Funding/M&A

Chainguard Raises Hefty $356M Series D at $3.5 Billion Valuation

The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.

Chainguard, a start-up created by ex-Google software engineers to build and sell “hardened-by-default” open-source components, has raised $356 million in a Series D round led by Kleiner Perkins and IVP. 

The Kirkland, Wash. company said new investors Salesforce Ventures and Datadog Ventures joined the round.

The cash infusion brings Chainguard’s total funding to about $612 million since its $5 million seed in 2021 and prices the company at $3.5 billion, according to a note from CEO Dan Lorenc.

Chainguard began by shipping pre-secured Linux container images that plug straight into Kubernetes environments and Lorenc now boasts that its catalog has grown from 400 to 1,400 images in the past year, pushing revenue from $5 million to $40 million. 

He said the company now counts north of 100 paying enterprise customers and is forecasting more than $100 million in annual recurring revenue for 2025.

The company listed a roster of major organizations using its products, including ANZ Bank, Canva, GitLab, Hewlett Packard Enterprise, Oceaneering International, Snap Inc., Univar Solutions, VPBank, and Wiz.

Advertisement. Scroll to continue reading.

Under the hood is what the firm calls its “software factory,” an automated build system that continuously patches and signs more than 13,000 upstream open-source packages git repositories to build the 1,400 container images that Chainguard now sells.

Lorenc said the same factory pipeline has produced two new products called Chainguard VMs and Chainguard Libraries as the company pursues enterprise customers with secure-by-default offerings.

“We’re moving both up and down the stack to secure and harden even more open source,” Lorenc said. ““We can’t be the safe source for open source without securing all open source.”

Chainguard’s investors are making a massive bet that the rash of supply-chain incidents, from the xz-utils backdoor to the most recent malicious GitHub Action updates, will keep compliance teams hunting for off-the-shelf components that need less day-to-day triage. 

Chainguard plans to use the Series D to hire across engineering and sales and to widen the list of open-source projects it supports. 

Related: Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

Related: Supply Chain Startup Chainguard Scores $61 Million Series B

Related: Chainguard Trains Spotlight on SBOM Quality Problem

Related: Chainguard Bags Massive $50M Series A for Supply Chain Security

Related: Everything You Need to Know About the SolarWinds Mega-Hack

Related Content

Supply Chain Security

Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published.

Application Security

The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.

Application Security

Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days.

Cybersecurity Funding

The British firm has built a collaborative platform to help organizations address supply chain security risks.

Application Security

Over two dozen organizations built a shared platform to triage vulnerabilities, fix them, and secure the software before patches arrive.

Supply Chain Security

By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.

Cybersecurity Funding

The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion.

Supply Chain Security

New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is largely lacking.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version