NowSecure, which offers an automated mobile app security testing suite, raises $15M Series B led by ForgePoint Capital, bringing its total funding to over $27M
Kyle Wiggers / VentureBeat :
Context & Ripple Effects
NowSecure's $15M Series B lands mid-way through a sustained funding run in application security tooling: within the surrounding coverage, Pathlock raised $20M for business-app security, Legit Security later took a $40M Series B for code-level vulnerability detection, and SecurityScorecard pulled in a $180M Series E. The category is drawing capital at every layer of the stack.
The lead investor matters as much as the round size: ForgePoint Capital has since doubled down on its security thesis, including a $25M round into phishing-defense firm Area 1 Security a year after this deal, making NowSecure part of a deliberate portfolio build rather than a one-off bet.
First-order effects
- NowSecure gains capital to scale its automated mobile app security testing suite past the $27M total-funding mark, while ForgePoint Capital adds another named asset to its cybersecurity portfolio.
- Mobile app developers and the enterprises that ship their apps get a better-funded incumbent in automated testing, raising the bar for rivals still operating on smaller war chests.
Second-order effects
- Adjacent appsec vendors such as Bright Security, which raised a $20M Series A for dynamic application security testing, now compete against a mobile-specialist peer with fresh Series B money, pushing the whole segment toward faster feature delivery and pricing pressure.
- ForgePoint's repeat deployment pattern signals to other generalist funds that specialist security investors are moving earlier and more often, tightening access to top appsec deals.
Third-order effects
- If the funding cadence holds across code scanning (Legit), runtime testing (Bright), ratings (SecurityScorecard), and mobile (NowSecure), application security consolidates into an automated, continuous-testing market where vendors converge on covering the full development lifecycle rather than single-point tools.
- Dedicated cybersecurity funds like ForgePoint institutionalize as a distinct investor class, structurally shifting which startups get funded and on what timelines compared with generalist venture capital.
The trend: Application security is becoming a continuously funded, automation-first category where specialist investors back layered testing tools that are converging toward full-lifecycle coverage.