CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.
Aembit, an identity platform that lets DevOps and Security teams discover, manage, enforce, and audit access between federated workloads, announced its official launch alongside $16.6M in seed financing from cybersecurity specialist investors Ballistic Ventures and Ten Eleven Ventures.
Aembit helps companies apply a zero trust security framework to workload access, similar to existing solutions for workforce access, by providing seamless and secure access from workloads to the services companies depend on, like APIs, databases, and cloud resources.
Aembit solves the problem of secure access between workloads with a cloud-based platform that is easy for DevOps and Security teams to deploy and frictionless for developers to adopt, letting teams focus on managing access, not secrets. Aembit's pioneering approach leverages new techniques, such as secretless authentication and credential providers, as well as no-code integrations to simplify secure access for developers. With Aembit, teams can facilitate safe application development and delivery in today's distributed application environment, including the following use cases:
- Secure access between workloads and custom APIs, API gateways, or APIs from third-party SaaS providers;
- Secure access between workloads and databases, data warehouses, and data lakes; and
- Secure access between workloads in multi-cloud environments.
Co-founders David Goldschlag and Kevin Sapp have worked together for over 17 years, and have a history of solving challenging problems in the IAM space. Their experience includes founding New Edge Labs, which became Netskope's Zero Trust Network Access (ZTNA) offering. As developers and engineers, Goldschlag and Sapp have significant practical experience and empathy for the workload identity challenges encountered by DevOps, Developer, and Security teams. "We see ourselves in our customers because we have been in their shoes. We're excited to be able to offer a solution that makes secure access easy and scalable for DevOps and Developer teams, while giving Security teams visibility and audit capabilities," said Goldschlag, Aembit's CEO.
"At Ten Eleven, we're always looking for innovations that can make cybersecurity implementation more seamless and comprehensive for organizations. Identity is now understood to be foundational for securing human access, and now is the time to use Identity to secure non-human access too. The Aembit founders are the team most uniquely suited to solving this important challenge. We can't wait to see them grow their product and company over the next few years," said Mark Hatfield, Co-founder and General Partner at Ten Eleven Ventures.
"Enterprises have spent significant resources securing the connections between people and the software they use. However, as businesses move to the cloud, a new and fast growing attack surface has emerged. The mesh of workload-to-workload connections created when software talks to other software need to be identified, secured and managed. Aembit is defining this new category of Workload IAM to defend enterprises' most critical digital assets. It's been an honor to work with the Aembit founders since day 1 and to continue to support them on their journey," said Jake Seid, Co-founder and General Partner of Ballistic Ventures.
DevOps teams can secure their workloads with Aembit for free.
Industry News
Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.
Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.
LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.
Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.
Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.
Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
Akamai Technologies introduced App & API Protector Hybrid.
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).
Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.