Newsroom
Corgea in the news.
Analyst research, press coverage, and company announcements, with the source linked for every entry. 15 items across 11 outlets since our public launch.
Featured
All coverage
2026
-
IDC Innovators: Autonomous Penetration Testing for DevSecOps, 2026
IDC profiles seven vendors, including Corgea, building AI agent–driven autonomous penetration testing that keeps pace with fast release cycles, API-heavy architectures, and AI-generated code. Corgea’s second IDC Innovator recognition.
See the credential -
Launch YC: Corgea: Agentic Pentesting
Corgea launches AI Pentest on Y Combinator: an autonomous penetration testing engine that reasons about an application instead of running a checklist, and finishes in hours rather than weeks.
AI Pentest -
IDC Market Glance: DevSecOps, 2Q26
Corgea is included in IDC’s current-state taxonomy of key DevSecOps vendors, spanning secure-by-design, application security testing, application protection, API security, and application vulnerability management.
-
2026 Latio Application Security Report
Latio names Corgea an Application Security AI Platform Innovator. The report draws on interviews with more than 100 vendors, practitioners, and buyers to map how AI is reshaping scanning, remediation, and code-to-cloud visibility.
See the credential
2025
-
The 9 top cybersecurity startups from Disrupt Startup Battlefield
TechCrunch’s pick of the standout cybersecurity companies from the Startup Battlefield 200, highlighting Corgea’s AI-driven code scanning, detection of broken security logic such as authentication, and agents that secure code across popular languages.
-
The 2025 Startup Battlefield 200 is here — see who made the cut
Corgea is selected for the Startup Battlefield 200 in the cybersecurity category: TechCrunch’s curated list of early-stage startups chosen to exhibit at Disrupt 2025 in San Francisco.
-
2025 Latio AI Security Report
Corgea is recognized as an AI Security Leader in Latio’s map of the AI security market, which sorts vendors across end-user data control, AI posture management, and AI application protection.
See the credential -
Corgea BLAST uncovers hidden vulnerabilities in code
Help Net Security covers the launch of BLAST, Corgea’s AI-driven detection engine that pairs business-logic-aware vulnerability discovery with automated remediation.
-
Corgea Launches BLAST: Transforming Cybersecurity with AI-Driven Code Security Platform
San Francisco. Corgea announces the public launch of BLAST (Business Logic Application Testing), combining LLMs with AST-based analysis to find and fix the vulnerabilities traditional scanners miss.
Read the announcement -
Corgea Named Best SAST Auto-Fixing Solution in Recent Analyst Report
Latio’s Actually Useful Product Guide for Q1 2025 scores Corgea’s multi-step agentic fixes 9.4/10 for accuracy, with fixes generated for more than 77% of findings.
2024
-
AI-driven cybersecurity startup Corgea raises $2.6m in seed round
Coverage of Corgea’s seed round led by Shorooq Partners with participation from Y Combinator, Propeller, Decacorn Capital, and Unbound Ventures.
-
Cybersecurity Startup Corgea Secures $2.5M In Seed Funding Led by Shorooq Partners
Forbes Middle East reports on Corgea’s seed round, led by Abu Dhabi’s Shorooq Partners, with Y Combinator and angels including YouTube co-founder Jawed Karim and SecurityScorecard co-founder Sam Kassoumeh.
-
IDC Innovators: DevSecOps Automated Remediation, 2024
IDC profiles four start-ups delivering DevSecOps automated remediation, naming Corgea an IDC Innovator for reducing application security vulnerability backlogs with contextual, code-specific fixes.
Read the announcement -
The Biggest Mistake Security Teams Make When Buying Tools
A contributed column from Corgea’s founder on why security teams buy for detection and forget about the cost of acting on what they find.
-
Launch HN: Corgea (YC S23) – Auto fix vulnerable code
Corgea’s public launch on Hacker News: AI-generated fixes for findings from existing SAST scanners, covering roughly 900 CWE types.
Nothing in this category yet.
Media resources
For writers and partners
Boilerplate, fast facts, and logos. Facts here match what we report to analysts and investors.
Boilerplate
Corgea is an AI-native application security platform that finds exploitable risk in code, dependencies, and cloud configuration, then delivers review-ready fixes in the developer workflow. Its BLAST engine pairs large language models with AST-based analysis to detect business-logic vulnerabilities that traditional scanners miss, and its agentic AI pentest validates exploitability in hours rather than weeks. Founded in 2023 and backed by Y Combinator, Corgea is a two-time IDC Innovator and is headquartered in San Francisco.
Fast facts
- Founded
- 2023
- Headquarters
- San Francisco, California
- Founder & CEO
- Ahmad Sadeddin
- Accelerator
- Y Combinator, Summer 2023
- Investors
- Shorooq Partners, Y Combinator, Decacorn, Unbound Ventures, Propeller Ventures
- Product
- AI SAST, dependency scanning, secrets, IaC, and agentic AI pentesting
Ready to move
Start Securing
Free, no credit card | First findings in minutes