Startups

AppOmni raises $70M to find and secure vulnerabilities in SaaS app stacks

Comment

Binary background with locks representing security or encryption.
Image Credits: JuSun / Getty Images

As more enterprises migrate apps and workloads into the cloud, so grows the need for more sophisticated tech to secure that activity. That’s resulted in a strong run of funding rounds for startups building products to address that gap. In the latest development, AppOmni — which has built a platform not just to connect with and secure SaaS apps, but to seek out, highlight and help fix vulnerabilities that arise when different apps are used together or in tandem — has raised $70 million. CEO Brendan O’Connor said the funding, a Series C, will be used to continue both for international growth and to continue building out the platform.

AppOmni’s customers include large enterprises and tech names such as Dropbox, Ping and Accenture, as well as large Fortune 100 financial and healthcare companies, which use the platform both to secure their SaaS application stacks (AppOmni integrates with hundreds of SaaS apps including biggies like Box, Confluence, Fastly, GitHub, Google Workspace, Jira, Microsoft 365, Salesforce, ServiceNow, Slack, Workday and Zoom) and also, as of April, any custom apps that they are building and using alongside those.

Thoma Bravo is leading this round, with previous backers such as Scale Venture Partners, Salesforce Ventures, ClearSky and Costanoa Ventures also investing. The valuation is not being disclosed, but as a marker of where it might be, it has now raised $123 million; PitchBook notes that AppOmni was valued at $200 million post-money in its last round — a $40 million Series B in April 2021 that we covered here — and it has continued to have triple-digit growth since then. Collectively, it says it now secures apps covering 78 million users and 230 million exposed data records and more than 9 billion monthly events. So even amid the pressures that we have seen on funding overall, and the competition from other security startups searching for funding, there are signs that AppOmni is among the stronger tier of them.

The gap in the security market that AppOmni is targeting is a longstanding one that is in some ways becoming more critical with the evolution of IT. As more companies follow through on the promise of “digital transformation” and embrace doing more and investing more in cloud services, they are adopting an ever-wider array of apps — some of which are “approved” by IT and some of which are not — that users can access from a growing number of endpoints (that is, devices, such as laptops, their desks, their phones and tablets, across home Wi-Fi, public hotspots, mobile networks, office networks and so on and so forth). That spaghetti of permutations, taken across a wide array of apps, creates a lot of crossovers that inadvertently lead to vulnerabilities.

These can either pertain to specific apps — AppOmni says that on average it finds more than 20 unauthortized app usages across a single engagement — or to specific types of data, or data records. The startup’s specialty is to search for these loopholes and provide alerts related to them, as well as begin the process of remediating to fix them. It also generates analytics for security operations teams to get more comprehensive pictures of activity across the network to identify trends as well as handle specific events.

“SaaS has become one of the most essential parts of the IT stack. But even though SaaS apps now house extremely sensitive data and run some of the most critical business workflows, most organizations haven’t adequately prioritized SaaS security,” O’Connor told us. “That means that there is a huge amount of data sitting unsecured in the cloud. Our goal is to give businesses and enterprises an easy way to secure their SaaS data and keep it secure over time.”

O’Connor and his co-founder, CTO Brian Soby, cut their teeth in exploring the cyber risks in cloud services from years of working for SaaS companies themselves, perhaps most notably at Salesforce, where O’Connor had been an SVP and “chief trust officer” and Soby had been a director of product security. Tellingly, their impact on Salesforce proved to be a positive one, with Salesforce now an investor and partner of AppOmni’s. O’Connor went on to work in a similar capacity at ServiceNow, which like other SaaS companies faces many of the similar issues of SaaS apps conflicting with each other (even when they appear to work together).

The traction it has had has helped the startup stand out among its peers, which include the likes of IBM and Amazon, as well as F5’s Threat Stack.

“The digitization of businesses across all sectors has accelerated the need for reliable data protection and control, and AppOmni’s security solutions are unmatched in the industry,” added Robert (Tre) Sayle, a partner at Thoma Bravo. “We have been impressed by AppOmni’s rapid scaling, high levels of customer satisfaction and continued product innovation, and we’re thrilled to partner with Brendan and his team as they capitalize on the sizable market opportunity ahead.”

More TechCrunch

Alora Baby is not just aiming to manufacture baby cribs in an environmentally friendly way but is attempting to overhaul the whole lifecycle of a product

Alora Baby aims to push baby gear away from the ‘landfill economy’

Bumble founder and executive chair Whitney Wolfe Herd raised eyebrows this week with her comments about how AI might change the dating experience. During an onstage interview, Bloomberg’s Emily Chang…

Go on, let bots date other bots

Welcome to Week in Review: TechCrunch’s newsletter recapping the week’s biggest news. This week Apple unveiled new iPad models at its Let Loose event, including a new 13-inch display for…

Why Apple’s ‘Crush’ ad is so misguided

The U.K. Safety Institute, the U.K.’s recently established AI safety body, has released a toolset designed to “strengthen AI safety” by making it easier for industry, research organizations and academia…

U.K. agency releases tools to test AI model safety

AI startup Runway’s second annual AI Film Festival showcased movies that incorporated AI tech in some fashion, from backgrounds to animations.

At the AI Film Festival, humanity triumphed over tech

Rachel Coldicutt is the founder of Careful Industries, which researches the social impact technology has on society.

Women in AI: Rachel Coldicutt researches how technology impacts society

SAP Chief Sustainability Officer Sophia Mendelsohn wants to incentivize companies to be green because it’s profitable, not just because it’s right.

SAP’s chief sustainability officer isn’t interested in getting your company to do the right thing

Here’s what one insider said happened in the days leading up to the layoffs.

Tesla’s profitable Supercharger network is in limbo after Musk axed the entire team

StrictlyVC events deliver exclusive insider content from the Silicon Valley & Global VC scene while creating meaningful connections over cocktails and canapés with leading investors, entrepreneurs and executives. And TechCrunch…

Meesho, a leading e-commerce startup in India, has secured $275 million in a new funding round.

Meesho, an Indian social commerce platform with 150M transacting users, raises $275M

Some Indian government websites have allowed scammers to plant advertisements capable of redirecting visitors to online betting platforms. TechCrunch discovered around four dozen “gov.in” website links associated with Indian states,…

Scammers found planting online betting ads on Indian government websites

Around 550 employees across autonomous vehicle company Motional have been laid off, according to information taken from WARN notice filings and sources at the company.  Earlier this week, TechCrunch reported…

Motional cut about 550 employees, around 40%, in recent restructuring, sources say

The deck included some redacted numbers, but there was still enough data to get a good picture.

Pitch Deck Teardown: Cloudsmith’s $15M Series A deck

The company is describing the event as “a chance to demo some ChatGPT and GPT-4 updates.”

OpenAI’s ChatGPT announcement: What we know so far

Unlike ChatGPT, Claude did not become a new App Store hit.

Anthropic’s Claude sees tepid reception on iOS compared with ChatGPT’s debut

Welcome to Startups Weekly — Haje‘s weekly recap of everything you can’t miss from the world of startups. Sign up here to get it in your inbox every Friday. Look,…

Startups Weekly: Trouble in EV land and Peloton is circling the drain

Scarcely five months after its founding, hard tech startup Layup Parts has landed a $9 million round of financing led by Founders Fund to transform composites manufacturing. Lux Capital and Haystack…

Founders Fund leads financing of composites startup Layup Parts

AI startup Anthropic is changing its policies to allow minors to use its generative AI systems — in certain circumstances, at least.  Announced in a post on the company’s official…

Anthropic now lets kids use its AI tech — within limits

Zeekr’s market hype is noteworthy and may indicate that investors see value in the high-quality, low-price offerings of Chinese automakers.

The buzziest EV IPO of the year is a Chinese automaker

Venture capital has been hit hard by souring macroeconomic conditions over the past few years and it’s not yet clear how the market downturn affected VC fund performance. But recent…

VC fund performance is down sharply — but it may have already hit its lowest point

The person who claims to have 49 million Dell customer records told TechCrunch that he brute-forced an online company portal and scraped customer data, including physical addresses, directly from Dell’s…

Threat actor says he scraped 49M Dell customer addresses before the company found out

The social network has announced an updated version of its app that lets you offer feedback about its algorithmic feed so you can better customize it.

Bluesky now lets you personalize main Discover feed using new controls

Microsoft will launch its own mobile game store in July, the company announced at the Bloomberg Technology Summit on Thursday. Xbox president Sarah Bond shared that the company plans to…

Microsoft is launching its mobile game store in July

Smart ring maker Oura is launching two new features focused on heart health, the company announced on Friday. The first claims to help users get an idea of their cardiovascular…

Oura launches two new heart health features

Keeping up with an industry as fast-moving as AI is a tall order. So until an AI can do it for you, here’s a handy roundup of recent stories in the world…

This Week in AI: OpenAI considers allowing AI porn

Garena is quietly developing new India-themed games even though Free Fire, its biggest title, has still not made a comeback to the country.

Garena is quietly making India-themed games even as Free Fire’s relaunch remains doubtful

The U.S.’ NHTSA has opened a fourth investigation into the Fisker Ocean SUV, spurred by multiple claims of “inadvertent Automatic Emergency Braking.”

Fisker Ocean faces fourth federal safety probe

CoreWeave has formally opened an office in London that will serve as its European headquarters and home to two new data centers.

CoreWeave, a $19B AI compute provider, opens European HQ in London with plans for 2 UK data centers

The Series C funding, which brings its total raise to around $95 million, will go toward mass production of the startup’s inaugural products

AI chip startup DEEPX secures $80M Series C at a $529M valuation 

A dust-up between Evolve Bank & Trust, Mercury and Synapse has led TabaPay to abandon its acquisition plans of troubled banking-as-a-service startup Synapse.

Infighting among fintech players has caused TabaPay to ‘pull out’ from buying bankrupt Synapse