Clover Security Ltd., a startup focused on helping developers fix software vulnerabilities, launched today with $36 million in funding.

Notable Capital and Team8 led the round. They were joined by more than a half-dozen other investors including Wiz Inc. co-founders Assaf Rappaport and Yinon Costica, cybersecurity entrepreneur Shlomo Kramer and executives from several publicly traded tech firms.

Some enterprise applications are updated multiple times per week. As a result, manually scanning every code change for potential cybersecurity vulnerabilities can be prohibitively time-consuming. Tel Aviv-based Clover Security has developed a platform that uses artificial intelligence agents to automate the task.

“Teams are moving faster and building more than ever,” said Clover co-founder and Chief Executive Officer Alon Kollmann (pictured, right, with co-founder Or Chen). “Security teams are left alone to manage unprecedented complexity. Clover changes that by helping product security teams scale by working where products start, in design.”

Clover finds cybersecurity gaps by collecting data from the tools a software team uses to build applications. If the platform encounters knowledge gaps, it asks developers to manually upload additional information. It uses the data it collects to map out a company’s cybersecurity policies and find application updates that don’t comply with them.

The platform scans updates before they’re released to prevent vulnerabilities from rolling out to production. According to Clover, its AI can detect if an application change contains a known exploit or lacks essential cybersecurity guardrails. The platform can, for example, identify database implementations that don’t encrypt records at rest.

Clover prioritizes cybersecurity issues based on their severity. The platform takes into account factors such as the number of users affected by a vulnerability and the sensitivity of the application in which the flaw was detected. According to the company, that prioritization helps companies ensure their cybersecurity teams fix the most urgent issues first.

The platform generates remediation suggestions to speed up the debugging process. Companies can customize the generated advice to align it with their internal policies. For example, an enterprise could have Clover recommend that developers implement a specific encryption algorithm in components that store customer data. 

The platform includes a set of features focused specifically on AI security. Clover can identify what AI programming tools are used by a development team and prevent them from implementing insecure code. Additionally, the platform searches applications that use large language models for common AI vulnerabilities.

Clover says its customer base includes multiple Fortune 500 companies. Its platform has also been adopted by Neo4j Inc., Notion Labs Inc. and other heavily-funded enterprise software startups. Kollmann told Axios that Clover will use its funding to double its 40-strong workforce over the next year. 

Photo: Clover