Endor Labs, which scans AI-generated code for vulnerabilities, raised a $93M Series B, taking its total funding to $163M, and says it performs 1M+ weekly scans
Context & Ripple Effects
Endor Labs had already moved from an open-source dependency security offering to code and pipeline governance, backed by a $70M Series A. This round extends the company’s financing story as its product is framed around securing AI-generated code.
The reported scan volume gives the funding event an operational dimension: Endor is positioning vulnerability scanning as a recurring engineering workflow rather than a one-off audit.
First-order effects
- Endor Labs gains $93M in new Series B capital and reports more than 1 million weekly scans, strengthening its position with buyers evaluating tools for AI-generated code.
- Security and engineering teams using Endor have a vendor claiming production-scale scanning focused on vulnerabilities in machine-assisted software output.
Second-order effects
- The round raises the competitive bar for code-security vendors. Ox Security’s subsequent $60M Series B for scanning AI- and human-generated code illustrates that adjacent providers are also funding scale and breadth.
- As AI-generated code enters more development pipelines, buyers are likely to compare scanning tools on workflow coverage and demonstrated usage, not only on their ability to identify vulnerabilities.
Third-order effects
- If adoption continues, application-security platforms may be reorganized around continuous governance of code regardless of whether a human or an AI produced it, consolidating previously separate dependency, pipeline, and vulnerability checks.
- Capital flowing to both detection and remediation-oriented vendors—including Cogent Security’s AI-agent approach to remediation decisions—points toward a security stack in which prioritization and response become as important as finding flaws.
The trend: AI-assisted software development is expanding the market for continuous code governance, pushing security vendors to prove scale across detection, prioritization, and remediation.