depthfirst, an applied AI lab focused on securing modern software systems, has announced a new funding round as it looks to address the growing risks facing the global software ecosystem.
The company has raised $40m in a Series A funding round led by Accel, with participation from Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC and SV Angel. The round also included backing from a group of prominent angel investors, including Jeff Dean, Kirsten Green, Colin Evans, Logan Kilpatrick and Julian Schrittwieser.
Founded in 2024, depthfirst develops AI-driven security technology designed to identify and fix vulnerabilities across the full software stack. Its core platform, General Security Intelligence, uses autonomous agents to detect, triage and remediate weaknesses across code, infrastructure and underlying systems. The approach is intended to move beyond traditional static analysis by understanding how systems operate end-to-end, enabling faster and more context-aware responses to emerging threats.
The company argues that the rapid adoption of AI-assisted coding tools has dramatically increased the volume and complexity of software vulnerabilities. As development cycles accelerate, attackers are also becoming more automated and persistent, creating an environment in which conventional security tools struggle to keep pace. depthfirst’s platform is designed to counter this shift by operating at the same speed and scale as AI-enabled attackers, while identifying issues before they can be exploited.
The newly raised capital will be used to expand research and development, support go-to-market efforts and grow the company’s team across applied research, engineering, product and sales. depthfirst said the funding will also help it continue advancing its AI-native architecture as it works towards hardening what it describes as the global software stack.
In the months following its product launch, the company reports rapid technical and commercial progress. depthfirst said its agents are able to uncover significantly more true-positive vulnerabilities than traditional tools, while sharply reducing false positives. It has also achieved strong results on CyberGym, a cybersecurity evaluation framework, and has signed customers including Lovable, Supabase, Moveworks and AngelList.
depthfirst co-founder and CEO Qasim Mithani said, “We’ve entered an era where software is written faster than it can be secured. AI has already changed how attackers work. Defense has to evolve just as fundamentally.”
Customer feedback has highlighted the platform’s ability to surface critical issues and propose fixes that developers can act on quickly. AngelList Head of Security Alberto Martinez said, “depthfirst felt like adding an autonomous senior product-security engineer to our team at AngelList. It quickly surfaced our top issues and got smarter over time by tracking context across scans, eliminating false positives, and opening ready-to-merge fixes our developers immediately understand. It’s doubled the efficiency of our security-engineering team.”
Moveworks CISO Damian Hasse added, “depthfirst has fundamentally changed how we think about code security and quality at Moveworks. They not only find code defects and complex threats like backdoors and malware, but also proactively offer fixes. The result is stronger security and a measurable lift in code quality and review efficiency across the board.”
From an investor perspective, Accel partner Sara Ittelson said, “Software security is plagued by claims of ‘better signal to noise’ and legacy tools that are generally ill-equipped to meet the heightened risks of modern day threats. depthfirst has the industry background and team best poised to transform this $400B corner of the enterprise market, and just in time as AI and agentic tools become widely adopted.”
Copyright © 2026 FinTech Global
