Security
Why we invest
The rise of the cloud, DevOps, and AI has ushered in a wave of innovation and productivity but also massively widened the attack surface and created entirely new threat vectors. Security remains a stalwart top-budget item for enterprises of all sizes as savvy attackers continue to find ways to expose vulnerabilities. Assisted by a CISO Advisory Group composed of security leaders from top public and private companies, Madrona partners with founders developing next-generation solutions to combat these threats and protect users and organizations across all environments and modalities.
Stacklok’s
Craig McLuckie
on solving open-source security challenges Security
- Clerk is the drop-in authentication and user management solution for the modern web, tuned for React and Next.js.Initial Investment2023Clerk is the drop-in authentication and user management solution for the modern web, tuned for React and Next.js.
-
Codified provides a simple, fast experience for tools and humans to request access to data, delivering customers the ability to access data in accordance with all the rules of the company.
Initial Investment2023Codified provides a simple, fast experience for tools and humans to request access to data, delivering customers the ability to access data in accordance with all the rules of the company.
- Cohesity is a leader in AI-powered data security and management. Aided by an extensive ecosystem of partners, Cohesity makes it easy to secure, protect, manage, and get value from data — across the data center, edge, and cloud. Cohesity helps organizations defend against cybersecurity threats with comprehensive data security and management capabilities, including immutable backup snapshots, AI-based threat detection, monitoring for malicious behavior, and rapid recovery at scale. Cohesity solutions can be delivered as a service, self-managed, or provided by a Cohesity-powered partner.Initial Investment2024Cohesity is a leader in AI-powered data security and management. Aided by an extensive ecosystem of partners, Cohesity makes it easy to secure, protect, manage, and get value from data — across the data center, edge, and cloud. Cohesity helps organizations defend against cybersecurity threats with comprehensive data security and management capabilities, including immutable backup snapshots, AI-based threat detection, monitoring for malicious behavior, and rapid recovery at scale. Cohesity solutions can be delivered as a service, self-managed, or provided by a Cohesity-powered partner.
- Eclypsium’s cloud-based platform identifies, verifies, and fortifies firmware in laptops, servers, network gear, and connected devices. The Eclypsium platform secures your device supply chain by monitoring devices for threats, critical risks, and patching firmware across the entire device fleet.Initial Investment2018Eclypsium’s cloud-based platform identifies, verifies, and fortifies firmware in laptops, servers, network gear, and connected devices. The Eclypsium platform secures your device supply chain by monitoring devices for threats, critical risks, and patching firmware across the entire device fleet.
- ExtraHop provides cloud-native network detection and response that helps you quickly investigate threats, deliver critical applications, and secure your investment in the cloud.Initial Investment2007ExtraHop provides cloud-native network detection and response that helps you quickly investigate threats, deliver critical applications, and secure your investment in the cloud.FoundersJesse Rothstein
Raja MukerjiInvestment JourneyAcquired by Bain/Crosspoint 2021Initial Investment2007 - Icebrg provides next-generation network security.Initial Investment2014Icebrg provides next-generation network security.FoundersWilliam Peteroy
Josh CarlsonInvestment JourneyAcquired by Gigamon 2018Initial Investment2014 - Integris was a data risk intelligence solution that enables companies to discover, classify and control how they use customer data.Initial Investment2016Integris was a data risk intelligence solution that enables companies to discover, classify and control how they use customer data.FoundersKristina Bergman
Uma Raghavan
Raghuram GollamudiInvestment JourneyAcquired by OneTrust 2020Initial Investment2016 - Mobilisafe provided a simple yet powerful solution for companies to understand and manage the risk of personal mobile devices coming to their corporate networks.Initial Investment2011Mobilisafe provided a simple yet powerful solution for companies to understand and manage the risk of personal mobile devices coming to their corporate networks.FoundersDirk Sigurdson
Giri SreenivasInvestment JourneyAcquired by Rapid7 2012Initial Investment2011 - PlexTrac is a modern collaboration and workflow automation platform for cybersecurity teams.Initial Investment2021PlexTrac is a modern collaboration and workflow automation platform for cybersecurity teams.
- Stacklok builds products that help developers securely develop and deploy software. Trusty is a free-to-use service that helps developers vet the safety and trustworthiness of open-source packages as they're importing them into their code. Minder is an open-source platform that helps software project owners automate their security posture by applying and continuously enforcing security policies and best practices across groups of repos.Initial Investment2023Stacklok builds products that help developers securely develop and deploy software. Trusty is a free-to-use service that helps developers vet the safety and trustworthiness of open-source packages as they're importing them into their code. Minder is an open-source platform that helps software project owners automate their security posture by applying and continuously enforcing security policies and best practices across groups of repos.
- Tigera provides the industry’s only active Cloud- Native Application Protection Platform (CNAPP) with full-stack observability for containers, Kubernetes, and cloud. The company’s platform prevents, detects, troubleshoots, and automatically mitigates exposure risks of security issues in build, deploy, and runtime stages. Tigera delivers its platform as a fully managed SaaS (Calico Cloud) or a self-managed service (Calico Enterprise). Its open-source offering, Calico Open Source, is the most widely adopted container networking and security solution. Tigera’s platform specifies security and observability as code to ensure consistent enforcement of security policies, which enables DevOps, platform, and security teams to protect workloads, detect threats, achieve continuous compliance, and troubleshoot service issues in real time. Powering more than 100M containers across 2M+ nodes in 166 countries, Calico software is supported across all major cloud providers and Kubernetes distributions, and is used by leading companies including AT&T, Discover, Merck, ServiceNow, HanseMerkur, RealPage, L3Harris, and Mindbody.Initial Investment2017Tigera provides the industry’s only active Cloud- Native Application Protection Platform (CNAPP) with full-stack observability for containers, Kubernetes, and cloud. The company’s platform prevents, detects, troubleshoots, and automatically mitigates exposure risks of security issues in build, deploy, and runtime stages. Tigera delivers its platform as a fully managed SaaS (Calico Cloud) or a self-managed service (Calico Enterprise). Its open-source offering, Calico Open Source, is the most widely adopted container networking and security solution. Tigera’s platform specifies security and observability as code to ensure consistent enforcement of security policies, which enables DevOps, platform, and security teams to protect workloads, detect threats, achieve continuous compliance, and troubleshoot service issues in real time. Powering more than 100M containers across 2M+ nodes in 166 countries, Calico software is supported across all major cloud providers and Kubernetes distributions, and is used by leading companies including AT&T, Discover, Merck, ServiceNow, HanseMerkur, RealPage, L3Harris, and Mindbody.
- As teams across industries adopt AI, WhyLabs enables them to operate with certainty by providing model monitoring, preventing costly model failures, and facilitating cross-functional collaboration. Incubated at the Allen Institute for AI, WhyLabs is a privately-held, venture-funded company based in Seattle.Initial Investment2020As teams across industries adopt AI, WhyLabs enables them to operate with certainty by providing model monitoring, preventing costly model failures, and facilitating cross-functional collaboration. Incubated at the Allen Institute for AI, WhyLabs is a privately-held, venture-funded company based in Seattle.FoundersAlessya Visnjic
Sam Gracie
Andy Dang
Maria KaraivanovaInitial Investment2020