Cybersecurity Funding

Code Security Firm SonarSource Raises $412 Million at $4.7 Billion Valuation

Geneva-based code quality company is cashing in on heightened investor interest in the software supply chain security space

Ryan Naraine

April 26, 2022

Geneva-based code quality company is cashing in on heightened investor interest in the software supply chain security space

Swiss code quality software firm SonarSource on Tuesday announced a $412 million funding round at a heady valuation of $4.7 billion as investors continue to pour money into startups tackling software supply chain security.

SonarSource said the financing was led by new investors Advent International and General Catalyst. Insight Venture Partners, which invested $45 million back in 2016, also participated in the latest round.

Founded in Switzerland in 2008 by Olivier Gaudin, Freddy Mallet and Simon Brandhof, SonarSource provides products for continuous code quality of applications. The company competes with the likes of Veracode and Checkmarx in a fast growing market for tools to secure code in the software supply chain.

SonarSource, which maintains dual headquarters in Geneva and Texas, provides an IDE extension for on-the-fly analysis and coding guidance and products to handle static analysis for continuous codebase inspection and CI/CD workflows.

The company claims its products help more than 5 million developers write high-standard code that is free of bugs and security vulnerabilities.

As software gets updated continuously, SonarSource tools can be used to embed clean code directly into the development process, improving the overall health of the code base and reducing tech debt, the company said.

SonarSource said it will use the new investment to grow its go-to-market team globally as the company drives toward an ambitious $1 billion revenue target.

The company plans to open new regional headquarters in Singapore to drive a push into the APAC market.

Written By Ryan Naraine

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Latest News

Click to comment

Stop, Collaborate and Listen: Disrupting Cybercrime Networks Requires Private-Public Cooperation and Information Sharing

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Derek Manky

How the Atomized Network Changed Enterprise Protection

Our networks have become atomized which, for starters, means they’re highly dispersed. Not just in terms of the infrastructure – legacy, on-premises, hybrid, multi-cloud, and edge.

Matt Wilson

Mapping Threat Intelligence to the NIST Compliance Framework Part 2

How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers.

Landon Winkelvoss

Password Dependency: How to Break the Cycle

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the password dependency cycle. But how can this be done?

Torsten George

Why CISOs Make Great Board Members

Cybersecurity-related risk is a top concern, so boards need to know they have the proper oversight in place. Even as first-timers, successful CISOs make for successful board members.

Galina Antova

Application Security

Source Code Security Firm Cycode Launches With $4.6 Million in Funding

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Eduard KovacsSeptember 24, 2019