depthfirst, a startup that uses AI agents to find and fix software vulnerabilities, raised a $40m Series A, announced on 14 January 2026. Accel led the round, according to Built In and SiliconANGLE. No valuation was disclosed.
Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC and SV Angel also took part. SiliconANGLE listed Jeff Dean, Kirsten Green, Colin Evans, Logan Kilpatrick and Julian Schrittwieser among the angel investors.
“We've entered an era where software is written faster than it can be secured.”Qasim Mithani, Co-founder and CEO, depthfirst
What depthfirst does
Built In described the company's product as a platform called General Security Intelligence. It uses custom AI agents that run around the clock to find, triage and fix vulnerabilities across a customer's software and infrastructure.
SiliconANGLE reported that depthfirst was founded in 2024 and launched publicly roughly four months before the funding announcement. EE News Europe reported that it is based in San Francisco and was founded by former staff of Google DeepMind, Databricks and Faire, and named Qasim Mithani as co-founder and chief executive. Headcount was not disclosed.
According to EE News Europe, the platform maps an organisation's systems end to end and works continuously, without relying on static rules or narrow scans. It models code, system context and threat scenarios. Mithani said: "We've entered an era where software is written faster than it can be secured." RegTech Analyst added that the company is an applied AI lab and reports strong results on the CyberGym benchmark.
Customers and claimed results
SiliconANGLE named four customers: Lovable, Supabase, Moveworks and AngelList. The company says its agents found eight times as many true-positive vulnerabilities as traditional static analysis tools and cut false positives by 85%. Those are depthfirst's own figures and the articles did not describe how they were measured.
Alberto Martinez, head of security at AngelList, said that "Depthfirst felt like adding an autonomous senior product-security engineer to our team at AngelList".
Damian Hasse, chief information security officer at Moveworks, said the agents find code defects and complex threats such as backdoors and malware, and also offer fixes. Martinez of AngelList said the product has doubled the efficiency of his security-engineering team. Both are customer testimonials issued with the announcement.
What the money is for
Built In reported that the Series A funding will support the company's research and development, go-to-market efforts and hiring. SiliconANGLE specified that the hiring will cover applied research, engineering, product and sales roles.
RegTech Analyst said the company also plans to keep building agents that find complex vulnerabilities earlier in the software lifecycle. The articles did not mention earlier funding rounds or a total raised, so no funding history is listed.
Who invested
Accel, which led the round, was represented in the announcement by partner Sara Ittelson. She said depthfirst has the industry background and team best poised to transform what she called a $400bn corner of the enterprise market, a market-size estimate that comes from the investor rather than from independent analysis.
The other institutional investors are Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC and SV Angel, and the individual backers are the five angels SiliconANGLE listed.