Actively hiring
DevSecOps
Vulnerability Management
Application Security
View 1 job
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Jobs
Financials
Funding and backers
Hiring now
3
+3 posted in 30 days
Backers
2
Evolution Equity Partners, Fusion Fund
Momentum
55/100
hiring for its size, in the news
Last sign of life
this month
a posting or a news item
Tractionpublic signals, read monthly
Web presence
top 0.35%
of 133.2M domains by links, Common Crawl
Hacker News stories
4
best: 60 points
Backed byfrom the funds' portfolios and accelerator catalogs
Investors in similar startupsfunds that back the companies most like this one

backs Black Duck

backs Vicarius
Similar startupsby what they do, their industry and backers

Secure software as fast as you build. Pi's agentic platform eliminates recurring vulnerabilities, automates remediation, and brings AI code…

AppSecAI turns findings from any code scanner into validated, tested code fixes your security team delivers — automated vulnerability…

Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams…

32 security scanners - SAST, SCA, DAST, secrets, IaC, ASPM, CSPM - in one pass under 60s. Securitron AI cuts 93% of false positives and…

Enhance your application security with Arnica's automated tools. Secure your code, streamline development processes, and ensure compliance…

OX Security builds an application security posture management platform. Its system traces risk across the entire software pipeline. The…
Overview
Bright Security combines DAST, runtime validation & up to 98% automated remediation to secure apps, APIs & AI code - without flooding developers with noise.
News
Enterprise DAST and Business Logic Testing: Why Most Scanners Miss What Attackers Actually Exploit
Enterprise DAST has earned its place in security programs and rightly so. It catches SQL (Structured Query Language) injection, cross site scripting, broken authentication, and the rest of the list of technical flaws without too much trouble. But look at
Read more
Report
AI Security for Regulated Industries Without Higher Costs
Regulated enterprises do not need a separate security stack for every AI application. They need better control over the systems they already run. That distinction matters. When security, compliance, privacy, and engineering teams build separate review pro
Read more
Report
Detecting MCP Session Management Attacks with DAST
Detecting MCP Session Management Attacks with DAST The Model Context Protocol (MCP) gave language-model agents a standard way to talk to servers that expose tools, resources, and prompts. To keep those conversations coherent across many HTTP requests, the
Read more
Report
Detecting ANSI Escape Sequence Injection in MCP Servers with DAST
ANSI escape sequences were designed for terminals, not for language models. They are invisible control codes that tell a terminal to change colors, hide text,
Read more
Report
Enhancing DAST for FHIR: Optimizing Security Testing in Healthcare APIs
Traditional DAST scanners are effective when they understand the application surface they're testing. That works well for common web patterns like REST APIs, GraphQL, gRPC, forms, JSON bodies, and standard authentication flows. But plenty of business-crit
Read more
Report
AI Penetration Testing Works, But Findings Need Runtime Validation
Table Of Contents Introduction - The AI Pentesting Boom Is Real Why AI Penetration Testing Has Become Essential What AI Pentesting Does Exceptionally Well The Gap: Findings Are Not the Same as Verified Risk The Hidden Cost of Acting on Noise Runtime Explo
Read more
Report
AI Driven Product Roadmaps: Turning Security Insights Into Decisions
Table Of Contents Why Product Roadmaps Often Miss Critical Signals Customer Feedback Only Tells Part of the Story Why Security Data Belongs in Product Planning How AI Agents Connect Customer and Security Insights How Bright STAR Turns Security Data Into A
Read more
Report
Automating PCI DSS Mapping with AI for Compliance
Table Of Contents Why PCI DSS Compliance Is Difficult The Gap Between Vulnerabilities and Compliance Common PCI DSS-Related Vulnerabilities Why Compliance Evidence Matters How AI Automates PCI DSS Mapping Benefits of Automated Compliance Mapping Using Bri
Read more
Report
Securing the Company Wallet: How Automated Validation Reduces AppSec Costs
Table Of Contents Why Application Security Is Becoming More Expensive The Hidden Cost of Security Findings Why Traditional Security Testing Creates Waste How Automated Security Validation Helps Protecting Your Budget with Bright STAR Conclusion Why Applic
Read more
Report
Top 5 Workflows to Automate in a Cyber Security Company
Table Of Contents Introduction Application Security Testing and Validation Automation Vulnerability Remediation Tracking and Developer Collaboration Security Reporting and Executive Visibility Employee Onboarding and Knowledge Management Automated Invoice
Read more
Report
Show more news
Tech stack
Technologies named in job postings at Bright Security over the last 12 months, by layer, with the share of postings for each.
Technologies in use
32
Postings analysed
3
Stack modernity
74/100
Languages
JavaScript
Python
PowerShell
TypeScript
Frameworks & libraries
BullMQ
Cypress
Playwright
Puppeteer
Cloud & platforms
AWS
GitHub
Linux
Windows
Sign in to see how your skills match this stack
Sign In
Full Bright Security tech stack
32 technologies · by team · pay by technology · changes · similar stacks
Growth
Hiring Momentum
73/100
Growing
Open positions
3
3 opened / 0 closed in 30 days
Hiring Dynamics
+100%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
Support
33% ▲
Customer Success
33% ▲
Industrial Engineering
33% ▲
Jobs
≈ $15k – $42k per year (Estimated) • Remote (Bosnia and Herzegovina) • Full-Time • 1+ year exp • Bosnia and Herzegovina
CI/CD
Jenkins
GitHub
Linux
Windows
QA
Swagger
Apply

Evolution Equity Partners
Fusion Fund 


