What it sells
EU cybersecurity compliance platform.
Business model breakdown
Buyer: who owns the budget?
UnverifiedEngineering, DevOps or product security leads at software and hardware makers shipping products with digital elements to the EU market.
Trigger: what makes them buy now?
Compliance with the EU Cyber Resilience Act and rising CVE volume (site cites 268 CVEs published per day in 2026, +104% vs 2025).
Workflow: what inputs become what output?
Builds run on CRACI secure runners that record every package during the build, producing a complete SBOM; policy gate stops builds with critical CVEs; vulnerability monitoring re-checks released SBOMs; fixes trigger rebuilds.
Economics: what it saves and how it charges
Usage-based CI runner minutes with SBOM, monitoring and response bundled in (no per-SBOM charge); Enterprise on annual contracts.
Distribution: how it reaches customers
Self-serve signup ("Run your first build", no credit card), startup program, plus "Book a demo"/"Talk to sales" for Enterprise.
Funding history and coverage
| Round date | Stage | Amount | Investors | Source |
|---|---|---|---|---|
| 2026-05-19 | — | €1.4M | — | news.google.com |
Profiles summarize public reporting and company websites. Business-model notes are MaxBC's reading of that material, not confirmed facts; unknowns are left blank rather than guessed. Updated 2026-10-12.