
Ghost Security is an application security company that provides autonomous AppSec with Agentic AI. Their platform aims to discover, test, and mitigate risks in real-time across complex digital environments. Ghost Security differentiates itself by offering code-level context, understanding application logic and data flows rather than just scanning for patterns. This approach aims to eliminate alert fatigue by providing context-driven clarity and focusing on critical vulnerabilities like access control gaps, silent data leaks, and workflow abuse, which are often only found by elite bug bounty hunters. The company also offers AI-driven remediation guidance and suggested code fixes to accelerate vulnerability triage and reduce the mean time to remediation.

Ghost Security is an application security company that provides autonomous AppSec with Agentic AI. Their platform aims to discover, test, and mitigate risks in real-time across complex digital environments. Ghost Security differentiates itself by offering code-level context, understanding application logic and data flows rather than just scanning for patterns. This approach aims to eliminate alert fatigue by providing context-driven clarity and focusing on critical vulnerabilities like access control gaps, silent data leaks, and workflow abuse, which are often only found by elite bug bounty hunters. The company also offers AI-driven remediation guidance and suggested code fixes to accelerate vulnerability triage and reduce the mean time to remediation.
What they do: Autonomous application and API security platform that discovers, tests, and mitigates risks with code-level context and AI-driven remediation guidance.
Funding & stage: $15.0M seed / early VC announced Aug 4, 2022
Investors: 468 Capital; DNX Ventures; Munich Re Ventures; Secure Octane; Tau Ventures
Founders / leadership: Greg Martin (CEO); Josh Larsen (CTO); Eric Cornelius (Chief Product Officer)
Headquarters: Austin, Texas
Protecting modern applications and APIs from attackers by detecting complex logic- and data-flow vulnerabilities.
2022
Application security
15000000.00
Reported combined funding round; reported valuation at the time $50,000,000. Additional investors reported to include Munich Re Ventures, Secure Octane, and Tau Ventures.
“468 Capital; DNX Ventures; Munich Re Ventures; Secure Octane; Tau Ventures”