Startups

AppOmni raises $70M to find and secure vulnerabilities in SaaS app stacks

Comment

Binary background with locks representing security or encryption.
Image Credits: JuSun / Getty Images

As more enterprises migrate apps and workloads into the cloud, so grows the need for more sophisticated tech to secure that activity. That’s resulted in a strong run of funding rounds for startups building products to address that gap. In the latest development, AppOmni — which has built a platform not just to connect with and secure SaaS apps, but to seek out, highlight and help fix vulnerabilities that arise when different apps are used together or in tandem — has raised $70 million. CEO Brendan O’Connor said the funding, a Series C, will be used to continue both for international growth and to continue building out the platform.

AppOmni’s customers include large enterprises and tech names such as Dropbox, Ping and Accenture, as well as large Fortune 100 financial and healthcare companies, which use the platform both to secure their SaaS application stacks (AppOmni integrates with hundreds of SaaS apps including biggies like Box, Confluence, Fastly, GitHub, Google Workspace, Jira, Microsoft 365, Salesforce, ServiceNow, Slack, Workday and Zoom) and also, as of April, any custom apps that they are building and using alongside those.

Thoma Bravo is leading this round, with previous backers such as Scale Venture Partners, Salesforce Ventures, ClearSky and Costanoa Ventures also investing. The valuation is not being disclosed, but as a marker of where it might be, it has now raised $123 million; PitchBook notes that AppOmni was valued at $200 million post-money in its last round — a $40 million Series B in April 2021 that we covered here — and it has continued to have triple-digit growth since then. Collectively, it says it now secures apps covering 78 million users and 230 million exposed data records and more than 9 billion monthly events. So even amid the pressures that we have seen on funding overall, and the competition from other security startups searching for funding, there are signs that AppOmni is among the stronger tier of them.

The gap in the security market that AppOmni is targeting is a longstanding one that is in some ways becoming more critical with the evolution of IT. As more companies follow through on the promise of “digital transformation” and embrace doing more and investing more in cloud services, they are adopting an ever-wider array of apps — some of which are “approved” by IT and some of which are not — that users can access from a growing number of endpoints (that is, devices, such as laptops, their desks, their phones and tablets, across home Wi-Fi, public hotspots, mobile networks, office networks and so on and so forth). That spaghetti of permutations, taken across a wide array of apps, creates a lot of crossovers that inadvertently lead to vulnerabilities.

These can either pertain to specific apps — AppOmni says that on average it finds more than 20 unauthortized app usages across a single engagement — or to specific types of data, or data records. The startup’s specialty is to search for these loopholes and provide alerts related to them, as well as begin the process of remediating to fix them. It also generates analytics for security operations teams to get more comprehensive pictures of activity across the network to identify trends as well as handle specific events.

“SaaS has become one of the most essential parts of the IT stack. But even though SaaS apps now house extremely sensitive data and run some of the most critical business workflows, most organizations haven’t adequately prioritized SaaS security,” O’Connor told us. “That means that there is a huge amount of data sitting unsecured in the cloud. Our goal is to give businesses and enterprises an easy way to secure their SaaS data and keep it secure over time.”

O’Connor and his co-founder, CTO Brian Soby, cut their teeth in exploring the cyber risks in cloud services from years of working for SaaS companies themselves, perhaps most notably at Salesforce, where O’Connor had been an SVP and “chief trust officer” and Soby had been a director of product security. Tellingly, their impact on Salesforce proved to be a positive one, with Salesforce now an investor and partner of AppOmni’s. O’Connor went on to work in a similar capacity at ServiceNow, which like other SaaS companies faces many of the similar issues of SaaS apps conflicting with each other (even when they appear to work together).

The traction it has had has helped the startup stand out among its peers, which include the likes of IBM and Amazon, as well as F5’s Threat Stack.

“The digitization of businesses across all sectors has accelerated the need for reliable data protection and control, and AppOmni’s security solutions are unmatched in the industry,” added Robert (Tre) Sayle, a partner at Thoma Bravo. “We have been impressed by AppOmni’s rapid scaling, high levels of customer satisfaction and continued product innovation, and we’re thrilled to partner with Brendan and his team as they capitalize on the sizable market opportunity ahead.”

More TechCrunch

The Series C funding, which brings its total raise to around $95 million, will go toward mass production of the startup’s inaugural products

AI chip startup DEEPX secures $80M Series C at a $529M valuation 

A dust-up between Evolve Bank & Trust, Mercury and Synapse has led TabaPay to abandon its acquisition plans of troubled banking-as-a-service startup Synapse.

Infighting among fintech players has caused TabaPay to ‘pull out’ from buying bankrupt Synapse

The problem is not the media, but the message.

Apple’s ‘Crush’ ad is disgusting

The Twitter for Android client was “a demo app that Google had created and gave to us,” says Particle co-founder and ex-Twitter employee Sara Beykpour.

Google built some of the first social apps for Android, including Twitter and others

WhatsApp is updating its mobile apps for a fresh and more streamlined look, while also introducing a new “darker dark mode,” the company announced on Thursday. The messaging app says…

WhatsApp’s latest update streamlines navigation and adds a ‘darker dark mode’

Plinky lets you solve the problem of saving and organizing links from anywhere with a focus on simplicity and customization.

Plinky is an app for you to collect and organize links easily

The keynote kicks off at 10 a.m. PT on Tuesday and will offer glimpses into the latest versions of Android, Wear OS and Android TV.

Google I/O 2024: How to watch

For cancer patients, medicines administered in clinical trials can help save or extend lives. But despite thousands of trials in the United States each year, only 3% to 5% of…

Triomics raises $15M Series A to automate cancer clinical trials matching

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. Sign up here for free — just click TechCrunch Mobility! Tap, tap.…

Tesla drives Luminar lidar sales and Motional pauses robotaxi plans

The newly announced “Public Content Policy” will now join Reddit’s existing privacy policy and content policy to guide how Reddit’s data is being accessed and used by commercial entities and…

Reddit locks down its public data in new content policy, says use now requires a contract

Eva Ho plans to step away from her position as general partner at Fika Ventures, the Los Angeles-based seed firm she co-founded in 2016. Fika told LPs of Ho’s intention…

Fika Ventures co-founder Eva Ho will step back from the firm after its current fund is deployed

In a post on Werner Vogels’ personal blog, he details Distill, an open-source app he built to transcribe and summarize conference calls.

Amazon’s CTO built a meeting-summarizing app for some reason

Paris-based Mistral AI, a startup working on open source large language models — the building block for generative AI services — has been raising money at a $6 billion valuation,…

Sources: Mistral AI raising at a $6B valuation, SoftBank ‘not in’ but DST is

You can expect plenty of AI, but probably not a lot of hardware.

Google I/O 2024: What to expect

Dating apps and other social friend-finders are being put on notice: Dating app giant Bumble is looking to make more acquisitions.

Bumble says it’s looking to M&A to drive growth

When Class founder Michael Chasen was in college, he and a buddy came up with the idea for Blackboard, an online classroom organizational tool. His original company was acquired for…

Blackboard founder transforms Zoom add-on designed for teachers into business tool

Groww, an Indian investment app, has become one of the first startups from the country to shift its domicile back home.

Groww joins the first wave of Indian startups moving domiciles back home from US

Technology giant Dell notified customers on Thursday that it experienced a data breach involving customers’ names and physical addresses. In an email seen by TechCrunch and shared by several people…

Dell discloses data breach of customers’ physical addresses

Featured Article

Fairgen ‘boosts’ survey results using synthetic data and AI-generated responses

The Israeli startup has raised $5.5M for its platform that uses “statistical AI” to generate synthetic data that it says is as good as the real thing.

16 hours ago
Fairgen ‘boosts’ survey results using synthetic data and AI-generated responses

Hydrow, the at-home rowing machine maker, announced Thursday that it has acquired a majority stake in Speede Fitness, the company behind the AI-enabled strength training machine. The rowing startup also…

Rowing startup Hydrow acquires a majority stake in Speede Fitness as their CEO steps down

Call centers are embracing automation. There’s debate as to whether that’s a good thing, but it’s happening — and quite possibly accelerating. According to research firm TechSci Research, the global…

Retell AI lets companies build ‘voice agents’ to answer phone calls

TikTok is starting to automatically label AI-generated content that was made on other platforms, the company announced on Thursday. With this change, if a creator posts content on TikTok that…

TikTok will automatically label AI-generated content created on platforms like DALL·E 3

India’s mobile payments regulator is likely to extend the deadline for imposing market share caps on the popular UPI (unified payments interface) payments rail by one to two years, sources…

India likely to delay UPI market caps in win for PhonePe-Google Pay duopoly

Line Man Wongnai, an on-demand food delivery service in Thailand, is considering an initial public offering on a Thai exchange or the U.S. in 2025.

Thai food delivery app Line Man Wongnai weighs IPO in Thailand, US in 2025

Ever wonder why conversational AI like ChatGPT says “Sorry, I can’t do that” or some other polite refusal? OpenAI is offering a limited look at the reasoning behind its own…

OpenAI offers a peek behind the curtain of its AI’s secret instructions

The federal government agency responsible for granting patents and trademarks is alerting thousands of filers whose private addresses were exposed following a second data spill in as many years. The…

US Patent and Trademark Office confirms another leak of filers’ address data

As part of an investigation into people involved in the pro-independence movement in Catalonia, the Spanish police obtained information from the encrypted services Wire and Proton, which helped the authorities…

Encrypted services Apple, Proton and Wire helped Spanish police identify activist

Match Group, the company that owns several dating apps, including Tinder and Hinge, released its first-quarter earnings report on Tuesday, which shows that Tinder’s paying user base has decreased for…

Match looks to Hinge as Tinder fails

Private social networking is making a comeback. Gratitude Plus, a startup that aims to shift social media in a more positive direction, is expanding its wellness-focused, personal reflections journal to…

Gratitude Plus makes social networking positive, private and personal

With venture totals slipping year-over-year in key markets like the United States, and concern that venture firms themselves are struggling to raise more capital, founders might be worried. After all,…

Can AI help founders fundraise more quickly and easily?