Loading organizations...
Archipelo is a technology company.
Archipelo has raised $20.0M across 2 funding rounds.
Key people at Archipelo.
Archipelo has raised $20.0M in total across 2 funding rounds.
Archipelo delivers a Developer Security Posture Management (DevSPM) platform, securing software by observing its creation. The platform establishes an observability layer, capturing developer actions and tool inventory throughout the software development lifecycle. It correlates these actions with security signals, linking scan results to developer-attributed actions, providing crucial upstream security context.
Dom Sagolla and Matthew Wise co-founded Archipelo in 2019. Their founding insight recognized that traditional security tools identify code vulnerabilities but lack attribution to specific developer actions. Archipelo was formed to address this gap, building a system tracking developer activities and their security implications across the development pipeline.
Security, governance, risk, and engineering teams utilize Archipelo's platform to proactively identify and mitigate software risks. The company's vision is to establish comprehensive, developer-attributed provenance for all software creation, including human and AI-generated code. This empowers teams to analyze findings, enhancing software security, supporting compliance.
Archipelo has raised $20.0M in total across 2 funding rounds.
Archipelo's investors include 10X Capital, 2.12 Angels, Altai Ventures, Andreessen Horowitz, Jean de Fougerolles, B Capital Group, Blockchain.com Ventures, Bonfire Ventures, Coinbase Ventures, Correlation Ventures, Electric Capital, Equity Alliance.
Key people at Archipelo.
Archipelo is a San Francisco-based cybersecurity startup founded in 2020 that provides a Developer Security Posture Management (DevSPM) platform to secure software at its source by monitoring developer actions, AI-generated code, and tools throughout the software development lifecycle (SDLC).[1][2][3][5] The platform analyzes open-source packages, detects zero-day attacks, enforces compliance, automates governance, and integrates seamlessly into CI/CD pipelines, IDEs, and browsers to offer real-time insights, risk detection, and developer performance analytics for enterprises in finance, tech, and defense.[1][3][5] With $12M raised in seed funding (including an $8M round three months ago), Archipelo serves security, engineering, and GRC teams at Fortune 500 companies, enabling proactive risk mitigation before vulnerabilities reach production and fostering a culture of developer accountability.[1][3][4]
Archipelo was founded in 2020 by Matthew Wise (CEO & Co-Founder) and a team of experts from NASA, Department of Defense, AWS, Google, Cisco, Facebook, Harvard, and MIT, emerging from stealth in early 2025 with $12M in funding led by Dell Technologies Capital and investors like Zoom CEO Eric Yuan, Andy Bechtolsheim, Bill Tai, Nima Capital, and HackVC.[1][3][4] The idea stemmed from recognizing that traditional security tools (like ASPM, CSPM, CNAPP) react too late, while AI-assisted coding amplifies risks in developer workflows—prompting a shift to "security at the source" via DevSPM.[3][4] Early traction came from a 20-person all-remote team across 9 countries building for Fortune 500 clients, with recent hires like Paul (from PANW and Aqua) advancing the platform amid rapid funding and product momentum.[1][2][3]
Archipelo rides the AI-driven software development boom, where generative AI accelerates coding but introduces unvetted risks in workflows, amplifying supply chain vulnerabilities amid rising zero-day attacks and compliance demands.[3][4] Timing is ideal post-2025 stealth exit, as enterprises adopt DevSecOps amid market forces like SLSA frameworks and regulatory pressures (e.g., NIST), shifting security leftward before breaches cascade to production.[1][5] By redefining developer security as a foundational pillar—alongside cloud/app security—Archipelo influences the ecosystem, enabling scaled innovation for Fortune 500s while competitors like Mend focus narrower on dependencies or SCA.[1][3]
Archipelo is poised to dominate DevSPM as AI coding proliferates, with $12M fueling engineering hires, product expansion (e.g., advanced AI risk monitoring), and GTM to capture enterprises scaling secure innovation.[3][4] Trends like AI governance mandates and zero-trust SDLC will propel growth, potentially evolving Archipelo into a cybersecurity staple—much like early cloud security pioneers—by quantifying developer risk at source and preventing catastrophic breaches in an AI-accelerated world.[1][3] This positions them to lead as software security's next frontier, tying back to their mission: securing code creation to build unbreakable trust.
Archipelo has raised $20.0M across 2 funding rounds. Most recently, it raised $12.0M Pre-Seed in February 2025.
| Date | Round | Lead Investors | Other Investors |
|---|---|---|---|
| Feb 27, 2025 | $12.0M Pre-Seed | ||
| Jul 1, 2021 | $8.0M Seed | 10X Capital, 2.12 Angels, Altai Ventures, Andreessen Horowitz, Jean de Fougerolles, B Capital Group, Blockchain.com Ventures, Bonfire Ventures, Coinbase Ventures, Correlation Ventures, Electric Capital, Equity Alliance, Evolve VC, Flexcap, Forum Ventures, Founders Fund, F Prime Capital, Hack VC, Haun Ventures, INBlockchain, Kindred Ventures, La Famiglia, Lowercarbon Capital, Magma Partners, Maven Ventures, Morpheus Ventures, MS&AD Ventures, Offline Ventures, Oyster Ventures, Pareto Holdings, Recharge Capital, Revel Partners, Ridge Ventures, Saga, Seven Seven Six, Surface Ventures, SV Angel, Tuesday Capital, Valar Ventures, Visionaries Club, White Star Capital, Y Combinator, Anthony Pompliano, Curtis Lee, Drew Houston, Faizan Khan (Unchained Capital), Frederic Kerrest, George Burke, Mei Z., Varsha Rao |