and operational scalability. Software supply chain assurance work will expand end-to-end lifecycle security from build through runtime to ensure continuous protection and compliance.
"RapidFort represents the evolution of software supply chain security from reactive to proactive," said Ernie Bio, Managing Director at Forgepoint Capital. "In an AI-accelerated threat landscape, detection alone is table stakes. What matters is elimination. RapidFort is the only platform that combines comprehensive profiling, automated rebuilding, intelligent patching, and continuous validation at enterprise scale. We're thrilled to partner with Mehran and the team as they define the new standard for software supply chain security."
RapidFort was established to solve a problem that traditional security tools weren't designed to handle: the need to eliminate vulnerabilities as fast as they're discovered. Mehran Farimani founded the company with the understanding that AI would fundamentally change the pace of both software development and cyber attacks. The platform treats software artifacts as infrastructure, hardening and validating images continuously to create a security foundation that scales across teams, tools, and environments.
"What's compelling about RapidFort is that it treats software artifacts as infrastructure. By hardening and validating images continuously, the platform creates a security foundation that scales across teams, tools, and environments—without forcing developers to change how they build," said Jimmy Park, Vice President at Forgepoint Capital.
The company serves customers ranging from startups to Fortune 500 enterprises, helping them reduce attack surface, shrink security debt, and ship safer software with less operational overhead.
Blue Cloud Ventures and Forgepoint Capital led the round based on their conviction that software security must match the speed of modern development. Both firms have deep expertise in cybersecurity and enterprise software, and they see RapidFort's continuous remediation approach as essential infrastructure for the AI era.
Felicis Ventures returned as an investor, doubling down on its earlier bet. The firm was joined by Alumni Ventures, Boulder Ventures, Brave Capital, Evolution Ventures, Florida Funders, Gaingels, and Mana Ventures, each bringing networks and expertise that will support RapidFort's expansion.
