Safedep
safedep.io
Actively hiring
Cybersecurity
Supply Chain
DevSecOps
As featured in
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
Funding and backers
Total raised
$350k
1 round on record
Latest round
$350k
Convertible Note · Dec 2024 · 21 mo ago
The money's age
Due for its next round
21 months since the last round · not hiring
Momentum
30/100
in the news, rising traction
Last sign of life
2 mo ago
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
Sep 21
On the Hacker News front page Why does mathmain need an encrypted loader? · 138 points
May 19
On the Hacker News front page Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised · 391 points
Apr 2, 2025
Launched on Hacker News Show HN: Gitlab CI Component for Vet – Protect CI Pipelines from Vulnerable OSS
Dec 21, 2024
Raised a round Convertible Note $350k · SEC Form D
2024
Founded
Tractionpublic signals, read monthly
Funding rounds
| Round | Date | Amount | Investors | Source |
|---|---|---|---|---|
| Convertible Note | Dec 2024 | $350k | — | SEC Form D |
Registers and programsofficial lists and records that name the company
| Legal entity | SafeDep Inc. | SEC Form D |
Founders and leadersfrom filings, registers and the company's site
Abhisek DattaExecutive Officer, DirectorSEC Form D
Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
Detect, prevent, and respond to software supply chain attacks. End-to-end protection for AI agents, developer machines, open source…
Infisical is an open-source security infrastructure platform that helps developers securely manage secrets, certificates, and privileged…
CRACI is a cybersecurity platform focused on helping companies meet regulatory requirements (like the EU Cyber Resilience Act) by…
Black Duck is a leading application security enterprise specializing in software supply chain security and open-source risk management. The…
GitLab中文官网提供企业级源代码管理、GitLab CI/CD 与 DevSecOps 全流程服务。支持私有化部署与 SaaS，内置 AI 辅助开发，加速软件高质量交付。立即免费试用！.
Gomboc is an AI Code Security Assistant (ACSA) that scans Infrastructure-as-Code and delivers deterministic, merge-ready remediation in…
News
keyv and cacheable npm compromise: 400+ packages
An npm worm published 2,234 poisoned versions across 444 package names. Its install script stole credentials and ran a command when GitHub revoked a token.
Read more
Report
Official jscrambler npm Package Compromised Across Multiple Releases
The official jscrambler npm package (60K monthly downloads) was trojanized starting at 8.14.0 through an npm account or CI compromise. The attacker…
Read more
Report
astro.config.mjs Supply Chain Attack via Blockchain C2
An obfuscated IIFE hidden in astro.config.mjs fires at every build, beacons an HTTP C2, and pulls staged commands from a Tron-to-BSC blockchain dead drop.
Read more
Report
Report
Inside the Miasma Software Supply Chain Attack Toolkit
The Miasma worm source code appeared on GitHub through compromised developer accounts. The codebase is a full supply chain attack toolkit with credential…
Read more
Report
Config Files That Run Code: Supply Chain Security Blindspot
Editor and package-manager config files auto-execute commands when a developer opens a folder or installs dependencies. The Miasma worm wired one dropper into…
Read more
Report
Miasma Worm Targets AI Coding Agents via GitHub Repos
A Miasma worm variant injects a 4.3 MB dropper into GitHub repos across multiple maintainers, wiring it to auto-run through Claude Code, Gemini, Cursor, and…
Read more
Report
Mini Shai-Hulud "Miasma: The Spreading Blight" Hits @redhat-cloud-services: Multiple Packages at Risk
The attacker compromised the @redhat-cloud-services GitHub Actions OIDC trusted publisher to ship [email protected] with a Mini Shai-Hulud worm. The same…
Read more
Report
Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace
Deep technical analysis of MicrosoftSystem64, an 81 MB Node.js SEA binary deployed via malicious npm packages. This RAT steals browser credentials, 80+ crypto…
Read more
Report
Megalodon: Mass GitHub Repo Backdooring via CI Workflows
Over 5,700 malicious commits were pushed to GitHub repositories on May 18, 2026, replacing GitHub Actions workflows with base64-encoded secret exfiltration…
Read more
Report
Show more news
People
Abhisek Datta
Executive Officer, Director
Names and roles come from public filings, company registers and the company's own site. Is this you? Correct or remove · How we handle this data
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
0
Countries
1
Dover
United States
HQ
Financials
Total raised
$350k
Latest round
Convertible Note
Funding rounds
1
Funding rounds
| Round | Announced | Amount | |
|---|---|---|---|
| Convertible Note | 2024 | $350k | Details |