Endor Labs AURI Platform

Endor Labs is an application security company founded in 2021 in Palo Alto, US, with offices in Delft (Netherlands) and Bengaluru (India), per its About page. It launched out of stealth in 2022 and expanded from reachability-based SCA into a wider AppSec platform in 2024. Its focus is securing AI-assisted and AI-generated code.

The flagship AURI layer helps coding agents write secure code and applies policy checks (allow, block or human approval) to agent actions. Modules cover AI SAST, secrets detection, SCA with reachability analysis, a package firewall, container images, SBOM and compliance, and agentic remediation. Customers listed include Egnyte, Peloton and Netskope.

• AURI agent security: guides coding agents toward secure code and checks their actions against policy.
• AI SAST: code analysis for the agentic software lifecycle.
• SCA with reachability: ranks dependency vulnerabilities by actual exploitability.
• Package Firewall: blocks malicious open source packages before install.
• SBOM and compliance: evidence for SOC 2, PCI DSS, FedRAMP, ISO 42001 and CRA.
• Agentic remediation and patches for vulnerable dependencies.

A Vietnamese product company exporting software to the EU can generate SBOMs and CRA evidence from its pipelines. A bank engineering team can cut dependency alert volume by focusing on reachable vulnerabilities.

• Reachability analysis filters dependency alerts down to exploitable ones; the site cites a 97% reduction in noise.
• Policy checks govern what AI coding agents may do.
• SBOM and compliance use cases cover SOC 2, PCI DSS, FedRAMP and the EU Cyber Resilience Act.
• Free developer tools (MCP server and CLI) and a free trial lower the entry barrier.

Open source malware campaigns and AI-generated code are enlarging the software supply chain attack surface, and regulations such as the EU Cyber Resilience Act require SBOM evidence. Vietnamese software exporters selling into the EU face these requirements.

Founded 2021 in Palo Alto, US; offices in Delft and Bengaluru. Per the About page: $70M Series A (2023) and $93M Series B (2025). Investors named include DFJ Growth, Lightspeed, Coatue and Dell Technologies Capital.