Developer-focused infrastructure safety platform Mondoo raises $15M

Mondoo, an under-the-radar infrastructure safety platform geared toward developer operations (DevOps) groups, has raised $12 million in a sequence A spherical of funding led by European VC Atomico and revealed a beforehand undisclosed $3 million seed spherical of funding that closed again in April.

The corporate, which has places of work in San Francisco and Berlin, launched its platform out of stealth simply three weeks in the past. It constitutes a part of a rising development within the cybersecurity sphere, which has seen safety groups more and more share duties for safeguarding firm infrastructure with builders.

“Our objective is to carry DevOps and safety groups nearer collectively and assist them safe their environments,” Mondoo CEO and cofounder Soo Choi-Andrews informed VentureBeat.

Mondoo was based in 2020 by former Googlers Choi-Andrews and Dominik Richter, together with Christoph Hartmann, who had labored alongside his fellow cofounders a number of years earlier than at DevOps software company Chef Software.

Backside up

The “bottom-up” cybersecurity strategy is maybe greatest exemplified by Snyk, which targets its open supply safety scanning smarts at builders slightly than safety groups — this helps catch points in actual time because the developer codes, slightly than later, after they’re pushing into the reside codebase. For context, Snyk raised $375 million in fresh capital simply final month and is now valued at $8.6 billion.

Mondoo, for its half, is a cloud-native safety platform that offers infrastructure builders automated danger evaluation and insights into all their business-critical infrastructure, together with private and non-private cloud environments like AWS, Azure, Google Cloud, and VMWare; Kubernetes clusters reminiscent of Amazon EKS and Google Kubernetes Engine; servers and endpoints operating Home windows, Linux, and MacOS; and software program provide chain companies like GitHub, Jenkins, and GitLab.

This highlights a significant promoting level for Mondoo. Though it touts itself as a “cloud-native” safety and vulnerability danger administration platform, it’s in actual fact suited to companies that run a hybrid infrastructure, giving DevOps engineers the instruments to automate safety assessments and uncover hidden dangers all over the place.

For instance, customers can join Mondoo whereas operating on an AWS surroundings to check their firm’s cloud safety posture and the workloads that run on it and immediately discover vulnerabilities throughout their working techniques and digital machines — whereas pushing higher-priority points to the highest of the record to analyze. Mondoo can even determine compliance and coverage violations, whereas customers can extract key knowledge about their infrastructure and write customized insurance policies.

Above: Mondoo: Asset vulnerabilities

By way of the aggressive panorama, Mondoo encroaches on an area that counts well-established names reminiscent of Rapid7, Qualys, and Tenable’s Nessus, although it additionally jibes with newer upstarts reminiscent of Orca, Wiz, and Lacework — each of which has raised sizable sums of money this year.

However Mondoo stated it’s carving out a distinct segment by not solely aiming its platform at builders, but in addition focusing on a broad gamut of use circumstances as an alternative of a single factor, reminiscent of cloud safety posture administration.

“Mondoo focuses on the DevOps viewers and helps them to determine and act on points of their fleet and lift the safety baseline throughout all applied sciences,” Choi-Andrews stated. “In contrast to rivals, we help vulnerability, compliance, safety, and greatest practices throughout on-prem, servers, cloud, VMs, containers, Kubernetes, SaaS companies, and APIs.”

For now, Mondoo is obtainable underneath a software-as-a-service (SaaS) subscription, which includes a basic free plan with restricted cloud accounts and property, although the corporate famous that it intends to supply a self-hosted possibility within the close to future.

Except for Atomico, Mondoo has ushered in a slew of different institutional and angel buyers throughout its current seed and sequence A rounds, together with Firstminute Capital, System.One, MongoDB chair Tom Killalea, Intuit CTO Marianna Tessel, Google product VP Bradley Horowitz, and Puppet cofounder Andrew Clay Shafer.