Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Funding/M&A

Chainguard Raises Hefty $356M Series D at $3.5 Billion Valuation

The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.

Software Supply Chain Attack

Chainguard, a start-up created by ex-Google software engineers to build and sell “hardened-by-default” open-source components, has raised $356 million in a Series D round led by Kleiner Perkins and IVP. 

The Kirkland, Wash. company said new investors Salesforce Ventures and Datadog Ventures joined the round.

The cash infusion brings Chainguard’s total funding to about $612 million since its $5 million seed in 2021 and prices the company at $3.5 billion, according to a note from CEO Dan Lorenc.

Chainguard began by shipping pre-secured Linux container images that plug straight into Kubernetes environments and Lorenc now boasts that its catalog has grown from 400 to 1,400 images in the past year, pushing revenue from $5 million to $40 million. 

He said the company now counts north of 100 paying enterprise customers and is forecasting more than $100 million in annual recurring revenue for 2025.

The company listed a roster of major organizations using its products, including ANZ Bank, Canva, GitLab, Hewlett Packard Enterprise, Oceaneering International, Snap Inc., Univar Solutions, VPBank, and Wiz.

Advertisement. Scroll to continue reading.

Under the hood is what the firm calls its “software factory,” an automated build system that continuously patches and signs more than 13,000 upstream open-source packages git repositories to build the 1,400 container images that Chainguard now sells.

Lorenc said the same factory pipeline has produced two new products called Chainguard VMs and Chainguard Libraries as the company pursues enterprise customers with secure-by-default offerings.

“We’re moving both up and down the stack to secure and harden even more open source,” Lorenc said. ““We can’t be the safe source for open source without securing all open source.”

Chainguard’s investors are making a massive bet that the rash of supply-chain incidents, from the xz-utils backdoor to the most recent malicious GitHub Action updates, will keep compliance teams hunting for off-the-shelf components that need less day-to-day triage. 

Chainguard plans to use the Series D to hire across engineering and sales and to widen the list of open-source projects it supports. 

Related: Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

Related: Supply Chain Startup Chainguard Scores $61 Million Series B

Related: Chainguard Trains Spotlight on SBOM Quality Problem

Related: Chainguard Bags Massive $50M Series A for Supply Chain Security

Related: Everything You Need to Know About the SolarWinds Mega-Hack

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.