Depthfirst
depthfirst.com
Actively hiring
Penetration Testing
Cybersecurity AI
Application Security
As featured in
View 12 jobs
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Jobs
Financials
Funding and backers
Total raised
$120M
2 rounds on record
Latest round
$80M
Venture round · Mar 2026 · 6 mo ago
Team
201-500
employees, estimated range
Hiring now
19
+3 posted in 30 days
Backers
3
Accel, Crew Capital
The money's age
Fresh money
6 months since the last round · and hiring
Momentum
41/100
hiring for its size, in the news, fresh money
Last sign of life
this month
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
Jun 12
On the Hacker News front page Twenty One Zero-Days in FFmpeg · 289 points
Mar 31
Raised a round Venture round $80M · led by Meritech Capital · Pulse 2.0
Feb 1
On the Hacker News front page 1-Click RCE to steal your Moltbot data and keys · 178 points
Jan 14
Raised a round Series A $40M
2024
Founded
Tractionpublic signals, read monthly
Web presence
top 0.02%
of 133.2M domains by links, Common Crawl
Hacker News stories
19
best: 289 points
Funding rounds
| Round | Date | Amount | Investors | Source |
|---|---|---|---|---|
| Venture round | Mar 2026 | $80M | Meritech Capital lead, Forerunn | Pulse 2.0 |
| Series A | Jan 2026 | $40M | — | businesswire.com |
Backed byfrom the funds' portfolios and accelerator catalogs
Accel 
Forerunner Ventures Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
Seezo is an AI-native application security company that helps engineering and AppSec teams perform contextual, explainable, and…
Terra Security runs agentic penetration testing that adapts to each customer's application instead of following a fixed script. Founded in…
ZeroPath applies artificial intelligence agents to application security testing, reasoning about code the way a human auditor would…
PortSwigger offers tools for web application security, testing, & scanning. Choose from a range of security tools, & identify the very…
AI penetration testing and autonomous security platform that tests your code, APIs, cloud, and infrastructure — and delivers validated…
Hacktron AI is a security company building a system that autonomously reviews code, finds vulnerabilities and writes exploits. Its small…
How Depthfirst hires
Truth index
C 68/100
Ghost roles
53%
Stale roles
0%
Reposted roles
0%
Depthfirst scores C on the Alion truth index (A is best, E worst), measured over 19 open roles re-checked against its own hiring board: 53% look like ghost listings, 0% have gone stale and 0% are the same role posted again. It measures how much of what this employer publishes turns into a real, finite search - not the employer as a workplace. How the index is computed
Overview
Headquartered in San Francisco, California, Depthfirst is an AI-native application security company providing software risk detection and autonomous remediation solutions. The company's platform analyzes source code, business logic, software dependencies, and cloud infrastructure to identify critical vulnerabilities and execute agentic penetration testing. By integrating automated code review and merge-ready pull requests directly into developer workflows, it enables engineering and security teams to validate threats and remediate vulnerabilities across their software pipeline.
News
Containers Are No Longer a Security Boundary depthfirst
As AI accelerates kernel vulnerability discovery and exploitation, the barrier to escaping containers by attacking kernel has fallen so significantly that we must assume attackers can do so at will.
Read more
Report
Introducing dfs-large1: A New Frontier for Cybersecurity depthfirst
dfs-large1 is our most capable model to date, designed for vulnerability discovery and validation across large enterprise repositories. Built on GLM 5.2, it was post-trained inside depthfirst
Read more
Report
Report
depthfirst Launches Dependency Firewall to Block Malicious Packages Before They're Installed
Read more
Report
NGINX Rift
An 18 year old memory corruption flaw in NGINX Plus and NGINX Open Source lets an unauthenticated attacker crash worker processes or execute remote code with crafted HTTP requests.
Read more
Report
NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability depthfirst
We used the depthfirst system to analyze the NGINX source code, and it autonomously discovered 4 remote memory corruption issues, including a critical heap buffer overflow introduced in 2008. We further investigated the exploitability of the issues, and d
Read more
Report
Supporting critical Open Source with $5M credits for vulnerability detection
Up to $5m in depthfirst credits for critical open source projects to discover, validate, and remediate vulnerabilities before they can be exploited.
Read more
Report
depthfirst Commits up to $5M in Credits to Help Open Source Software Find and Fix Zero Day Vulnerabilities
Read more
Report
Depthfirst raises $80M to expand AI-native security platform and train domain-specific models
Depthfirst raises $80M to expand AI-native security platform and train domain-specific models - SiliconANGLE
Read more
Report
Depthfirst: $80 Million Raised For AI-Native Cybersecurity Platform Expansion
depthfirst, an applied AI lab focused on securing software systems, announced it has raised $80 million in a Series B funding round, bringing its total capital raised to $120 million. The round was led by Meritech Capital, with participation from Forerunn
Read more
Report
Show more news
Tech stack
Technologies named in job postings at Depthfirst over the last 12 months, by layer, with the share of postings for each.
Technologies in use
28
Postings analysed
16
Stack modernity
87/100AI adopter
Languages
Python19%
SQL13%
JavaScript6%
TypeScript6%
Frameworks & libraries
Next.js6%
React.js6%
Redux6%
Tailwind CSS6%
Databases
PostgreSQL6%
Snowflake6%
Cloud & platforms
Databricks100%
AWS13%
SIEM13%
Azure6%
AI & ML
Claude6%
LLM6%
Sign in to see how your skills match this stack
Sign In
Full Depthfirst tech stack
28 technologies · by team · pay by technology · changes · similar stacks
Growth
Hiring Momentum
61/100
Growing
Open positions
19
3 opened / 0 closed in 30 days
Median time-to-fill
59 days
faster than 24% of the market
ATS activity
Every ~4 hours
Today
Hiring Dynamics
+100%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
HR
22% ▼
Sales
22% ▼
Backend
11% ▲
Security
11% ▲
Design
11% ▲
Marketing
11% ▼
Activity Timeline
Added Okta to stack
Sep 2026
Added Least Privilege to stack
Sep 2026
Added Google Workspace to stack
Sep 2026
Added Claude to stack
Sep 2026
Added IAM to stack
Sep 2026
Added Machine Learning to stack
Sep 2026
Added SIEM to stack
Sep 2026
Added Snowflake to stack
Sep 2026
Added n8n to stack
Sep 2026
Added Agentic Workflows to stack
Sep 2026
Added Jenkins to stack
Sep 2026
Added GitLab to stack
Sep 2026
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
1
Countries
1
Busiest office
San Francisco
San Francisco
United States
HQ
19 open roles 9 posted in 90 days 42% engineering 200-500 est. staff
hires for Backend, Sales, Security
Jobs
≈ $97k – $213k per year (Estimated) • In office • Full-Time • 4+ years exp • San Francisco
Databricks
Apply
≈ $159k – $290k per year (Estimated) • In office • Full-Time • San Francisco
Databricks
AI/ML
Claude
AI Agents
Cybersecurity
Okta
Least Privilege
Management
Google Workspace
Apply
≈ $141k – $273k per year (Estimated) • In office • Full-Time • San Francisco
Databricks
AI/ML
AI Agents
DevOps
AWS
IAM
Apply
≈ $144k – $282k per year (Estimated) • In office • Full-Time • 5+ years exp • San Francisco
Python
Databricks
AI/ML
AI Agents
LLM
DevOps
GCP
Azure
CI/CD
Git
AWS
Apply
≈ $152k – $319k per year (Estimated) • In office • Full-Time • San Francisco
Databricks
AI/ML
AI Agents
Agentic Workflows
Apply
≈ $129k – $255k per year (Estimated) • In office • Full-Time • 3+ years exp • San Francisco
Python
Databricks
AI/ML
AI Agents
Cybersecurity
SIEM
Apply
≈ $120k – $248k per year (Estimated) • In office • Full-Time • 4+ years exp • San Francisco
Databricks
AI/ML
AI Agents
DevOps
CI/CD
Jenkins
GitHub
GitLab
Apply
≈ $107k – $207k per year (Estimated) • In office • Full-Time • 3+ years exp • San Francisco
Python
Databricks
AI/ML
AI Agents
Cybersecurity
SIEM
Apply
≈ $127k – $251k per year (Estimated) • In office • Full-Time • 3+ years exp • San Francisco
JavaScript
TypeScript
PostgreSQL
Databricks
AI/ML
AI Agents
Frontend
Zustand
Redux
Tailwind CSS
Next.js
React.js
Mobile
State Management
Apply
≈ $107k – $207k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • San Francisco
Python
Databricks
AI/ML
AI Agents
Apply
≈ $161k – $302k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • San Francisco
Python
Databricks
AI/ML
Reinforcement Learning
AI Agents
PyTorch
Machine Learning
Apply
≈ $130k – $257k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • San Francisco
Python
JavaScript
TypeScript
PostgreSQL
Redis
Databricks
AI/ML
AI Agents
Frontend
Next.js
React.js
DevOps
AWS
Apply