San Francisco cloud security startup ProjectDiscovery has banked $25 million in early-stage financing as investors continue to place bets on vendors in the attack surface management space.
The company said the $25 million Series A funding round was led by CRV, the long-time Silicon Valley venture capital firm. ProjectDiscovery also took on investments from Point72, SignalFire, Rain Capital, Mango Capital, Accel and Lightspeed.
ProjectDiscovery, a company with open-source roots, is building technology to help organizations to manage digital assets in the cloud, find and fix vulnerabilities at scale, and pinpoint and address cloud security misconfigurations.
At its core, the company’s flagship ProjectDiscovery Cloud Platform helps to automate asset discovery and vulnerability scanning to continually detect new elements in an organization’s attack surface.
It includes a suite of open source tools that include the original Nuclei vulnerability scanner to help defenders discover trending and exploitable vulnerabilities across web applications, APIs, cloud environments and third-party applications.
The ProjectDiscovery platform offers tooling for asset management that integrates data from multi-cloud deployments, vulnerability and misconfiguration detections, and direct integration with JIRA and ticketing systems.
The cloud data and attack surface management category is very crowded with multiple late-stage startups jostling to help protect businesses from malicious attacks that increasingly target cloud infrastructure.
Related: Watch on Demand – Attack Surface Management Summit
Related: IBM to Acquire Randori for Attack Surface Management Tech
Related: Symmetry Systems Raises $17.7M for DSPM Platform
Related: Security VCs Pivot to Safeguarding AI Training Models

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.
More from Ryan Naraine
- Bankrupt IronNet Shuts Down Operations
- AWS Using MadPot Decoy System to Disrupt APTs, Botnets
- Progress Software Patches Critical Pre-Auth Flaws in WS_FTP Server Product
- Chinese Gov Hackers Caught Hiding in Cisco Router Firmware
- CISA Unveils New HBOM Framework to Track Hardware Components
- Gem Security Lands $23 Million Series A Funding
- New ‘Sandman’ APT Group Hitting Telcos With Rare LuaJIT Malware
- CrowdStrike to Acquire Application Intelligence Startup Bionic
Latest News
- Bankrupt IronNet Shuts Down Operations
- AWS Using MadPot Decoy System to Disrupt APTs, Botnets
- Generative AI Startup Nexusflow Raises $10.6 Million
- In Other News: RSA Encryption Attack, Meta AI Privacy, ShinyHunters Hacker Guilty Plea
- Researchers Extract Sounds From Still Images on Smartphone Cameras
- National Security Agency is Starting an Artificial Intelligence Security Center
- CISA Warns of Old JBoss RichFaces Vulnerability Being Exploited in Attacks
- Hackers Set Sights on Apache NiFi Flaw That Exposes Many Organizations to Attacks
