Cantina Agentic Security Platform

Cantina is a New York-based security company, per Dealroom, with Hari Mulackal as co-founder and CEO. Its domain cantina.xyz now redirects to cantina.security. It addresses the work that follows vulnerability discovery, where triage, remediation and verification still depend on slow manual effort and backlogs grow.

The platform is a community-powered agentic system with a shared security memory layer, autonomy policies per action and integration, decision logging and audit trails. Products are Apex for code security and pentesting, Clarion for agentic security operations, Bounties for researcher-powered validation and Onchain Security for smart contracts. Named customers include Nord Security, GitLab, NVIDIA, Salesforce and SAP.

• Apex: agentic code security and pentesting.
• Clarion: agentic security operations across AI SOC, SIEM, MDR and SOAR use cases.
• Bounties: researcher-powered validation of findings.
• Onchain Security: smart contract and protocol security.
• Security memory layer: shared context across agents and actions.
• Autonomy policies and audit: per-action controls, decision logging and verification.

A Vietnamese software company can use Apex for AI-assisted code review and pentesting before release. A fintech can automate vulnerability triage and verified fixes. A blockchain project can use Onchain Security and Bounties to validate smart contracts.

• Covers the full path from discovery to verified fix, not only detection.
• Autonomy policies per action keep humans in control of what agents may do.
• Decision logs and audit trails support compliance evidence.
• Integrates with common tools such as GitHub, Okta, CrowdStrike, Jira and AWS.

Vulnerability volumes keep growing and autonomous attacks shorten the window to fix, so teams look to automate remediation and verification. Vietnamese software and fintech companies with limited security staff and blockchain or web3 projects are potential users of agentic code review and pentesting.

30 July 2026: emerged from stealth with $8M led by Framework Ventures, bringing total raised to $16.5M. Domain cantina.xyz redirects to cantina.security (company rebrand to security focus, with some links still on cantina.xyz). Released an open-weights model, Apex Flash-1.